<updates>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4081</id>
    <title>Security update for dpkg</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1668782590"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664" id="CVE-2022-1664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199944" id="1199944" title="VUL-1: CVE-2022-1664: dpkg: dpkg -- security update" type="bugzilla"/>
    </references>
    <description>This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
</description>
    <pkglist>
      <collection>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="src" src="src/update-alternatives-1.19.0.4-150000.4.4.1.src.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.src.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="x86_64" src="x86_64/update-alternatives-1.19.0.4-150000.4.4.1.x86_64.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="aarch64" src="aarch64/update-alternatives-1.19.0.4-150000.4.4.1.aarch64.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-3555</id>
    <title>Recommended update for aaa_base</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671722436"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199492" id="1199492" title="L3: Some system scripts falsely(?) identify &quot;rootsh&quot; as a restricted shell" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- The wrapper rootsh is not a restricted shell. (bsc#1199492)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.3.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.3.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.3.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.3.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.3.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.3.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.3.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4226</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669396630"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204821" id="1204821" title="Release with version 1.0.0 so to not clash with future SUSEConnect ruby releases" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200803" id="1200803" title="'zypper targetos' fails in Autoyast installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196076" id="1196076" title="SUSE Connect: periodically check status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200994" id="1200994" title="service suseconnect-keepalive.service  does not recognize a configured proxy." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198625" id="1198625" title="Migration from SLE Micro 5.1 to 5.2 fails if registered to SMT server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203341" id="1203341" title="libsuseconnect update causes core dump" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Fix System-Token support in ruby binding (bsc#1203341)
- Use system-wide proxy settings (bsc#1200994)
- Add timer for SUSEConnect --keepalive (bsc#1196076)
- Added support for the System-Token header
- Add Keepalive command line option
- Print nested zypper errors (bsc#1200803)
- Fix migration json error with SMT (bsc#1198625)
- Packaging adjustments (bsc#1204821)
- Add option to run local scc tests
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="src" src="src/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.src.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="x86_64" src="x86_64/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.x86_64.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="aarch64" src="aarch64/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.aarch64.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4205</id>
    <title>Security update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670932158"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201103" id="1201103" title="VUL-0: CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809, CVE-2022-24810: net-snmp: multiple memory handling issues" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-11203" id="SLE-11203" title="https://jira.suse.com/browse/SLE-11203" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805" id="CVE-2022-24805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810" id="CVE-2022-24810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806" id="CVE-2022-24806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809" id="CVE-2022-24809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808" id="CVE-2022-24808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807" id="CVE-2022-24807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807" type="cve"/>
    </references>
    <description>This update for net-snmp fixes the following issues:

  Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203):

  - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access.
  - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT to the nsVacmAccessTable that can cause a NULL pointer dereference.
  - CVE-2022-24806: Fixed an improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously.
  - CVE-2022-24807: Fixed a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access.
  - CVE-2022-24808: Fixed a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference.
  - CVE-2022-24810: Fixed a malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.3.1" arch="x86_64" src="x86_64/libsnmp40-5.9.3-150300.15.3.1.x86_64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.3.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.3" release="150300.15.3.1" arch="src" src="src/net-snmp-5.9.3-150300.15.3.1.src.rpm">
          <filename>net-snmp-5.9.3-150300.15.3.1.src.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.3.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.3-150300.15.3.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.3.1" arch="aarch64" src="aarch64/libsnmp40-5.9.3-150300.15.3.1.aarch64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.3.1.aarch64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.3.1" arch="aarch64" src="aarch64/snmp-mibs-5.9.3-150300.15.3.1.aarch64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4256</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669635534"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2030" id="PED-2030" title="https://jira.suse.com/browse/PED-2030" type="jira"/>
    </references>
    <description>This update for gcc12 fixes the following issues:

This update ship the GCC 12 compiler suite and its base libraries.

The compiler baselibraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 11 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP3 and SP4, and provided in the &quot;Development Tools&quot; module.

The Go, D and Ada language compiler parts are available unsupported via the
PackageHub repositories.

To use gcc12 compilers use:

- install &quot;gcc12&quot; or &quot;gcc12-c++&quot; or one of the other &quot;gcc12-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc12, CXX=g++12 and similar overrides for the other languages.

For a full changelog with all new GCC12 features, check out

	https://gcc.gnu.org/gcc-12/changes.html

</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="src" src="src/gcc12-12.2.1+git416-150000.1.5.1.src.rpm">
          <filename>gcc12-12.2.1+git416-150000.1.5.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="x86_64" src="x86_64/libgcc_s1-12.2.1+git416-150000.1.5.1.x86_64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.5.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="x86_64" src="x86_64/libstdc++6-12.2.1+git416-150000.1.5.1.x86_64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="aarch64" src="aarch64/libgcc_s1-12.2.1+git416-150000.1.5.1.aarch64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.5.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="aarch64" src="aarch64/libstdc++6-12.2.1+git416-150000.1.5.1.aarch64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4262</id>
    <title>Recommended update for lvm2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669697146"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203482" id="1203482" title="lvmlockd is not supporting sanlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199074" id="1199074" title="dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le - ref:_00D1igLOd._5005q4wDqx:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203216" id="1203216" title="killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group" type="bugzilla"/>
    </references>
    <description>This update for lvm2 fixes the following issues:

- Fix terminated lvmlockd not clearing/adopting locks, leading to inability to start volume group (bsc#1203216)
- Fix device-mapper rpm package versioning to prevent migration issues (bsc#1199074)
- Fix lvmlockd to support sanlock (bsc#1203482)
</description>
    <pkglist>
      <collection>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/device-mapper-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/libdevmapper1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.185.1" arch="x86_64" src="x86_64/liblvm2cmd2_03-2.03.05-150400.185.1.x86_64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="src" src="src/lvm2-2.03.05-150400.185.1.src.rpm">
          <filename>lvm2-2.03.05-150400.185.1.src.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="x86_64" src="x86_64/lvm2-2.03.05-150400.185.1.x86_64.rpm">
          <filename>lvm2-2.03.05-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2-device-mapper" epoch="0" version="2.03.05" release="150400.185.1" arch="src" src="src/lvm2-device-mapper-2.03.05-150400.185.1.src.rpm">
          <filename>lvm2-device-mapper-2.03.05-150400.185.1.src.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/device-mapper-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/libdevmapper1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.185.1" arch="aarch64" src="aarch64/liblvm2cmd2_03-2.03.05-150400.185.1.aarch64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="aarch64" src="aarch64/lvm2-2.03.05-150400.185.1.aarch64.rpm">
          <filename>lvm2-2.03.05-150400.185.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4281</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733223"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188607" id="1188607" title="segfault in Python 3.6 GC module" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" id="CVE-2019-18348" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" id="CVE-2020-8492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" id="CVE-2020-10735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454" id="CVE-2022-37454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203125" id="1203125" title="VUL-0: CVE-2020-10735: python27,python,python310,python3,python39,python36: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204577" id="1204577" title="VUL-0: CVE-2022-37454: python,php7,php8: SHA-3 Buffer Overflow" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)

The following non-security bug was fixed:

- Fixed a crash in the garbage collection (bsc#1188607).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="src" src="src/python3-3.6.15-150300.10.37.2.src.rpm">
          <filename>python3-3.6.15-150300.10.37.2.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.37.2" arch="src" src="src/python3-core-3.6.15-150300.10.37.2.src.rpm">
          <filename>python3-core-3.6.15-150300.10.37.2.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4601</id>
    <title>Feature update for GNOME 41</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671621887"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200581" id="1200581" title="No openSUSE Leap logo in GNOME Settings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=944832" id="944832" title="installing updates during shutdown causes reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179584" id="1179584" title="Installing python3-gobject but not python3-cairo breaks `pip3 check`" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204867" id="1204867" title="[Alpha-202210-3] &quot;GLib-GIO-CRITICAL: g_bus_get_sync: assertion 'error == NULL || *error == NULL' failed&quot; error occurs when doing login" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188882" id="1188882" title="Missing patch in factory gnome-session-exit-when-lost-name-on-bus.patch." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1175622" id="1175622" title="VNC fails after upgrade from 15sp1 to sp2  ref:_00D1igLOd._5001iQl2Nd:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196205" id="1196205" title="Tracker  extractor does not start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203274" id="1203274" title="FTBFS: gjs won't compile on SP5" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2235" id="PED-2235" title="https://jira.suse.com/browse/PED-2235" type="jira"/>
    </references>
    <description>This update for GNOME 41 fixes the following issues:

atkmm1_6:

- Version update from 2.28.1 to 2.28.3 (jsc#PED-2235):
  * Meson build: Avoid unnecessary configuration warnings
  * Meson build: Perl is not required by new versions of mm-common
  * Meson build: Require meson &gt;= 0.55.0
  * Meson build: Specify 'check' option in run_command(). Will be necessary with future versions of Meson.
  * Require atk &gt;= 2.12.0 Not a new requirement, but previously it was not specified in configure.ac and meson.build
  * Support building with Visual Studio 2022

eog:

- Version update from 41.1 to 41.2 (jsc#PED-2235):
  * eog-window: use correct type for display_profile
  * Fix discovery of Evince for multi-page images

evince:

- Version update 41.3 to 41.4 (jsc#PED-2235):
  * shell: Fix failures when thumbnail extraction takes too long
  * Fix build with meson 0.60.0 and newer

evolution:
    
- Ensure evolution-devel is forward compatible with evolution-data-server-devel in a same major version (jsc#PED-2235)
    
evolution-data-center:

- Version update from 3.42.4 to 3.42.5 (jsc#PED-2235):
  * Google OAuth out-of-band (oob) flow will be deprecated

folks:

- Version update 0.15.3 to 0.15.5 (jsc#PED-2235):
  * vapi: Add missing generic type argument
  * Fix docs build against newer eds version
  * Fix build against newer eds version
  * Remove volatile keyword from tests

gcr:

- Version update 3.41.0 to 3.41.1 (jsc#PED-2235):
  * Add G_SPAWN_CLOEXEC_PIPES flag to all the g_spawn commands
  * Add gi-docgen dependency which is needed by the docs
  * Fix build with meson 0.60.0 and newer
  * Fix build without systemd 
  * Several CI fixes

geocode-glib:

- Version update from 3.26.2 to 3.26.4 (jsc#PED-2235):
   * Fix to a test data file not being installed, and a bug fix for a bug in the libsoup3 port
   * Add support for libsoup 3.x

gjs:

- Version update from 1.70.1 to 1.70.2 (jsc#PED-2235):
  * Build and compatibility fixes backported from the development branch
  * Reverse order of running-from-source checks
- Require xorg-x11-Xvfb for proper package build (bsc#1203274)


glib2:

- Version update from 2.70.4 to 2.70.5 (jsc#PED-2235):
  * Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537, glgo#GNOME/GLib!2555
  * Split gtk-docs from -devel package, these are not needed during building projects using glib2


gnome-control-center:

- Fix the size of logo icon in About system (bsc#1200581)
- Version update from 41.4 to 41.7 (jsc#PED-2235):
  * Cellular: Remove duplicate line from .desktop
  * Info: Allow changing &quot;Device Name&quot; by pressing &quot;Enter&quot;
  * Info: Remove trailing space after CPU name
  * Keyboard: Fix crash resetting all keyboard shortcuts
  * Keyboard: Fix leaks
  * Network: Fix saving passwords for non-wifi connections
  * Network: Fix critical when opening VPN details page
  * Wacom: Fix leaks

gnome-desktop:

- Version update from 41.2 to 41.8 (jsc#PED-2235):
  * Version increase but no actual changes

gnome-music:

- Version update from 41.0 to 41.1 (jsc#PED-2235):
  * Ensure the correct album is played
  * Fix build with meson 0.61.0 and newer
  * Fix crash on empty selection
  * Fix incorrect playlist import
  * Fix time displayed in RTL languages
  * Improve async queue work
  * Make random shuffle actually random
  * Make shuffle random
  * Speed increase on first startup on larger collections
  * Time is reversed in RTL

gnome-remote-desktop:

- Version update from 41.2 to 41.3 (jsc#PED-2235):
  * Add Icelandic translation

gnome-session:

- Clear error messages that can be ignored because expected to happen for GDM sessions (bsc#1204867)
- Add fix for gnome-session to exit immediately when lost name on bus (bsc#1175622, bsc#1188882)
  
gnome-shell:

- Disable offline update suggestion before shutdown/reboot in SLE and openSUSE Leap (bsc#944832)
- Version update from 41.4 to 41.9 (jsc#PED-2235):
  * Allow extension updates with only Extension Manager installed
  * Allow more intermediate icon sizes in app grid
  * Disable workspace switching while in search.
  * Do not create systemd scope for D-Bus activated apps
  * Fix calendar to correctly align world clocks header in RTL
  * Fix drag placeholder position in dash in RTL locales
  * Fix edge case where windows stay dimmed after a modal is closed
  * Fix feedback when turning on a11y features by keyboard
  * Fix focus tracking in magnifier on wayland
  * Fix fractional timezone offsets in world clock
  * Fix glitches in overview transition
  * Fix logging in with realmd
  * Fix memory leak
  * Fix opening device settings for enterprise WPA networks
  * Fix programatically set scrollview fade
  * Fix regression in ibus support
  * Fix unresponsive top bar in overview when in fullscreen
  * Handle monitor changes during startup animation
  * Hide overview after 'Show Details' from app context menu
  * Improve Belgian on-screen keyboard layout
  * Improve CSS shadow appearance
  * Make sure startup animation completes
  * Misc. bug fixes and cleanups
  * Only close messages via delete key if they can be closed
  * Respect IM hint for candidates list in on-screen keyboard
    
gnome-software:

- Disable offline update feature in SUSE Linux Enterprise and openSUSE Leap (bsc#944832)
- Version update from 41.4 to 41.5 (jsc#PED-2235):
  * Added several appstream-related fixed
  * Disable scroll-by-mouse-wheel on featured carousel
  * Ensure details page shows app provided on command line


gnome-terminal:

- Version update from 3.42.2 to 3.42.3 (jsc#PED-2235):
  * Fix build with meson 0.61.0 and newer
  * window: Use a normal menu for the popup menu

gnome-user-docs:

- Version update from 41.1 to 41.5 (jsc#PED-2235):
  * Added missing icon for network-wired-symbolic

gspell:

- Version update from 1.8.4 to 1.10.0 (jsc#PED-2235):
  * Build: distribute more files in tarballs
  * Documentation improvements

gtkmm3:

- Version update from 3.24.5 to 3.24.6 (jsc#PED-2235):
  * Build with Meson: MSVC build: Support Visual Studio 2022
  * Check if Perl is required for building documentation
  * Don't use deprecated python3.path() and execute (..., gui_app...)
  * GTK: TreeValueProxy: Declare copy constructor = default, avoiding warnings from the claing++ compiler
  * Object::_release_c_instance(): Unref orphan managed widgets
  * SizeGroup demo: Set active items in the combo boxs, so something is shown
  * Specify 'check' option in run_command()

gtk-vnc:

- Version update from 1.3.0 to 1.3.1 (jsc#PED-2235):
  * Add 'check' arg to meson run_command()
  * Fix invalid use of subprojects with meson
  * Support ZRLE encoding for zero size alpha cursors

gupnp-av:

- Version update from 0.12.11 to 0.14.1 (jsc#PED-2235):
  * Add utility function to format GDateTime to the iso variant DIDL expects
  * Allow to be used as a subproject
  * Drop autotools
  * Fix stripping @refID
  * Fix unsetting subtitleFileType
  * Make Feature derivable again
  * Obsolete code removal.
  * Port to modern GObject
  * Remove hand-written ref-counting, use RcBox/AtomicRcBox instead.
  * Switch to meson build system, following upstream
- Rename libgupnp-av-1_0-2 subpackage to libgupnp-av-1_0-3, correcting the package name to match the provided library
- Conflict with the wrongly provided libgupnp-av-1_0-2
  
gvfs:

- Version update from 1.48.1 to 1.48.2 (jsc#PED-2235):
  * sftp: Adapt on new OpenSSH password prompts
  * smb: Rework anonymous handling to avoid EINVAL
  * smb: Ignore EINVAL for kerberos/ccache login

libgsf:

- Version update from 1.14.48 to 1.14.50 (jsc#PED-2235):
  * Fix error handling problem when writing ole files
  * Fix problems with non-western text in OLE properties
  * Use g_date_time_new_from_iso8601 and g_date_time_format_iso8601 when available

libmediaart:

- Version update from 1.9.5 to 1.9.6 (jsc#PED-2235):
  * build: Add introspection/vapi/tests options
  * build: Use library() to optionally build a static library

libnma:

- Version update from 1.8.32 to 1.8.40 (jsc#PED-2235):
  * Ad-Hoc networks now default to using WPA2 instead of WEP
  * Add possibility of building libnma-gtk4 library with Gtk4 support
  * Do not allow setting empty 802.1x domain for EAP TLS
  * Fixed keyboard accelerator for certificate chooser
  * Fixed libnma-gtk4 version of mobile-wizard
  * Include OWE wireless security option
  * The GtkBuilder files for Gtk4 are now included in the release tarball
  * WEP is no longer provided as an option for connecting to hidden networks due to its deprecated status
- New sub-packages libnma-gtk4-0, typelib-1_0-NMA4-1_0 and libnma-gtk4-devel
- Split out documentation files in own docs sub-package

libnotify:

- Version update from 0.7.10 to 0.7.12 (jsc#PED-2235):
  * Delete unused notifynotification.xml
  * Fix potential build errors with old glib version we require
  * docs/notify-send: Add --transient option to manpage
  * notification: Bookend calling NotifyActionCallback with temporary reference
  * notification: Include sender-pid hint by default if not provided
  * notify-send: Add debug message about server not supporting persistence
  * notify-send: Add explicit option to create transient notifications
  * notify-send: Add support for boolean hints
  * notify-send: Move server capabilities check to a separate function
  * notify-send: Support passing any hint value, by parsing variant strings

libpeas:

- Version update from 1.30.0 to 1.32.0 (jsc#PED-2235):
  * Icon licenses have been corrected
  * Parallel build system operation fixes
  * Use gi-docgen for documentation
  * Various build warnings squashed
  * Various GIR data that should not have been exported was removed
- Stop packaging the demo files/sub-package

librsvg:

- Version update from 2.52.6 to 2.52.9 (jsc#PED-2235):
  * Catch circular references when rendering patterns
  * Fix regressions when computing element geometries
  * Fix regression outputting all text as paths

libsecret:

- Version update from 0.20.4 to 0.20.5 (jsc#PED-2235):
  * Add bash-completion for secret-tool
  * Add locking capabilities to secret tool
  * Add support for TPM2 based secret storage
  * Create default collection after DBus.Error.UnknownObject
  * Detect local storage in snaps in the same way as flatpaks
  * Drop autotools-based build
  * GI annotation and documentation fixes
  * Port documentation to gi-docgen
  * Use G_GNUC_NULL_TERMINATED where appropriate collection, methods, prompt: Port to GTask
  * secret-file-backend: Avoid closing the same file descriptor twice

mutter:

- Version update from 41.5 to 41.9 (jsc#PED-2235):
  * Fix '--replace option'
  * Fix missing root window properties after XWayland start
  * Fix night light without GAMMA_LUT property
  * KMS: Survive missing GAMMA_LUT property
  * wayland: Fix rotation transform
  * Misc. bug fixes

nautilus:

- Version update from 41.2 to 41.5(jsc#PED-2235):
  * Drag-and-drop bugfixes
  * HighContrast style fixes

orca:

- Version update from 41.1 to 41.3 (jsc#PED-2235):
  * Add more event-flood detection and handling for improved performance
  * Fix bug causing accessing preferences to fail for Esperanto
  * Web: Fix bug causing widgets descending from off-screen label elements to be skipped over
  * Web: Fix presentation of the FluentUI react dialog (and any other dialog which has an ARIA document-role descendant)
  * WebKitGtk: Fail gracefully when structural navigation commands are used in WebKitGtk 2.36.x

python-cairo:

- Add python3-cairo to SUSE Linux Enterprise Micro 5.3 as it is now required by python3-gobject-cairo

python-gobject:

- Add dependency on python-cairo to python-gobject-cairo: The introspection wrapper needs pycairo (bsc#1179584)
  
- Version update from 3.42.0 to 3.42.2 (jsc#PED-2235):
  * Add a workaround for a PyPy 3.9+ bug when threads are used
  * Do not error out for unknown scopes
  * Prompt an error instead of crashing when marshaling unsupported fundamental types in some cases
  * Fix a crash/refcounting error in case marshaling a hash table fails
  * Fix crashes when marshaling zero terminated arrays for certain item types
  * Implement DynamicImporter.find_spec() to silence deprecation warning
  * Make the test suite pass again with PyPy
  * Some test/CI fixes
  * gtk overrides: Do not override Treeview.enable_model_drag_xx for GTK4
  * gtk overrides: restore Gtk.ListStore.insert_with_valuesv with newer GTK4
  * interface: Fix leak when overriding GInterfaceInfo
  * setup.py: look up pycairo headers without importing the module

trackers-python:

- Allow system calls used by gstreamer (bsc#1196205)
- Version update from 3.2.2 to 3.2.1 (jsc#PED-2235):
  * Backport seccomp rules for rseq and mbind syscalls

vala:

- Version update from 0.54.6 to 0.54.8 (jsc#PED-2235):
  * Add missing TraverseVisitor.visit_data_type()
  * Add support for &quot;copy_/free_function&quot; metadata for compact classes
  * Catch and throw possible inner error of lock statements
  * Clear SemanticAnalyzer.current_{symbol,source_file} when not needed anymore
  * Don't count instance-parameter when checking for backwards closure reference
  * Fix a few binding errors
  * Free empty stack list for code contexts
  * Handle duplicated and unnamed symbols.
  * Improve UI parsing and handling of nested objects and properties
  * Make sure to drop our &quot;trap&quot; jump target in case of an error
  * Move dynamic property errors to semantic analyzer pass
  * Require lvalue access of delegate target/destroy &quot;fields&quot;
  * Show source location when reporting deprecations
  * Transform assignment of an array element as needed
  * manual: Update from wiki.gnome.org
  * parser: Improve handling of nullable VarType in with-statement
  * parser: Reduce the source reference of main block method to its beginning

xdg-desktop-portal-gnome:

- Version update from 0.54.6 to 0.54.8 (jsc#PED-2235):
  * Properly bind property in Lockdown portal
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf-loader-rsvg" epoch="0" version="2.52.9" release="150400.3.3.1" arch="x86_64" src="x86_64/gdk-pixbuf-loader-rsvg-2.52.9-150400.3.3.1.x86_64.rpm">
          <filename>gdk-pixbuf-loader-rsvg-2.52.9-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.3.1" arch="src" src="src/glib2-2.70.5-150400.3.3.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.3.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.3.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="librsvg-2-2" epoch="0" version="2.52.9" release="150400.3.3.1" arch="x86_64" src="x86_64/librsvg-2-2-2.52.9-150400.3.3.1.x86_64.rpm">
          <filename>librsvg-2-2-2.52.9-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="librsvg" epoch="0" version="2.52.9" release="150400.3.3.1" arch="src" src="src/librsvg-2.52.9-150400.3.3.1.src.rpm">
          <filename>librsvg-2.52.9-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="python-gobject" epoch="0" version="3.42.2" release="150400.3.3.2" arch="src" src="src/python-gobject-3.42.2-150400.3.3.2.src.rpm">
          <filename>python-gobject-3.42.2-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.3.3.2" arch="x86_64" src="x86_64/python3-gobject-3.42.2-150400.3.3.2.x86_64.rpm">
          <filename>python3-gobject-3.42.2-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="python3-gobject-Gdk" epoch="0" version="3.42.2" release="150400.3.3.2" arch="x86_64" src="x86_64/python3-gobject-Gdk-3.42.2-150400.3.3.2.x86_64.rpm">
          <filename>python3-gobject-Gdk-3.42.2-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="python3-gobject-cairo" epoch="0" version="3.42.2" release="150400.3.3.2" arch="x86_64" src="x86_64/python3-gobject-cairo-3.42.2-150400.3.3.2.x86_64.rpm">
          <filename>python3-gobject-cairo-3.42.2-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-loader-rsvg" epoch="0" version="2.52.9" release="150400.3.3.1" arch="aarch64" src="aarch64/gdk-pixbuf-loader-rsvg-2.52.9-150400.3.3.1.aarch64.rpm">
          <filename>gdk-pixbuf-loader-rsvg-2.52.9-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.3.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.3.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.3.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="librsvg-2-2" epoch="0" version="2.52.9" release="150400.3.3.1" arch="aarch64" src="aarch64/librsvg-2-2-2.52.9-150400.3.3.1.aarch64.rpm">
          <filename>librsvg-2-2-2.52.9-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.3.3.2" arch="aarch64" src="aarch64/python3-gobject-3.42.2-150400.3.3.2.aarch64.rpm">
          <filename>python3-gobject-3.42.2-150400.3.3.2.aarch64.rpm</filename>
        </package>
        <package name="python3-gobject-Gdk" epoch="0" version="3.42.2" release="150400.3.3.2" arch="aarch64" src="aarch64/python3-gobject-Gdk-3.42.2-150400.3.3.2.aarch64.rpm">
          <filename>python3-gobject-Gdk-3.42.2-150400.3.3.2.aarch64.rpm</filename>
        </package>
        <package name="python3-gobject-cairo" epoch="0" version="3.42.2" release="150400.3.3.2" arch="aarch64" src="aarch64/python3-gobject-cairo-3.42.2-150400.3.3.2.aarch64.rpm">
          <filename>python3-gobject-cairo-3.42.2-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4312</id>
    <title>Recommended update for tar</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669976305"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203600" id="1203600" title="tar extract fails with Unexpected inconsistency when making directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200657" id="1200657" title="tar-1.34-150000.3.12.1 failed to extract due to race condition in creating directories" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- Fix unexpected inconsistency when making directory (bsc#1203600)
- Update race condition fix (bsc#1200657)
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="src" src="src/tar-1.34-150000.3.22.3.src.rpm">
          <filename>tar-1.34-150000.3.22.3.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="x86_64" src="x86_64/tar-1.34-150000.3.22.3.x86_64.rpm">
          <filename>tar-1.34-150000.3.22.3.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="aarch64" src="aarch64/tar-1.34-150000.3.22.3.aarch64.rpm">
          <filename>tar-1.34-150000.3.22.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4153</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669037673"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" id="CVE-2022-42898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205126" id="1205126" title="VUL-0: EMBARGOED:  CVE-2022-42898: krb5: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="src" src="src/krb5-1.19.2-150400.3.3.1.src.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="x86_64" src="x86_64/krb5-1.19.2-150400.3.3.1.x86_64.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="aarch64" src="aarch64/krb5-1.19.2-150400.3.3.1.aarch64.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4206</id>
    <title>Security update for pixman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669221327"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" id="CVE-2022-44638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205033" id="1205033" title="VUL-0: CVE-2022-44638: pixman: integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write" type="bugzilla"/>
    </references>
    <description>This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
</description>
    <pkglist>
      <collection>
        <package name="libpixman-1-0" epoch="0" version="0.40.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libpixman-1-0-0.40.0-150400.3.3.1.x86_64.rpm">
          <filename>libpixman-1-0-0.40.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="pixman" epoch="0" version="0.40.0" release="150400.3.3.1" arch="src" src="src/pixman-0.40.0-150400.3.3.1.src.rpm">
          <filename>pixman-0.40.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libpixman-1-0" epoch="0" version="0.40.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libpixman-1-0-0.40.0-150400.3.3.1.aarch64.rpm">
          <filename>libpixman-1-0-0.40.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4141</id>
    <title>Security update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669019313"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775" id="CVE-2022-3775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601" id="CVE-2022-2601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205178" id="1205178" title="VUL-0: EMBARGOED: CVE-2022-2601: grub2: buffer overflow in grub_font_construct_glyph" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205182" id="1205182" title="VUL-0: EMBARGOED: CVE-2022-3775: grub2: font: Fix an integer underflow in blit_comb()" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="src" src="src/grub2-2.06-150400.11.17.1.src.rpm">
          <filename>grub2-2.06-150400.11.17.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.17.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.17.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.17.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.17.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4278</id>
    <title>Security update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733061"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188086" id="1188086" title="&quot;#includedir /etc/sudoers.d&quot; in sudoers file is skipped by supportutils" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197428" id="1197428" title="supportconfig not collecting power management information (supportutils)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203818" id="1203818" title="Some passwords are not censored in supportconfig files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184689" id="1184689" title="supportconfig reporting bare metal systems as KVM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200330" id="1200330" title="Xorg does not log messages in /var/log/Xorg.[0,1].log" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192252" id="1192252" title="Improve collection of multipath related information with supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202337" id="1202337" title="Supportconfig's updates.txt does not show the system registration status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192648" id="1192648" title="Request from IBM to add current day's sar data to supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202417" id="1202417" title="Need to include nvmf specific commands/logs in supportconfig (nvme_core/nvmf/Sles)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202269" id="1202269" title="supportconfig does not include expected YaST logs" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.15.1" arch="noarch" src="noarch/supportutils-3.1.21-150300.7.35.15.1.noarch.rpm">
          <filename>supportutils-3.1.21-150300.7.35.15.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.15.1" arch="src" src="src/supportutils-3.1.21-150300.7.35.15.1.src.rpm">
          <filename>supportutils-3.1.21-150300.7.35.15.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4147</id>
    <title>Security update for kubevirt stack</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669022654"/>
    <references/>
    <description>
This update provides rebuilds of the kubevirt containers with up to date base images,
fixing various security issues.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.7.1" arch="src" src="src/kubevirt-0.54.0-150400.3.7.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.7.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.7.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.7.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.7.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4138</id>
    <title>Recommended update for python-msgpack</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1668993707"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203743" id="1203743" title="FTBFS: python-msgpack won't compile on SP5" type="bugzilla"/>
    </references>
    <description>This update for python-msgpack fixes the following issues:

- Fix build failures on SUSE Linux Enterprise 15 Service Pack 5 (bsc#1203743)
</description>
    <pkglist>
      <collection>
        <package name="python-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="src" src="src/python-msgpack-0.5.6-150100.3.3.1.src.rpm">
          <filename>python-msgpack-0.5.6-150100.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="x86_64" src="x86_64/python3-msgpack-0.5.6-150100.3.3.1.x86_64.rpm">
          <filename>python3-msgpack-0.5.6-150100.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="aarch64" src="aarch64/python3-msgpack-0.5.6-150100.3.3.1.aarch64.rpm">
          <filename>python3-msgpack-0.5.6-150100.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4466</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670994002"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203896" id="1203896" title="kexec fail in selfinstall with secureboot" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

Version update from 9.24.36 to 9.24.43:

- Add example aarch64 integration test for Ubuntu
- Add option '--target-arch' for image info to allow cross architecture dependency solving
- Add support for group id in users setting
- Fix error handling for setfiles policy lookup and ensure the path to run scandir is properly created
- Fix handling of signing_keys in cmdline options
- Fix helper method to detect dracut outfile format
- Fix 'kexec' options setup in kiwi-dump-reboot
- Fix issues with the setfiles SELinux relabel command
- Prefer file based syscall in kexec when possible, needed to support boot on a secure boot enabled system (bsc#1203896)
- Setup SELinux on every system prepare / build
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.56.3" arch="src" src="src/python-kiwi-9.24.43-150100.3.56.3.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.56.3.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4191</id>
    <title>Security update for containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669196195"/>
    <references/>
    <description>
This update rebuilds the current containeried data importer images against
current base images, to fix security issues.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.7.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.7.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.7.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.7.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.7.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4328</id>
    <title>Recommended update for audit-secondary</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670325919"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204844" id="1204844" title="&quot;systemctl restart auditd.service&quot; will not reload audit rules" type="bugzilla"/>
    </references>
    <description>This update for audit-secondary fixes the following issues:

- Fix rules not loaded when restarting auditd.service (bsc#1204844)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.6.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.6.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.6.1.src.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4214</id>
    <title>Security update for libdb-4_8</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669303095"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174414" id="1174414" title="VUL-1: CVE-2019-2708: libdb-4_5,libdb-4_8: libdb: data store execution leads to partial DoS" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" id="CVE-2019-2708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" type="cve"/>
    </references>
    <description>This update for libdb-4_8 fixes the following issues:

- CVE-2019-2708: Fixed partial DoS due to data store execution (bsc#1174414).
</description>
    <pkglist>
      <collection>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.6.1" arch="x86_64" src="x86_64/db48-utils-4.8.30-150000.7.6.1.x86_64.rpm">
          <filename>db48-utils-4.8.30-150000.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="src" src="src/libdb-4_8-4.8.30-150000.7.6.1.src.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.src.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="x86_64" src="x86_64/libdb-4_8-4.8.30-150000.7.6.1.x86_64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.6.1" arch="aarch64" src="aarch64/db48-utils-4.8.30-150000.7.6.1.aarch64.rpm">
          <filename>db48-utils-4.8.30-150000.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="aarch64" src="aarch64/libdb-4_8-4.8.30-150000.7.6.1.aarch64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4259</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669646632"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3970" id="CVE-2022-3970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3599" id="CVE-2022-3599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3626" id="CVE-2022-3626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3627" id="CVE-2022-3627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3597" id="CVE-2022-3597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3597" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204643" id="1204643" title="VUL-0: CVE-2022-3599: tiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205392" id="1205392" title="VUL-0: CVE-2022-3970: tiff: unsigned integer overflow in TIFFReadRGBATileExt()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204644" id="1204644" title="VUL-0: CVE-2022-3626: tiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204645" id="1204645" title="VUL-0: CVE-2022-3627: tiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204641" id="1204641" title="VUL-0: CVE-2022-3597: tiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.19.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.19.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.19.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.19.1" arch="src" src="src/tiff-4.0.9-150000.45.19.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.19.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.19.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.19.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4420</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670916345"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203886" id="1203886" title="L3: Exclude with extend function not working as expected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203834" id="1203834" title="files.py:385: RuntimeWarning: line buffering (buffering=1) isn't supported in binary mode, the default buffer size will be used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203685" id="1203685" title="Amazon EC2 instances using Nitro Hypervisor are not detected as virtual machines with SP4 Clients" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/python3-salt-3004-150400.8.17.7.x86_64.rpm">
          <filename>python3-salt-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="src" src="src/salt-3004-150400.8.17.7.src.rpm">
          <filename>salt-3004-150400.8.17.7.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-minion-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-minion-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-transactional-update-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-transactional-update-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/python3-salt-3004-150400.8.17.7.aarch64.rpm">
          <filename>python3-salt-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-minion-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-minion-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-transactional-update-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-transactional-update-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4592</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671551536"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181961" id="1181961" title="VUL-0: CVE-2021-20206: cni,podman,cni-plugins: Arbitrary path injection via type field in CNI configuration" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" id="CVE-2021-20206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" type="cve"/>
    </references>
    <description>This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.8.1" arch="src" src="src/cni-0.7.1-150100.3.8.1.src.rpm">
          <filename>cni-0.7.1-150100.3.8.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.8.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.8.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.8.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.8.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4593</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671551761"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181961" id="1181961" title="VUL-0: CVE-2021-20206: cni,podman,cni-plugins: Arbitrary path injection via type field in CNI configuration" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" id="CVE-2021-20206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" type="cve"/>
    </references>
    <description>This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.11.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.11.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.11.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.11.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.11.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.11.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.11.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4382</id>
    <title>Recommended update for libnvme</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554847"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205019" id="1205019" title="[NetApp SLES15 SP4 Bug] nvme connect-all crash due to double free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203163" id="1203163" title="[NetApp SLES15 SP4 RFE] NVMe/FC auto-connect scripts should leverage the config JSON file for connect-all" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200089" id="1200089" title="[NetApp SLES15 SP4 RFE]: New command to display entire NVMe topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203204" id="1203204" title="[NetApp SLES15 SP4 Bug] nvme connect-all still relies on discovery.conf even for a target that is TP 8013/8014 compliant" type="bugzilla"/>
    </references>
    <description>This update for libnvme fixes the following issues:

libnvme:

- Fix 'connect-all' failures when handling JSON configuration file (bsc#1205019)

nvme-cli:

- Honor JSON config file in 'connect-all' command (bsc#1203204 bsc#1203163)
- Add 'show-topology' command (bsc#1200089)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0" release="150400.3.9.3" arch="src" src="src/libnvme-1.0-150400.3.9.3.src.rpm">
          <filename>libnvme-1.0-150400.3.9.3.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.9.3" arch="x86_64" src="x86_64/libnvme1-1.0-150400.3.9.3.x86_64.rpm">
          <filename>libnvme1-1.0-150400.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="src" src="src/nvme-cli-2.0-150400.3.9.3.src.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="x86_64" src="x86_64/nvme-cli-2.0-150400.3.9.3.x86_64.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.9.3" arch="aarch64" src="aarch64/libnvme1-1.0-150400.3.9.3.aarch64.rpm">
          <filename>libnvme1-1.0-150400.3.9.3.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="aarch64" src="aarch64/nvme-cli-2.0-150400.3.9.3.aarch64.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4499</id>
    <title>Recommended update for openssh</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671097779"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179465" id="1179465" title="L3: dbus not available when logged over ssh (ssh -X: GTK apps timeout on flatpak initialization)" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Make ssh connections update their dbus environment (bsc#1179465):
  * Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish 
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="src" src="src/openssh-8.4p1-150300.3.15.4.src.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4383</id>
    <title>Recommended update for iputils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554925"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203957" id="1203957" title="[aarch64] ping (iputils): Occasional segfault" type="bugzilla"/>
    </references>
    <description>This update for iputils fixes the following issues:

- Fix occasional memory access violation when using `ping` (bsc#1203957)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="src" src="src/iputils-20211215-150400.3.3.2.src.rpm">
          <filename>iputils-20211215-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="x86_64" src="x86_64/iputils-20211215-150400.3.3.2.x86_64.rpm">
          <filename>iputils-20211215-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="aarch64" src="aarch64/iputils-20211215-150400.3.3.2.aarch64.rpm">
          <filename>iputils-20211215-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4380</id>
    <title>Feature update for ipset</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554708"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1116432" id="1116432" title="ipset save -file &lt;filename&gt; produces empty files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1122853" id="1122853" title="ipset error with /etc/services in SLE 15" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2086" id="PED-2086" title="https://jira.suse.com/browse/PED-2086" type="jira"/>
    </references>
    <description>This update for ipset fixes the following issues:

Version update from 6.36 to 7.15 (jsc#PED-2086):

- Update needed to match kernel protocol version
- Fix bug with 'ipset save -file &lt;filename&gt;' that wrongly produced empty files (bsc#1116432)
- A new internal protocol version between the kernel and userspace is used. This is required in order to support two
  new functions and the extendend LIST operation, which makes possible to run ipset in every case entirely over netlink
  without the need to use getsockopt()
- Allow specifying protocols by number
- Enable memory accounting for ipset allocations
- Fix argument parsing buffer overflow in ipset_parse_argv
- Fix parsing the service names for ports
- Fix memory accounting for hash types on resize
- Fix rename concurrency with listing, which can result broken list/save results
- Fix to list/save into file specified by option
- Implement sorting for hash types in the ipset tool
- Limit the maximum range of consecutive elements to add/delete
- Support the '-exist' flag with the destroy command
- For the full list of changes please consult the changelog at https://ipset.netfilter.org/changelog.html
</description>
    <pkglist>
      <collection>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="src" src="src/ipset-7.15-150400.12.3.2.src.rpm">
          <filename>ipset-7.15-150400.12.3.2.src.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="x86_64" src="x86_64/ipset-7.15-150400.12.3.2.x86_64.rpm">
          <filename>ipset-7.15-150400.12.3.2.x86_64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="x86_64" src="x86_64/libipset13-7.15-150400.12.3.2.x86_64.rpm">
          <filename>libipset13-7.15-150400.12.3.2.x86_64.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="s390x" src="s390x/ipset-7.15-150400.12.3.2.s390x.rpm">
          <filename>ipset-7.15-150400.12.3.2.s390x.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="s390x" src="s390x/libipset13-7.15-150400.12.3.2.s390x.rpm">
          <filename>libipset13-7.15-150400.12.3.2.s390x.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="ppc64le" src="ppc64le/ipset-7.15-150400.12.3.2.ppc64le.rpm">
          <filename>ipset-7.15-150400.12.3.2.ppc64le.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="ppc64le" src="ppc64le/libipset13-7.15-150400.12.3.2.ppc64le.rpm">
          <filename>libipset13-7.15-150400.12.3.2.ppc64le.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="aarch64" src="aarch64/ipset-7.15-150400.12.3.2.aarch64.rpm">
          <filename>ipset-7.15-150400.12.3.2.aarch64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="aarch64" src="aarch64/libipset13-7.15-150400.12.3.2.aarch64.rpm">
          <filename>libipset13-7.15-150400.12.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4212</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669301641"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190651" id="1190651" title="FIPS: OpenSSL Provide a service-level indicator" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- FIPS: Mark PBKDF2 with key shorter than 112 bits as non-approved (bsc#1190651)
- FIPS: Consider RSA siggen/sigver with PKCS1 padding also approved (bsc#1190651)
- FIPS: Return the correct indicator for a given EC group order bits (bsc#1190651)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.16.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4209</id>
    <title>Security update for libarchive</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669221418"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227" id="CVE-2022-36227" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205629" id="1205629" title="VUL-0: CVE-2022-36227: libarchive,bsdtar: potential NULL pointer dereference in __archive_write_allocate_filter()" type="bugzilla"/>
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2022-36227: Fixed potential NULL pointer dereference in __archive_write_allocate_filter() (bsc#1205629).
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.5.1" release="150400.3.12.1" arch="src" src="src/libarchive-3.5.1-150400.3.12.1.src.rpm">
          <filename>libarchive-3.5.1-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.12.1" arch="x86_64" src="x86_64/libarchive13-3.5.1-150400.3.12.1.x86_64.rpm">
          <filename>libarchive13-3.5.1-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.12.1" arch="aarch64" src="aarch64/libarchive13-3.5.1-150400.3.12.1.aarch64.rpm">
          <filename>libarchive13-3.5.1-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4282</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203152" id="1203152" title="VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203820" id="1203820" title="VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203272" id="1203272" title="VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203799" id="1203799" title="VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204779" id="1204779" title="VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203796" id="1203796" title="VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203110" id="1203110" title="VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203924" id="1203924" title="VUL-1: CVE-2022-3352: vim: vim: use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203797" id="1203797" title="VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203155" id="1203155" title="VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202962" id="1202962" title="VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203509" id="1203509" title="VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203508" id="1203508" title="VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192478" id="1192478" title="VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203194" id="1203194" title="VUL-1: CVE-2022-3134: vim: use after free in do_tag()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3278" id="CVE-2022-3278" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3278" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3324" id="CVE-2022-3324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980" id="CVE-2022-2980" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3297" id="CVE-2022-3297" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3297" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235" id="CVE-2022-3235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3296" id="CVE-2022-3296" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3296" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099" id="CVE-2022-3099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3928" id="CVE-2021-3928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3134" id="CVE-2022-3134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3153" id="CVE-2022-3153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3153" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982" id="CVE-2022-2982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3352" id="CVE-2022-3352" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3352" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" id="CVE-2022-3705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3037" id="CVE-2022-3037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3037" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3234" id="CVE-2022-3234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3234" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="src" src="src/vim-9.0.0814-150000.5.28.1.src.rpm">
          <filename>vim-9.0.0814-150000.5.28.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="noarch" src="noarch/vim-data-common-9.0.0814-150000.5.28.1.noarch.rpm">
          <filename>vim-data-common-9.0.0814-150000.5.28.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="x86_64" src="x86_64/vim-small-9.0.0814-150000.5.28.1.x86_64.rpm">
          <filename>vim-small-9.0.0814-150000.5.28.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="aarch64" src="aarch64/vim-small-9.0.0814-150000.5.28.1.aarch64.rpm">
          <filename>vim-small-9.0.0814-150000.5.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4311</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669975376"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-22385" id="SLE-22385" title="https://jira.suse.com/browse/SLE-22385" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Include binaries of open-vm-tools for ARM architecture aarch64 in SUSE Linux Enterprise 15 Service Pack 4
  (jsc#SLE-22385)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.1.0" release="150300.21.2" arch="x86_64" src="x86_64/libvmtools0-12.1.0-150300.21.2.x86_64.rpm">
          <filename>libvmtools0-12.1.0-150300.21.2.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.21.2" arch="src" src="src/open-vm-tools-12.1.0-150300.21.2.src.rpm">
          <filename>open-vm-tools-12.1.0-150300.21.2.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.21.2" arch="x86_64" src="x86_64/open-vm-tools-12.1.0-150300.21.2.x86_64.rpm">
          <filename>open-vm-tools-12.1.0-150300.21.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4457</id>
    <title>Security update for libtpms</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670933470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204556" id="1204556" title="libtpms failing to build on ppc64le" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187767" id="1187767" title="VUL-0: CVE-2021-3623: libtpms: out-of-bounds access when trying to resume the state of the vTPM" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3623" id="CVE-2021-3623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3623" type="cve"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.8.2" release="150300.3.6.1" arch="src" src="src/libtpms-0.8.2-150300.3.6.1.src.rpm">
          <filename>libtpms-0.8.2-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.6.1" arch="x86_64" src="x86_64/libtpms0-0.8.2-150300.3.6.1.x86_64.rpm">
          <filename>libtpms0-0.8.2-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.6.1" arch="aarch64" src="aarch64/libtpms0-0.8.2-150300.3.6.1.aarch64.rpm">
          <filename>libtpms0-0.8.2-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4411</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670901727"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3598" id="CVE-2022-3598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3570" id="CVE-2022-3570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3570" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204642" id="1204642" title="VUL-0: CVE-2022-3598: tiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205422" id="1205422" title="VUL-0: CVE-2022-3570: tiff: libtiff: heap buffer overflows in tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.22.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.22.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.22.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.22.1" arch="src" src="src/tiff-4.0.9-150000.45.22.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.22.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.22.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.22.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1702</id>
    <title>Security update for shim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680182615"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185232" id="1185232" title="something has gone seriously wrong: shim_init() - system does not boot anymore after installing today's updates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185261" id="1185261" title="UEFI Boot fail after standard update - could not create MoklistXRT, import_mok_state() failed: Out of Resources" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185441" id="1185441" title="&quot;system is compromised&quot; during boot after grub2+shim update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185621" id="1185621" title="Jetson tx2: shim: import_mok_state() failed: Unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187071" id="1187071" title="SLES 15 SP2 UEFI Secureboot powering off when loading initrd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187260" id="1187260" title="installation openuse 15.3 does not start on macbook" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193282" id="1193282" title="grub2 sbat security contact" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198458" id="1198458" title="VUL-0: CVE-2022-28737: shim: buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201066" id="1201066" title="kernel upgrade fails with Failed to enroll new keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202120" id="1202120" title="Can't update my MicroOS as shim post-install script fails with &quot;mokutil: unrecognized option '--set-sbat-policy'&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205588" id="1205588" title="Page Fault when booting with PE NX-compatibility DLL Characteristic flag" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" id="CVE-2022-28737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-127" id="PED-127" title="https://jira.suse.com/browse/PED-127" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1273" id="PED-1273" title="https://jira.suse.com/browse/PED-1273" type="jira"/>
    </references>
    <description>This update for shim fixes the following issues:

- Updated shim signature after shim 15.7 be signed back:
  signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458)

- Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to
  disable the NX compatibility flag when using post-process-pe because
  grub2 is not ready. (bsc#1205588)

- Enable the NX compatibility flag by default. (jsc#PED-127) 

Update to 15.7 (bsc#1198458) (jsc#PED-127):

- Make SBAT variable payload introspectable
- Reference MokListRT instead of MokList
- Add a link to the test plan in the readme.
- [V3] Enable TDX measurement to RTMR register
- Discard load-options that start with a NUL
- Fixed load_cert_file bugs
- Add -malign-double to IA32 compiler flags
- pe: Fix image section entry-point validation
- make-archive: Build reproducible tarball
- mok: remove MokListTrusted from PCR 7

Other fixes:

- Support enhance shim measurement to TD RTMR. (jsc#PED-1273) 

- shim-install: ensure grub.cfg created is not overwritten after installing grub related files
- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.  (bsc#1201066)
- Add logic to shim.spec for detecting --set-sbat-policy option before using mokutil to set sbat policy. (bsc#1202120)
- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)

Update to 15.6 (bsc#1198458):

- MokManager: removed Locate graphic output protocol fail error message
- shim: implement SBAT verification for the shim_lock protocol
- post-process-pe: Fix a missing return code check
- Update github actions matrix to be more useful
- post-process-pe: Fix format string warnings on 32-bit platforms
- Allow MokListTrusted to be enabled by default
- Re-add ARM AArch64 support
- Use ASCII as fallback if Unicode Box Drawing characters fail
- make: don't treat cert.S specially
- shim: use SHIM_DEVEL_VERBOSE when built in devel mode
- Break out of the inner sbat loop if we find the entry.
- Support loading additional certificates
- Add support for NX (W^X) mitigations.
- Fix preserve_sbat_uefi_variable() logic
- SBAT Policy latest should be a one-shot
- pe: Fix a buffer overflow when SizeOfRawData &gt; VirtualSize
- pe: Perform image verification earlier when loading grub
- Update advertised sbat generation number for shim
- Update SBAT generation requirements for 05/24/22
- Also avoid CVE-2022-28737 in verify_image() by @vathpela

Update to 15.5 (bsc#1198458):

- Broken ia32 relocs and an unimportant submodule change.
- mok: allocate MOK config table as BootServicesData
- Don't call QueryVariableInfo() on EFI 1.10 machines (bsc#1187260)
- Relax the check for import_mok_state()  (bsc#1185261)
- SBAT.md: trivial changes
- shim: another attempt to fix load options handling
- Add tests for our load options parsing.
- arm/aa64: fix the size of .rela* sections
- mok: fix potential buffer overrun in import_mok_state
- mok: relax the maximum variable size check
- Don't unhook ExitBootServices when EBS protection is disabled
- fallback: find_boot_option() needs to return the index for the boot entry in optnum
- httpboot: Ignore case when checking HTTP headers
- Fallback allocation errors
- shim: avoid BOOTx64.EFI in message on other architectures
- str: remove duplicate parameter check
- fallback: add compile option FALLBACK_NONINTERACTIVE
- Test mok mirror
- Modify sbat.md to help with readability.
- csv: detect end of csv file correctly
- Specify that the .sbat section is ASCII not UTF-8
- tests: add &quot;include-fixed&quot; GCC directory to include directories
- pe: simplify generate_hash()
- Don't make shim abort when TPM log event fails (RHBZ #2002265)
- Fallback to default loader if parsed one does not exist
- fallback: Fix for BootOrder crash when index returned
- Better console checks
- docs: update SBAT UEFI variable name
- Don't parse load options if invoked from removable media path
- fallback: fix fallback not passing arguments of the first boot option
- shim: Don't stop forever at &quot;Secure Boot not enabled&quot; notification
- Allocate mokvar table in runtime memory.
- Remove post-process-pe on 'make clean'
- pe: missing perror argument


- CVE-2022-28737: Fixed a buffer overflow when SizeOfRawData &gt; VirtualSize (bsc#1198458)

- Add mokutil command to post script for setting sbat policy to latest mode
  when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created.
  (bsc#1198458)

- Updated vendor dbx binary and script (bsc#1198458)

  - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding
    SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding
    openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt
    and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment.
  - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
    file which includes all .der for testing environment.

- avoid buffer overflow when copying data to the MOK config table (bsc#1185232)
- Disable exporting vendor-dbx to MokListXRT since writing a large RT variable could crash some machines (bsc#1185261)
- ignore the odd LoadOptions length (bsc#1185232)
- shim-install: reset def_shim_efi to &quot;shim.efi&quot; if the given file doesn't exist
- relax the maximum variable size check for u-boot (bsc#1185621)
- handle ignore_db and user_insecure_mode correctly (bsc#1185441, bsc#1187071)

- Split the keys in vendor-dbx.bin to vendor-dbx-sles and
  vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce
  the size of MokListXRT (bsc#1185261) 
  + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz
</description>
    <pkglist>
      <collection>
        <package name="shim" epoch="0" version="15.7" release="150300.4.11.1" arch="src" src="src/shim-15.7-150300.4.11.1.src.rpm">
          <filename>shim-15.7-150300.4.11.1.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.7" release="150300.4.11.1" arch="x86_64" src="x86_64/shim-15.7-150300.4.11.1.x86_64.rpm">
          <filename>shim-15.7-150300.4.11.1.x86_64.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.7" release="150300.4.11.1" arch="aarch64" src="aarch64/shim-15.7-150300.4.11.1.aarch64.rpm">
          <filename>shim-15.7-150300.4.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-45</id>
    <title>Recommended update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673256778"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204585" id="1204585" title="libxml2 testsuite missing W3C conformance tests from https://www.w3.org/XML/Test/" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz 
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.13.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.13.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.13.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.13.1" arch="src" src="src/libxml2-2.9.14-150400.5.13.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.13.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.13.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.13.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.13.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.13.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.13.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.13.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.13.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.13.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.13.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.13.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.13.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.13.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.13.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.13.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.13.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.13.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.13.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4367</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670514999"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205089" id="1205089" title="RMT 2.9 breaks cloud client system registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195925" id="1195925" title="cloud-regionsrv-client needs cert check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191880" id="1191880" title="self signed cert replacement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195924" id="1195924" title="cloud-regionsrv-client needs cert check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203382" id="1203382" title="AWS Update Infrastructure - No response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206082" id="1206082" title="remove dmidecode dependencies on s390/ppc64_le" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924) 
- Implement functionality to detect if an update server has a new cert. 
Import the new cert when it is detected. 
- From 10.0.6 (bsc#1205089) 
- Credentials are equal when username and password are the same ignore 
other entries in the credentials file 
- Handle multiple zypper names in process table, zypper and Zypp-main 
to properly detect the running process
- Require dmidecode only on supported archs (bsc#1206082)
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.7" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-10.0.7-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-10.0.7-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.7" release="150000.6.83.2" arch="src" src="src/cloud-regionsrv-client-10.0.7-150000.6.83.2.src.rpm">
          <filename>cloud-regionsrv-client-10.0.7-150000.6.83.2.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4469</id>
    <title>Recommended update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670994330"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197998" id="1197998" title="sudo maintenance update to sudo-1.8.27-4.18.1 broke LDAP query sudo rules for windbind connected AD user." type="bugzilla"/>
    </references>
    <description>This update for sudo fixes the following issues:

- Change sudo-ldap schema from ASCII to UTF8 to fix a regression introduced in a previous maintenance update
  (bsc#1197998)
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="src" src="src/sudo-1.9.9-150400.4.9.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.9.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.9.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4640</id>
    <title>Recommended update for drbd-utils</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672396236"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204276" id="1204276" title="scripts available for DRBD v8 and DRBD v9" type="bugzilla"/>
    </references>
    <description>This update for drbd-utils fixes the following issue:

- Remove crm-fence-peer.sh for drbd8 to avoid confusion with v9 (bsc#1204276)
</description>
    <pkglist>
      <collection>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.6.1" arch="src" src="src/drbd-utils-9.19.0-150400.3.6.1.src.rpm">
          <filename>drbd-utils-9.19.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.6.1" arch="x86_64" src="x86_64/drbd-utils-9.19.0-150400.3.6.1.x86_64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.6.1" arch="aarch64" src="aarch64/drbd-utils-9.19.0-150400.3.6.1.aarch64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4489</id>
    <title>Recommended update for keepalived</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671020914"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-11203" id="SLE-11203" title="https://jira.suse.com/browse/SLE-11203" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2086" id="PED-2086" title="https://jira.suse.com/browse/PED-2086" type="jira"/>
    </references>
    <description>
This update of keepalived fixes the following issues:

- rebuild against the new net-snmp (jsc#SLE-11203).
- rebuild against the new libipset (jsc#PED-2086).
</description>
    <pkglist>
      <collection>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="src" src="src/keepalived-2.2.2-150400.3.7.2.src.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.src.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="x86_64" src="x86_64/keepalived-2.2.2-150400.3.7.2.x86_64.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.x86_64.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="aarch64" src="aarch64/keepalived-2.2.2-150400.3.7.2.aarch64.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-35</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672932214"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1164051" id="1164051" title="WARNING: at ../lib/vsprintf.c:1916 when create a MD Raid0 array with 50 disks. ref:_00D1igLOd._5001iLhGpk:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184350" id="1184350" title="SLES 15 SP3 - LPAR network did not come up after 10minutes during lpm test: (ibmvnic) (HANA)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189297" id="1189297" title="Partner-L3: Linux path loss occurs during FCoE uplink failover test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190256" id="1190256" title="Keyboard not working after cold-boot on ASUS Zenbook 14 UM425UA with Tumbleweed 20210904" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203183" id="1203183" title="Partner-L3: Problems with IPv6 with large messages on OPA fabrics" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203391" id="1203391" title="VUL-0: CVE-2022-3176: kernel: io_uring: disable polling pollfree files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203511" id="1203511" title="VUL-0: CVE-2022-3176: kernel live patch: io_uring: disable polling pollfree files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203960" id="1203960" title="VUL-0: CVE-2022-41850: kernel: Race condition in roccat_report_event in drivers/hid/hid-roccat.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204228" id="1204228" title="VUL-0: CVE-2022-2602: kernel: defer registered files gc to io_uring release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204405" id="1204405" title="VUL-0: CVE-2022-3566: kernel: race condition in tcp_getsockopt()/tcp_setsockopt() of the component TCP handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204414" id="1204414" title="VUL-0: CVE-2022-3567: kernel: race condition in inet6_stream_ops()/inet6_dgram_ops() of the component IPv6 Handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204631" id="1204631" title="VUL-0: CVE-2022-3635: kernel-source,kernel-source-rt,kernel-source-azure: use-after-free bugs caused by tst_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204636" id="1204636" title="VUL-0: CVE-2022-3635: kernel live patch: use-after-free bugs caused by tst_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204780" id="1204780" title="VUL-0: CVE-2022-3707: kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204810" id="1204810" title="Delays in NPIV discovery/reinstatement causes LPM failures/readonly filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204850" id="1204850" title="Sometimes newly deployed VMs are not getting accelerated network during provisioning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205007" id="1205007" title="kvm_intel module crash with vmx_sync_pir_to_irr+0xe2/0x120" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205100" id="1205100" title="No sound from internal speakers [Samsung GBP360 aka NP930QDB]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205111" id="1205111" title="USB audio interface Edirol M-100FX is not recognized as audio interface anymore with kernel version &gt; 6.0.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205113" id="1205113" title="io_uring fails t/exit-no-cleanup.t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205128" id="1205128" title="VUL-0: CVE-2022-43945: kernel-source-azure,kernel-source,kernel-source-rt: nfsd: buffer overflow due to incorrect calculation of send buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205130" id="1205130" title="VUL-0: CVE-2022-43945: kernel live patch: nfsd: buffer overflow due to incorrect calculation of send buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205149" id="1205149" title="%kernel_module_package_buildreqs needs to require suse-kernel-rpm-scriptlets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205153" id="1205153" title="VUL-0: kernel: Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205220" id="1205220" title="VUL-0: CVE-2022-3903: kernel: An invalid pipe direction in the mceusb driver cause DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205264" id="1205264" title="Apply microcode patch early on every logical thread" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205282" id="1205282" title="objtool does not recognise AMX instructions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205331" id="1205331" title="fuse: fix readdir cache race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205332" id="1205332" title="fuse: add file_modified() to fallocate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205427" id="1205427" title="SLES 15 SP4 - kernel: missing exception table entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205428" id="1205428" title="SLES 15 SP3 - kernel: missing exception table entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205473" id="1205473" title="VUL-0: kernel: AMD speculation fix for S3 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205507" id="1205507" title="Yast Sound configuration not persistent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205514" id="1205514" title="VUL-0: CVE-2022-4095: kernel: use after free in rtl8712 driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205521" id="1205521" title="fstests btrfs/262 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205567" id="1205567" title="WARNING: CPU: 2 PID: 31106 at ../mm/vmalloc.c:2590 __vunmap+0x207/0x240 - ref:_00D1igLOd._5005qFh4oZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205616" id="1205616" title="fstests generic/681 fails in xfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205617" id="1205617" title="[Azure] VM Deployment Failures Patch Request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205653" id="1205653" title="SLES15 SP4 MU [ 5.14.21-150400.24.28-default ] : smt=off is taking more time on SLES15 SP4 [59min]." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205671" id="1205671" title="VUL-0: CVE-2022-41858: kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205679" id="1205679" title="fstests generic/682 fails in xfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205683" id="1205683" title="[SPR] Telemetry value is not correct with read method" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205700" id="1205700" title="VUL-0: CVE-2022-4139: kernel: incorrect GPU TLB flush in i915 kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205705" id="1205705" title="VUL-0: CVE-2022-42895: kernel-source,kernel-source-azure,kernel-source-rt: Information leak in l2cap_parse_conf_req function in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205709" id="1205709" title="VUL-0: CVE-2022-42896: kernel-source,kernel-source-azure,kernel-source-rt: Use after free in l2cap_connect and l2cap_le_connect_req functions in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205711" id="1205711" title="VUL-0: CVE-2022-4129: kernel-source-rt,kernel-source,kernel-source-azure: kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205744" id="1205744" title="[SLE15 SP5 Beta1][KVM]Host hang when creating VM with shadow mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205764" id="1205764" title="VUL-0: CVE-2022-45888: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/char/xillybus/xillyusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205796" id="1205796" title="VUL-0: CVE-2022-45934: kernel: integer wraparound via L2CAP_CONF_REQ packets affects l2cap_config_req in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205882" id="1205882" title="VUL-0: CVE-2022-45869: kernel-source-rt,kernel-source,kernel-source-azure: Race condition in the x86 KVM subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205993" id="1205993" title="Kernel doesn't build when swap is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206035" id="1206035" title="[PATCH] btrfs: prevent subvol with swapfile from being deleted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206036" id="1206036" title="btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206045" id="1206045" title="ceph: properly handle statfs on multifs setups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206046" id="1206046" title="ceph: switch netfs read ops to use rreq-&gt;inode instead of  rreq-&gt;mapping-&gt;host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206047" id="1206047" title="ceph: do not update snapshot context when there is no new snapshot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206048" id="1206048" title="ceph: fix inode reference leakage in ceph_get_snapdir()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206049" id="1206049" title="ceph: fix memory leak in ceph_readdir when note_last_dentry returns  error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206050" id="1206050" title="ceph: allow ceph.dir.rctime xattr to be updatable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206051" id="1206051" title="ceph: avoid putting the realm twice when decoding snaps fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206056" id="1206056" title="[PATCH] btrfs: fix processing of delayed data refs during backref  walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206057" id="1206057" title="[PATCH] btrfs: fix processing of delayed tree block refs during  backref walking" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" id="CVE-2022-3635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45869" id="CVE-2022-45869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45888" id="CVE-2022-45888" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45888" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" id="CVE-2022-4139" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" id="CVE-2022-41850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" id="CVE-2022-45934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" id="CVE-2022-4129" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" id="CVE-2022-42896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" id="CVE-2022-42895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41858" id="CVE-2022-41858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" id="CVE-2022-43945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" id="CVE-2022-4095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" id="CVE-2022-3566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" id="CVE-2022-3567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" id="CVE-2022-2602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" id="CVE-2022-3176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" id="CVE-2022-3903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" id="CVE-2022-3707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1573" id="PED-1573" title="https://jira.suse.com/browse/PED-1573" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1706" id="PED-1706" title="https://jira.suse.com/browse/PED-1706" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1936" id="PED-1936" title="https://jira.suse.com/browse/PED-1936" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2684" id="PED-2684" title="https://jira.suse.com/browse/PED-2684" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-611" id="PED-611" title="https://jira.suse.com/browse/PED-611" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-824" id="PED-824" title="https://jira.suse.com/browse/PED-824" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-849" id="PED-849" title="https://jira.suse.com/browse/PED-849" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202341" id="1202341" title="Raspi 4 (4GB): boots to blank screen with kernel 5.14.21-150400.24.11-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204693" id="1204693" title="BTF-enabled kernel fails to build with dwarves-1.24" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206037" id="1206037" title="VUL-0: kernel: MSR_SPEC_CTRL not correctly updated when doing S3 resumes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206113" id="1206113" title="VUL-0: CVE-2022-3643: xen: Guests can trigger NIC interface reset/abort/crash via netback (XSA-423)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206114" id="1206114" title="VUL-0: CVE-2022-42328, CVE-2022-42329: xen: Guests can trigger deadlock in Linux netback driver (XSA-424)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206147" id="1206147" title="fstests btrfs/275 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206149" id="1206149" title="fstests btrfs/264 fails" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" id="CVE-2022-4378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" id="CVE-2022-42328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" id="CVE-2022-42329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" id="CVE-2022-3643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206207" id="1206207" title="VUL-0: CVE-2022-4378: kernel: stack overflow in __do_proc_dointvec" type="bugzilla"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-45869: Fixed a race condition in the x86 KVM subsystem which could cause a denial of service (bsc#1205882).
- CVE-2022-45888: Fixed a use-after-free during physical removal of a USB devices when using drivers/char/xillybus/xillyusb.c (bsc#1205764).
- CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory (bsc#1205700).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711)
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-3566: Fixed a race condition in the functions tcp_getsockopt/tcp_setsockopt. The manipulation leads to a race condition (bsc#1204405).
- CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1204228).
- CVE-2022-3176: Fixed a use-after-free in io_uring related to signalfd_poll() and binder_poll() (bsc#1203391).
- CVE-2022-3707: Fixed a double free in the Intel GVT-g graphics driver (bsc#1204780).

The following non-security bugs were fixed:

- ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization (git-fixes).
- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (git-fixes).
- ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (git-fixes).
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (git-fixes).
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio (git-fixes).
- ALSA: hda/realtek: Add Positivo C6300 model quirk (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1205100).
- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (bsc#1205100).
- ALSA: hda: fix potential memleak in 'add_widget_node' (git-fixes).
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (git-fixes).
- ALSA: usb-audio: Add quirk entry for M-Audio Micro (git-fixes).
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (git-fixes).
- ALSA: usb-audio: Remove redundant workaround for Roland quirk (bsc#1205111).
- ALSA: usb-audio: Yet more regression for for the delayed card registration (bsc#1205111).
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (git-fixes).
- ARM: at91: rm9200: fix usb device clock id (git-fixes).
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node (git-fixes).
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (git-fixes).
- ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (git-fixes).
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (git-fixes).
- ARM: dts: imx7: Fix NAND controller size-cells (git-fixes).
- ARM: mxs: fix memory leak in mxs_machine_init() (git-fixes).
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (git-fixes).
- ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (git-fixes).
- ASoC: codecs: jz4725b: Fix spelling mistake &quot;Sourc&quot; -&gt; &quot;Source&quot;, &quot;Routee&quot; -&gt; &quot;Route&quot; (git-fixes).
- ASoC: codecs: jz4725b: add missed Line In power control bit (git-fixes).
- ASoC: codecs: jz4725b: fix capture selector naming (git-fixes).
- ASoC: codecs: jz4725b: fix reported volume for Master ctl (git-fixes).
- ASoC: codecs: jz4725b: use right control for Capture Volume (git-fixes).
- ASoC: core: Fix use-after-free in snd_soc_exit() (git-fixes).
- ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (git-fixes).
- ASoC: fsl_sai: use local device pointer (git-fixes).
- ASoC: max98373: Add checks for devm_kcalloc (git-fixes).
- ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (git-fixes).
- ASoC: ops: Fix bounds check for _sx controls (git-fixes).
- ASoC: rt1019: Fix the TDM settings (git-fixes).
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (git-fixes).
- ASoC: soc-pcm: Do not zero TDM masks in __soc_pcm_open() (git-fixes).
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (git-fixes).
- ASoC: stm32: dfsdm: manage cb buffers cleanup (git-fixes).
- ASoC: tas2764: Fix set_tdm_slot in case of single slot (git-fixes).
- ASoC: tas2770: Fix set_tdm_slot in case of single slot (git-fixes).
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (git-fixes).
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (git-fixes).
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (git-fixes).
- Decrease the number of SMB3 smbdirect client SGEs (bsc#1193629).
- Drivers: hv: Always reserve framebuffer region for Gen1 VMs (git-fixes).
- Drivers: hv: Fix syntax errors in comments (git-fixes).
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (git-fixes).
- Drivers: hv: fix repeated words in comments (git-fixes).
- Drivers: hv: remove duplicate word in a comment (git-fixes).
- Drivers: hv: vmbus: Accept hv_sock offers in isolated guests (git-fixes).
- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Do not wait for the ACPI device upon initialization (git-fixes).
- Drivers: hv: vmbus: Fix kernel-doc (git-fixes).
- Drivers: hv: vmbus: Optimize vmbus_on_event (git-fixes).
- Drivers: hv: vmbus: Release cpu lock in error case (git-fixes).
- Drivers: hv: vmbus: Use PCI_VENDOR_ID_MICROSOFT for better discoverability (git-fixes).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: fix typo in comment (git-fixes).
- Fix formatting of client smbdirect RDMA logging (bsc#1193629).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- HID: hyperv: fix possible memory leak in mousevsc_probe() (git-fixes).
- HID: playstation: add initial DualSense Edge controller support (git-fixes).
- HID: saitek: add madcatz variant of MMO7 mouse device ID (git-fixes).
- Handle variable number of SGEs in client smbdirect send (bsc#1193629).
- IB/hfi1: Correctly move list in sc_disable() (git-fixes)
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (git-fixes)
- Input: goodix - try resetting the controller when no config is set (git-fixes).
- Input: i8042 - fix leaking of platform device on module removal (git-fixes).
- Input: iforce - invert valid length check when fetching device IDs (git-fixes).
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (git-fixes).
- Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (git-fixes).
- Input: soc_button_array - add use_low_level_irq module parameter (git-fixes).
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (git-fixes).
- KVM: Move wiping of the kvm-&gt;vcpus array to common code (git-fixes).
- KVM: SEV: Mark nested locking of vcpu-&gt;lock (git-fixes).
- KVM: SVM: Disable SEV-ES support if MMIO caching is disable (git-fixes).
- KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported (git-fixes).
- KVM: SVM: adjust register allocation for __svm_vcpu_run() (git-fixes).
- KVM: SVM: move guest vmsave/vmload back to assembly (git-fixes).
- KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm (git-fixes).
- KVM: SVM: retrieve VMCB from assembly (git-fixes).
- KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (git-fixes).
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (git-fixes).
- KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (git-fixes).
- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (bsc#1205007).
- KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (git-fixes).
- KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (git-fixes).
- KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (git-fixes).
- KVM: nVMX: Rename handle_vm{on,off}() to handle_vmx{on,off}() (git-fixes).
- KVM: s390: Add a routine for setting userspace CPU state (git-fixes jsc#PED-611).
- KVM: s390: Simplify SIGP Set Arch handling (git-fixes jsc#PED-611).
- KVM: s390: pv: do not allow userspace to set the clock under PV (git-fixes).
- KVM: s390: pv: leak the topmost page table when destroy fails (git-fixes).
- KVM: x86/mmu: Fix wrong/misleading comments in TDP MMU fast zap (git-fixes).
- KVM: x86/mmu: WARN if old _or_ new SPTE is REMOVED in non-atomic path (git-fixes).
- KVM: x86/mmu: fix memoryleak in kvm_mmu_vendor_module_init() (git-fixes).
- KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (git-fixes).
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (git-fixes).
- KVM: x86/pmu: Use different raw event masks for AMD and Intel (git-fixes).
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (git-fixes).
- KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (git-fixes).
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000001H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000006H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000008H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001AH (git-fixes).
- KVM: x86: Report error when setting CPUID if Hyper-V allocation fails (git-fixes).
- KVM: x86: Retry page fault if MMU reload is pending and root has no sp (bsc#1205744).
- KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (git-fixes).
- KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (git-fixes).
- KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (git-fixes).
- KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (git-fixes).
- KVM: x86: avoid loading a vCPU after .vm_destroy was called (git-fixes).
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (git-fixes).
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (git-fixes).
- KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes).
- KVM: x86: emulator: update the emulation mode after rsm (git-fixes).
- KVM: x86: use a separate asm-offsets.c file (git-fixes).
- MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- NFC: nci: fix memory leak in nci_rx_data_packet() (git-fixes).
- PCI: Move PCI_VENDOR_ID_MICROSOFT/PCI_DEVICE_ID_HYPERV_VIDEO definitions to pci_ids.h (git-fixes).
- PCI: hv: Add validation for untrusted Hyper-V values (git-fixes).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (git-fixes).
- RDMA/cm: Fix memory leak in ib_cm_insert_listen (git-fixes)
- RDMA/cm: Use SLID in the work completion as the DLID in responder side (git-fixes)
- RDMA/cma: Use output interface for net_dev check (git-fixes)
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (git-fixes)
- RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes)
- RDMA/hfi1: Prevent use of lock before it is initialized (git-fixes)
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (git-fixes)
- RDMA/hns: Correct the type of variables participating in the shift operation (git-fixes)
- RDMA/hns: Disable local invalidate operation (git-fixes)
- RDMA/hns: Fix incorrect clearing of interrupt status register (git-fixes)
- RDMA/hns: Fix supported page size (git-fixes)
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift (git-fixes)
- RDMA/hns: Remove magic number (git-fixes)
- RDMA/hns: Remove the num_cqc_timer variable (git-fixes)
- RDMA/hns: Remove the num_qpc_timer variable (git-fixes)
- RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP (git-fixes)
- RDMA/hns: Replace tab with space in the right-side comments (git-fixes)
- RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (git-fixes)
- RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (git-fixes)
- RDMA/irdma: Use s/g array in post send only when its valid (git-fixes)
- RDMA/mlx5: Set local port to one when accessing counters (git-fixes)
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (git-fixes)
- RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (git-fixes)
- RDMA/rtrs-srv: Fix modinfo output for stringify (git-fixes)
- RDMA/rxe: Limit the number of calls to each tasklet (git-fixes)
- RDMA/rxe: Remove useless pkt parameters (git-fixes)
- Reduce client smbdirect max receive segment size (bsc#1193629).
- SCSI: scsi_probe_lun: retry INQUIRY after timeout (bsc#1189297).
- SMB3: fix lease break timeout when multiple deferred close handles for the same file (bsc#1193629).
- USB: bcma: Make GPIO explicitly optional (git-fixes).
- USB: serial: option: add Fibocom FM160 0x0111 composition (git-fixes).
- USB: serial: option: add Sierra Wireless EM9191 (git-fixes).
- USB: serial: option: add u-blox LARA-L6 modem (git-fixes).
- USB: serial: option: add u-blox LARA-R6 00B modem (git-fixes).
- USB: serial: option: remove old LARA-R6 PID (git-fixes).
- arcnet: fix potential memory leak in com20020_probe() (git-fixes).
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- arm64: Add AMPERE1 to the Spectre-BHB affected list (git-fixes).
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (git-fixes)
- arm64: dts: imx8: correct clock order (git-fixes).
- arm64: dts: imx8mm: Fix NAND controller size-cells (git-fixes).
- arm64: dts: imx8mn: Fix NAND controller size-cells (git-fixes).
- arm64: dts: juno: Add thermal critical trip points (git-fixes).
- arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: rockchip: add enable-strobe-pulldown to emmc phy on nanopi4 (git-fixes).
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (git-fixes).
- arm64: efi: Fix handling of misaligned runtime regions and drop warning (git-fixes).
- arm64: entry: avoid kprobe recursion (git-fixes).
- arm64: errata: Add Cortex-A55 to the repeat tlbi list (git-fixes). Enable CONFIG_ARM64_ERRATUM_2441007, too
- arm64: errata: Remove AES hwcap for COMPAT tasks (git-fixes) Enable CONFIG_ARM64_ERRATUM_1742098 in arm64/default
- arm64: fix rodata=full again (git-fixes)
- ata: libata-core: do not issue non-internal commands once EH is pending (git-fixes).
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (git-fixes).
- ata: libata-scsi: simplify __ata_scsi_queuecmd() (git-fixes).
- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tdev_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tlink_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tport_add() (git-fixes).
- audit: fix undefined behavior in bit shift for AUDIT_BIT (git-fixes).
- blk-cgroup: fix missing put device in error path from blkg_conf_pref() (git-fixes).
- blk-mq: Properly init requests from blk_mq_alloc_request_hctx() (git-fixes).
- blk-mq: do not create hctx debugfs dir until q-&gt;debugfs_dir is created (git-fixes).
- blk-mq: fix io hung due to missing commit_rqs (git-fixes).
- blk-wbt: call rq_qos_add() after wb_normal is initialized (git-fixes).
- blktrace: Trace remapped requests correctly (git-fixes).
- block/rnbd-srv: Set keep_id to true after mutex_trylock (git-fixes).
- block: add bio_start_io_acct_time() to control start_time (git-fixes).
- block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (git-fixes).
- block: drop unused includes in &amp;lt;linux/genhd.h&gt; (git-fixes).
- bridge: switchdev: Fix memory leaks when changing VLAN protocol (git-fixes).
- btrfs: check if root is readonly while setting security xattr (bsc#1206147).
- btrfs: do not allow compression on nodatacow files (bsc#1206149).
- btrfs: export a helper for compression hard check (bsc#1206149).
- btrfs: fix processing of delayed data refs during backref walking (bsc#1206056).
- btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057).
- btrfs: prevent subvol with swapfile from being deleted (bsc#1206035).
- btrfs: send: always use the rbtree based inode ref management infrastructure (bsc#1206036).
- btrfs: send: fix failures when processing inodes with no links (bsc#1206036).
- btrfs: send: fix send failure of a subcase of orphan inodes (bsc#1206036).
- btrfs: send: fix sending link commands for existing file paths (bsc#1206036).
- btrfs: send: introduce recorded_ref_alloc and recorded_ref_free (bsc#1206036).
- btrfs: send: refactor arguments of get_inode_info() (bsc#1206036).
- btrfs: send: remove unused found_type parameter to lookup_dir_item_inode() (bsc#1206036).
- btrfs: send: remove unused type parameter to iterate_inode_ref_t (bsc#1206036).
- btrfs: send: use boolean types for current inode status (bsc#1206036).
- bus: sunxi-rsb: Remove the shutdown callback (git-fixes).
- bus: sunxi-rsb: Support atomic transfers (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- can: af_can: fix NULL pointer dereference in can_rx_register() (git-fixes).
- can: cc770: cc770_isa_probe(): add missing free_cc770dev() (git-fixes).
- can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (git-fixes).
- can: j1939: j1939_send_one(): fix missing CAN header initialization (git-fixes).
- can: m_can: Add check for devm_clk_get (git-fixes).
- can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (git-fixes).
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (git-fixes).
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (git-fixes).
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (git-fixes).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: avoid putting the realm twice when decoding snaps fails (bsc#1206051).
- ceph: do not update snapshot context when there is no new snapshot (bsc#1206047).
- ceph: fix inode reference leakage in ceph_get_snapdir() (bsc#1206048).
- ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (bsc#1206049).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of rreq-&gt;mapping-&gt;host (bsc#1206046).
- char: tpm: Protect tpm_pm_suspend with locks (git-fixes).
- cifs: Add constructor/destructors for tcon-&gt;cfid (bsc#1193629).
- cifs: Add helper function to check smb1+ server (bsc#1193629).
- cifs: Do not access tcon-&gt;cfids-&gt;cfid directly from is_path_accessible (bsc#1193629).
- cifs: Do not use tcon-&gt;cfid directly, use the cfid we get from open_cached_dir (bsc#1193629).
- cifs: Fix connections leak when tlink setup failed (git-fixes).
- cifs: Fix memory leak on the deferred close (bsc#1193629).
- cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1193629).
- cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1193629).
- cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1193629).
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (bsc#1193629).
- cifs: Fix wrong return value checking when GETFLAGS (git-fixes).
- cifs: Fix xid leak in cifs_copy_file_range() (bsc#1193629).
- cifs: Fix xid leak in cifs_create() (bsc#1193629).
- cifs: Fix xid leak in cifs_flock() (bsc#1193629).
- cifs: Fix xid leak in cifs_get_file_info_unix() (bsc#1193629).
- cifs: Fix xid leak in cifs_ses_add_channel() (bsc#1193629).
- cifs: Make tcon contain a wrapper structure cached_fids instead of cached_fid (bsc#1193629).
- cifs: Move cached-dir functions into a separate file (bsc#1193629).
- cifs: Replace a couple of one-element arrays with flexible-array members (bsc#1193629).
- cifs: Use after free in debug code (git-fixes).
- cifs: Use help macro to get the header preamble size (bsc#1193629).
- cifs: Use help macro to get the mid header size (bsc#1193629).
- cifs: add check for returning value of SMB2_close_init (git-fixes).
- cifs: add check for returning value of SMB2_set_info_init (git-fixes).
- cifs: add missing spinlock around tcon refcount (bsc#1193629).
- cifs: alloc_mid function should be marked as static (bsc#1193629).
- cifs: always initialize struct msghdr smb_msg completely (bsc#1193629).
- cifs: always iterate smb sessions using primary channel (bsc#1193629).
- cifs: avoid deadlocks while updating iface (bsc#1193629).
- cifs: avoid unnecessary iteration of tcp sessions (bsc#1193629).
- cifs: avoid use of global locks for high contention data (bsc#1193629).
- cifs: cache the dirents for entries in a cached directory (bsc#1193629).
- cifs: change iface_list from array to sorted linked list (bsc#1193629).
- cifs: destage dirty pages before re-reading them for cache=none (bsc#1193629).
- cifs: do not send down the destination address to sendmsg for a SOCK_STREAM (bsc#1193629).
- cifs: drop the lease for cached directories on rmdir or rename (bsc#1193629).
- cifs: during reconnect, update interface if necessary (bsc#1193629).
- cifs: enable caching of directories for which a lease is held (bsc#1193629).
- cifs: find and use the dentry for cached non-root directories also (bsc#1193629).
- cifs: fix double-fault crash during ntlmssp (bsc#1193629).
- cifs: fix lock length calculation (bsc#1193629).
- cifs: fix memory leaks in session setup (bsc#1193629).
- cifs: fix missing unlock in cifs_file_copychunk_range() (git-fixes).
- cifs: fix race condition with delayed threads (bsc#1193629).
- cifs: fix skipping to incorrect offset in emit_cached_dirents (bsc#1193629).
- cifs: fix small mempool leak in SMB2_negotiate() (bsc#1193629).
- cifs: fix static checker warning (bsc#1193629).
- cifs: fix uninitialised var in smb2_compound_op() (bsc#1193629).
- cifs: fix use-after-free caused by invalid pointer `hostname` (bsc#1193629).
- cifs: fix use-after-free on the link name (bsc#1193629).
- cifs: fix wrong unlock before return from cifs_tree_connect() (bsc#1193629).
- cifs: improve handlecaching (bsc#1193629).
- cifs: improve symlink handling for smb2+ (bsc#1193629).
- cifs: lease key is uninitialized in smb1 paths (bsc#1193629).
- cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1193629).
- cifs: list_for_each() -&gt; list_for_each_entry() (bsc#1193629).
- cifs: misc: fix spelling typo in comment (bsc#1193629).
- cifs: move from strlcpy with unused retval to strscpy (bsc#1193629).
- cifs: periodically query network interfaces from server (bsc#1193629).
- cifs: populate empty hostnames for extra channels (bsc#1193629).
- cifs: prevent copying past input buffer boundaries (bsc#1193629).
- cifs: remove &quot;cifs_&quot; prefix from init/destroy mids functions (bsc#1193629).
- cifs: remove initialization value (bsc#1193629).
- cifs: remove minor build warning (bsc#1193629).
- cifs: remove redundant initialization to variable mnt_sign_enabled (bsc#1193629).
- cifs: remove remaining build warnings (bsc#1193629).
- cifs: remove some camelCase and also some static build warnings (bsc#1193629).
- cifs: remove unnecessary (void*) conversions (bsc#1193629).
- cifs: remove unnecessary locking of chan_lock while freeing session (bsc#1193629).
- cifs: remove unnecessary type castings (bsc#1193629).
- cifs: remove unused server parameter from calc_smb_size() (bsc#1193629).
- cifs: remove useless DeleteMidQEntry() (bsc#1193629).
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (bsc#1193629).
- cifs: replace kfree() with kfree_sensitive() for sensitive data (bsc#1193629).
- cifs: return correct error in -&gt;calc_signature() (bsc#1193629).
- cifs: return errors during session setup during reconnects (bsc#1193629).
- cifs: revalidate mapping when doing direct writes (bsc#1193629).
- cifs: secmech: use shash_desc directly, remove sdesc (bsc#1193629).
- cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (bsc#1193629).
- cifs: skip extra NULL byte in filenames (bsc#1193629).
- cifs: store a pointer to a fid in the cfid structure instead of the struct (bsc#1193629).
- cifs: truncate the inode and mapping when we simulate fcollapse (bsc#1193629).
- cifs: update cifs_ses::ip_addr after failover (bsc#1193629).
- cifs: update internal module number (bsc#1193629).
- cifs: use ALIGN() and round_up() macros (bsc#1193629).
- cifs: use LIST_HEAD() and list_move() to simplify code (bsc#1193629).
- cifs: when a channel is not found for server, log its connection id (bsc#1193629).
- cifs: when insecure legacy is disabled shrink amount of SMB1 code (bsc#1193629).
- clocksource/drivers/hyperv: add data structure for reference TSC MSR (git-fixes).
- cpufreq: intel_pstate: Handle no_turbo in frequency invariance (jsc#PED-849).
- cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (jsc#PED-849).
- cpuidle: intel_idle: Drop redundant backslash at line end (jsc#PED-1936).
- dm btree remove: fix use after free in rebalance_children() (git-fixes).
- dm crypt: make printing of the key constant-time (git-fixes).
- dm era: commit metadata in postsuspend after worker stops (git-fixes).
- dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes).
- dm mirror log: clear log bits up to BITS_PER_LONG boundary (git-fixes).
- dm raid: fix accesses beyond end of raid member array (git-fixes).
- dm stats: add cond_resched when looping over entries (git-fixes).
- dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (git-fixes).
- dm: fix double accounting of flush with data (git-fixes).
- dm: interlock pending dm_io and dm_wait_for_bios_completion (git-fixes).
- dm: properly fix redundant bio-based IO accounting (git-fixes).
- dm: remove unnecessary assignment statement in alloc_dev() (git-fixes).
- dm: return early from dm_pr_call() if DM device is suspended (git-fixes).
- dm: revert partial fix for redundant bio-based IO accounting (git-fixes).
- dma-buf: fix racing conflict of dma_heap_add() (git-fixes).
- dmaengine: at_hdmac: Check return code of dma_async_device_register (git-fixes).
- dmaengine: at_hdmac: Do not allow CPU to reorder channel enable (git-fixes).
- dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (git-fixes).
- dmaengine: at_hdmac: Do not start transactions at tx_submit level (git-fixes).
- dmaengine: at_hdmac: Fix at_lli struct definition (git-fixes).
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (git-fixes).
- dmaengine: at_hdmac: Fix concurrency over descriptor (git-fixes).
- dmaengine: at_hdmac: Fix concurrency over the active list (git-fixes).
- dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (git-fixes).
- dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (git-fixes).
- dmaengine: at_hdmac: Fix impossible condition (git-fixes).
- dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (git-fixes).
- dmaengine: at_hdmac: Free the memset buf without holding the chan lock (git-fixes).
- dmaengine: at_hdmac: Protect atchan-&gt;status with the channel lock (git-fixes).
- dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (git-fixes).
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (git-fixes).
- dmaengine: pxa_dma: use platform_get_irq_optional (git-fixes).
- dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (git-fixes).
- docs, kprobes: Fix the wrong location of Kprobes (git-fixes).
- docs/core-api: expand Fedora instructions for GCC plugins (git-fixes).
- drm/amd/display: Add HUBP surface flip interrupt handler (git-fixes).
- drm/amdgpu: disable BACO on special BEIGE_GOBY card (git-fixes).
- drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (git-fixes).
- drm/amdkfd: Migrate in CPU page fault use current mm (git-fixes).
- drm/amdkfd: avoid recursive lock in migrations back to RAM (git-fixes).
- drm/amdkfd: handle CPU fault on COW mapping (git-fixes).
- drm/drv: Fix potential memory leak in drm_dev_init() (git-fixes).
- drm/hyperv: Add ratelimit on error message (git-fixes).
- drm/hyperv: Do not overwrite dirt_needed value set by host (git-fixes).
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (git-fixes).
- drm/i915/sdvo: Filter out invalid outputs more sensibly (git-fixes).
- drm/i915/sdvo: Setup DDC fully before output init (git-fixes).
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (git-fixes).
- drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (git-fixes).
- drm/msm/hdmi: fix IRQ lifetime (git-fixes).
- drm/panel: simple: set bpc field for logic technologies displays (git-fixes).
- drm/rockchip: dsi: Force synchronous probe (git-fixes).
- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (git-fixes).
- drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (git-fixes).
- drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (git-fixes).
- dt-bindings: power: gpcv2: add power-domains property (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- e100: Fix possible use after free in e100_xmit_prepare (git-fixes).
- efi/tpm: Pass correct address to memblock_reserve (git-fixes).
- efi: random: Use 'ACPI reclaim' memory for random seed (git-fixes).
- efi: random: reduce seed size to 32 bytes (git-fixes).
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors (git-fixes).
- firmware: arm_scmi: Suppress the driver's bind attributes (git-fixes).
- firmware: coreboot: Register bus in module init (git-fixes).
- fm10k: Fix error handling in fm10k_init_module() (git-fixes).
- ftrace: Fix null pointer dereference in ftrace_add_mod() (git-fixes).
- ftrace: Fix the possible incorrect kernel message (git-fixes).
- ftrace: Fix use-after-free for dynamic ftrace_ops (git-fixes).
- ftrace: Optimize the allocation for mcount entries (git-fixes).
- fuse: add file_modified() to fallocate (bsc#1205332).
- fuse: fix readdir cache race (bsc#1205331).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- hamradio: fix issue of dev reference count leakage in bpq_device_event() (git-fixes).
- hv_netvsc: Fix potential dereference of NULL pointer (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (git-fixes).
- hv_sock: Add validation for untrusted Hyper-V values (git-fixes).
- hv_sock: Check hv_pkt_iter_first_raw()'s return value (git-fixes).
- hv_sock: Copy packets sent by Hyper-V out of the ring buffer (git-fixes).
- hwmon: (coretemp) Check for null before removing sysfs attrs (git-fixes).
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (git-fixes).
- hwmon: (i5500_temp) fix missing pci_disable_device() (git-fixes).
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (git-fixes).
- hwmon: (ina3221) Fix shunt sum critical calculation (git-fixes).
- hwmon: (ltc2947) fix temperature scaling (git-fixes).
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (git-fixes).
- i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (git-fixes).
- i2c: npcm7xx: Fix error handling in npcm_i2c_init() (git-fixes).
- i2c: piix4: Fix adapter not be removed in piix4_remove() (git-fixes).
- i2c: tegra: Allocate DMA memory for DMA engine (git-fixes).
- i2c: xiic: Add platform module alias (git-fixes).
- ibmvnic: Free rwi on reset success (bsc#1184350 ltc#191533 git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (git-fixes).
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (git-fixes).
- iio: adc: mp2629: fix potential array out of bound access (git-fixes).
- iio: adc: mp2629: fix wrong comparison of channel (git-fixes).
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (git-fixes).
- iio: health: afe4403: Fix oob read in afe4403_read_raw (git-fixes).
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (git-fixes).
- iio: light: apds9960: fix wrong register for gesture gain (git-fixes).
- iio: light: rpr0521: add missing Kconfig dependencies (git-fixes).
- iio: ms5611: Simplify IO callback parameters (git-fixes).
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (git-fixes).
- iio: pressure: ms5611: fixed value compensation bug (git-fixes).
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (git-fixes).
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (git-fixes).
- intel_idle: Add AlderLake support (jsc#PED-824).
- intel_idle: Fix SPR C6 optimization (jsc#PED-824 jsc#PED-1936).
- intel_idle: Fix the 'preferred_cstates' module parameter (jsc#PED-824 jsc#PED-1936).
- intel_idle: make SPR C1 and C1E be independent (jsc#PED-1936).
- io-wq: Remove duplicate code in io_workqueue_create() (bnc#1205113).
- io-wq: do not retry task_work creation failure on fatal conditions (bnc#1205113).
- io-wq: ensure we exit if thread group is exiting (git-fixes).
- io-wq: exclusively gate signal based exit on get_signal() return (git-fixes).
- io-wq: fix cancellation on create-worker failure (bnc#1205113).
- io-wq: fix silly logic error in io_task_work_match() (bnc#1205113).
- io_uring: correct __must_hold annotation (git-fixes).
- io_uring: drop ctx-&gt;uring_lock before acquiring sqd-&gt;lock (git-fixes).
- io_uring: ensure IORING_REGISTER_IOWQ_MAX_WORKERS works with SQPOLL (git-fixes).
- io_uring: fix io_timeout_remove locking (git-fixes).
- io_uring: fix missing mb() before waitqueue_active (git-fixes).
- io_uring: fix missing sigmask restore in io_cqring_wait() (git-fixes).
- io_uring: fix possible poll event lost in multi shot mode (git-fixes).
- io_uring: pin SQPOLL data before unlocking ring lock (git-fixes).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- kABI: Fix kABI after &quot;KVM: x86/pmu: Use different raw event masks for AMD and Intel&quot; (git-fixes).
- kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693).
- kexec: turn all kexec_mutex acquisitions into trylocks (git-fixes).
- mISDN: fix misuse of put_device() in mISDN_register_device() (git-fixes).
- mISDN: fix possible memory leak in mISDN_dsp_element_register() (git-fixes).
- mac80211: radiotap: Use BIT() instead of shifts (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (git-fixes).
- macsec: Fix invalid error code set (git-fixes).
- macsec: add missing attribute validation for offload (git-fixes).
- macsec: clear encryption keys from the stack after setting up offload (git-fixes).
- macsec: delete new rxsc when offload fails (git-fixes).
- macsec: fix detection of RXSCs when toggling offloading (git-fixes).
- macsec: fix secy-&gt;n_rx_sc accounting (git-fixes).
- md/raid5: Ensure stripe_fill happens on non-read IO with journal (git-fixes).
- md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (git-fixes).
- md: Replace snprintf with scnprintf (git-fixes, bsc#1164051).
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes).
- media: dvb-frontends/drxk: initialize err to 0 (git-fixes).
- media: meson: vdec: fix possible refcount leak in vdec_probe() (git-fixes).
- media: rkisp1: Do not pass the quantization to rkisp1_csm_config() (git-fixes).
- media: rkisp1: Initialize color space on resizer sink and source pads (git-fixes).
- media: rkisp1: Use correct macro for gradient registers (git-fixes).
- media: rkisp1: Zero v4l2_subdev_format fields in when validating links (git-fixes).
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes).
- media: v4l: subdev: Fail graciously when getting try data for NULL state (git-fixes).
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (git-fixes).
- mmc: core: Fix ambiguous TRIM and DISCARD arg (git-fixes).
- mmc: core: properly select voltage range without power cycle (git-fixes).
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (git-fixes).
- mmc: mmc_test: Fix removal of debugfs file (git-fixes).
- mmc: sdhci-brcmstb: Enable Clock Gating to save power (git-fixes).
- mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci-brcmstb: Re-organize flags (git-fixes).
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (git-fixes).
- mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (git-fixes).
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (git-fixes).
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (git-fixes).
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch (git-fixes).
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mtd: parsers: bcm47xxpart: Fix halfblock reads (git-fixes).
- mtd: parsers: bcm47xxpart: print correct offset on read error (git-fixes).
- mtd: spi-nor: intel-spi: Disable write protection only if asked (git-fixes).
- nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (git-fixes).
- net/smc: Avoid overwriting the copies of clcsock callback functions (git-fixes).
- net/smc: Fix an error code in smc_lgr_create() (git-fixes).
- net/smc: Fix possible access to freed memory in link clear (git-fixes).
- net/smc: Fix possible leaked pernet namespace in smc_init() (git-fixes).
- net/smc: Fix slab-out-of-bounds issue in fallback (git-fixes).
- net/smc: Fix sock leak when release after smc_shutdown() (git-fixes).
- net/smc: Forward wakeup to smc socket waitqueue after fallback (git-fixes).
- net/smc: Only save the original clcsock callback functions (git-fixes).
- net/smc: Send directly when TCP_CORK is cleared (git-fixes).
- net/smc: kABI workarounds for struct smc_link (git-fixes).
- net/smc: kABI workarounds for struct smc_sock (git-fixes).
- net/smc: send directly on setting TCP_NODELAY (git-fixes).
- net/x25: Fix skb leak in x25_lapb_receive_frame() (git-fixes).
- net: ethernet: nixge: fix NULL dereference (git-fixes).
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (git-fixes).
- net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (git-fixes).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (git-fixes).
- net: mdiobus: fix unbalanced node reference count (git-fixes).
- net: phy: fix null-ptr-deref while probe() failed (git-fixes).
- net: phy: marvell: add sleep time after enabling the loopback bit (git-fixes).
- net: phy: mscc: macsec: clear encryption keys when freeing a flow (git-fixes).
- net: smsc95xx: add support for Microchip EVB-LAN8670-USB (git-fixes).
- net: stmmac: work around sporadic tx issue on link-up (git-fixes).
- net: thunderbolt: Fix error handling in tbnet_init() (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- net: thunderx: Fix the ACPI memory leak (git-fixes).
- net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes).
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (git-fixes).
- net: wwan: iosm: fix kernel test robot reported error (git-fixes).
- nfc/nci: fix race with opening and closing (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (git-fixes).
- nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION (git-fixes).
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (git-fixes).
- nilfs2: fix deadlock in nilfs_count_free_blocks() (git-fixes).
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (git-fixes).
- nilfs2: fix use-after-free bug of ns_writer on remount (git-fixes).
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (git-fixes).
- panic, kexec: make __crash_kexec() NMI safe (git-fixes).
- parport_pc: Avoid FIFO port location truncation (git-fixes).
- phy: ralink: mt7621-pci: add sentinel to quirks table (git-fixes).
- phy: stm32: fix an error code in probe (git-fixes).
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (git-fixes).
- pinctrl: intel: Save and restore pins in &quot;direct IRQ&quot; mode (git-fixes).
- pinctrl: rockchip: list all pins in a possible mux route for PX30 (git-fixes).
- pinctrl: single: Fix potential division by zero (git-fixes).
- platform/surface: aggregator: Do not check for repeated unsequenced packets (git-fixes).
- platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (jsc#PED-2684 bsc#1205683).
- platform/x86/intel: hid: add quirk to support Surface Go 3 (git-fixes).
- platform/x86/intel: pmc: Do not unconditionally attach Intel PMC when virtualized (git-fixes).
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (git-fixes).
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (git-fixes).
- platform/x86: hp-wmi: Ignore Smart Experience App event (git-fixes).
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (git-fixes).
- platform/x86: ideapad-laptop: Disable touchpad_switch (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (git-fixes).
- powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (bsc#1194869).
- powerpc/boot: Explicitly disable usage of SPE instructions (bsc#1156395).
- powerpc/kvm: Fix kvm_use_magic_page (bsc#1156395).
- powerpc/pseries/vas: Declare pseries_vas_fault_thread_fn() as static (bsc#1194869).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C strings (git-fixes).
- rbd: fix possible memory leak in rbd_sysfs_init() (git-fixes).
- regulator: core: fix UAF in destroy_regulator() (git-fixes).
- regulator: core: fix kobject release warning and memory leak in regulator_register() (git-fixes).
- regulator: twl6030: re-add TWL6032_SUBCLASS (git-fixes).
- ring-buffer: Include dropped pages in counting dirty patches (git-fixes).
- ring_buffer: Do not deactivate non-existant pages (git-fixes).
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (bsc#1205427 LTC#200502).
- s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (bsc#1205427 LTC#200502).
- s390/uaccess: add missing EX_TABLE entries to __clear_user(), copy_in_user_mvcos(), copy_in_user_mvc(), clear_user_xc() and __strnlen_user() (bsc#1205428 LTC#200501).
- s390: fix nospec table alignments (git-fixes).
- sched: Clear ttwu_pending after enqueue_task() (git fixes (sched/core)).
- sched: Disable sched domain debugfs creation on ppc64 unless sched_verbose is specified (bnc#1205653).
- scripts/faddr2line: Fix regression in name resolution on ppc64le (git-fixes).
- scsi: ibmvfc: Avoid path failures during live migration (bsc#1065729).
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (bsc#1156395).
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (git-fixes).
- scsi: mpt3sas: Fix return value check of dma_get_required_mask() (git-fixes).
- scsi: qedf: Populate sysfs attributes for vport (git-fixes).
- scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (git-fixes).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix handling of srb_status and capacity change events (git-fixes).
- scsi: storvsc: Fix typo in comment (git-fixes).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: remove an extraneous &quot;to&quot; in a comment (git-fixes).
- scsi: zfcp: Fix double free of FSF request when qdio send fails (git-fixes).
- selftests/intel_pstate: fix build for ARCH=x86_64 (git-fixes).
- selftests: mptcp: fix mibit vs mbit mix up (git-fixes).
- selftests: mptcp: make sendfile selftest work (git-fixes).
- selftests: mptcp: more stable simult_flows tests (git-fixes).
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (git-fixes).
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -&gt;set_termios() (git-fixes).
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (git-fixes).
- serial: 8250: Flush DMA Rx on RLSI (git-fixes).
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (git-fixes).
- serial: 8250: omap: Flush PM QOS work on remove (git-fixes).
- serial: 8250_lpss: Configure DMA also w/o DMA filter (git-fixes).
- serial: 8250_omap: remove wait loop from Errata i202 workaround (git-fixes).
- serial: imx: Add missing .thaw_noirq hook (git-fixes).
- siox: fix possible memory leak in siox_device_add() (git-fixes).
- slimbus: stream: correct presence rate frequencies (git-fixes).
- smb2: small refactor in smb2_check_message() (bsc#1193629).
- smb3: Move the flush out of smb2_copychunk_range() into its callers (bsc#1193629).
- smb3: add dynamic trace points for tree disconnect (bsc#1193629).
- smb3: add trace point for SMB2_set_eof (bsc#1193629).
- smb3: allow deferred close timeout to be configurable (bsc#1193629).
- smb3: check xattr value length earlier (bsc#1193629).
- smb3: clarify multichannel warning (bsc#1193629).
- smb3: do not log confusing message when server returns no network interfaces (bsc#1193629).
- smb3: fix empty netname context on secondary channels (bsc#1193629).
- smb3: fix oops in calculating shash_setkey (bsc#1193629).
- smb3: fix temporary data corruption in collapse range (bsc#1193629).
- smb3: fix temporary data corruption in insert range (bsc#1193629).
- smb3: improve SMB3 change notification support (bsc#1193629).
- smb3: interface count displayed incorrectly (bsc#1193629).
- smb3: missing inode locks in punch hole (bsc#1193629).
- smb3: missing inode locks in zero range (bsc#1193629).
- smb3: must initialize two ACL struct fields to zero (bsc#1193629).
- smb3: remove unneeded null check in cifs_readdir (bsc#1193629).
- smb3: rename encryption/decryption TFMs (bsc#1193629).
- smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait (bsc#1193629).
- smb3: use netname when available on secondary channels (bsc#1193629).
- smb3: workaround negprot bug in some Samba servers (bsc#1193629).
- soc: imx8m: Enable OCOTP clock before reading the register (git-fixes).
- soundwire: intel: Initialize clock stop timeout (bsc#1205507).
- soundwire: qcom: check for outanding writes before doing a read (git-fixes).
- soundwire: qcom: reinit broadcast completion (git-fixes).
- speakup: fix a segfault caused by switching consoles (git-fixes).
- spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (git-fixes).
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (git-fixes).
- spi: stm32: Print summary 'callbacks suppressed' message (git-fixes).
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (git-fixes).
- spi: tegra210-quad: Fix duplicate resource error (git-fixes).
- thunderbolt: Add DP OUT resource when DP tunnel is discovered (git-fixes).
- tools: hv: Remove an extraneous &quot;the&quot; (git-fixes).
- tools: hv: kvp: remove unnecessary (void*) conversions (git-fixes).
- tools: iio: iio_generic_buffer: Fix read size (git-fixes).
- tracing/ring-buffer: Have polling block on watermark (git-fixes).
- tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (git-fixes).
- tracing: Fix memory leak in tracing_read_pipe() (git-fixes).
- tracing: Fix wild-memory-access in register_synth_event() (git-fixes).
- tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (git-fixes).
- tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (git-fixes).
- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (git-fixes).
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (git-fixes).
- tty: serial: fsl_lpuart: do not break the on-going transfer when global reset (git-fixes).
- usb: add NO_LPM quirk for Realforce 87U Keyboard (git-fixes).
- usb: cdns3: host: fix endless superspeed hub port reset (git-fixes).
- usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (git-fixes).
- usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (git-fixes).
- usb: chipidea: fix deadlock in ci_otg_del_timer (git-fixes).
- usb: dwc3: exynos: Fix remove() function (git-fixes).
- usb: dwc3: gadget: Clear ep descriptor last (git-fixes).
- usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (git-fixes).
- usb: dwc3: gadget: conditionally remove requests (git-fixes).
- usb: smsc: use eth_hw_addr_set() (git-fixes).
- usb: typec: mux: Enter safe mode only when pins need to be reconfigured (git-fixes).
- usb: xhci-mtk: check boundary before check tt (git-fixes).
- usb: xhci-mtk: update fs bus bandwidth by bw_budget_table (git-fixes).
- usbnet: smsc95xx: Do not reset PHY behind PHY driver's back (git-fixes).
- v3 of &quot;PCI: hv: Only reuse existing IRTE allocation for Multi-MSI&quot;
- video/fbdev/stifb: Implement the stifb_fillrect() function (git-fixes).
- virtio-blk: Use blk_validate_block_size() to validate block size (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- vmxnet3: use correct intrConf reference when using extended queues (git-fixes).
- wifi: airo: do not assign -1 to unsigned char (git-fixes).
- wifi: ath11k: Fix QCN9074 firmware boot on x86 (git-fixes).
- wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (git-fixes).
- wifi: cfg80211: do not allow multi-BSSID in S1G (git-fixes).
- wifi: cfg80211: fix buffer overflow in elem comparison (git-fixes).
- wifi: cfg80211: fix memory leak in query_regdb_file() (git-fixes).
- wifi: cfg80211: silence a sparse RCU warning (git-fixes).
- wifi: mac80211: Fix ack frame idr leak when mesh has no route (git-fixes).
- wifi: mac80211: fix memory free error when registering wiphy fail (git-fixes).
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (git-fixes).
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (git-fixes).
- wifi: wext: use flex array destination for memcpy() (git-fixes).
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (git-fixes).
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (git-fixes).
- wifi: wilc1000: validate number of channels (git-fixes).
- wifi: wilc1000: validate pairwise and authentication suite offsets (git-fixes).
- x86/Xen: streamline (and fix) PV CPU enumeration (git-fixes).
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (bsc#1206037).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/entry: Work around Clang __bdos() bug (git-fixes).
- x86/extable: Extend extable functionality (git-fixes).
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (bnc#1205282).
- x86/futex: Remove .fixup usage (git-fixes).
- x86/hyperv: Disable hardlockup detector by default in Hyper-V guests (git-fixes).
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (git-fixes).
- x86/hyperv: Update 'struct hv_enlightened_vmcs' definition (git-fixes).
- x86/hyperv: fix invalid writes to MSRs during root partition kexec (git-fixes).
- x86/kexec: Fix double-free of elf header buffer (bsc#1205567).
- x86/microcode/AMD: Apply the patch early on every logical thread (bsc#1205264).
- x86/uaccess: Implement macros for CMPXCHG on user addresses (git-fixes).
- xen/gntdev: Accommodate VMA splitting (git-fixes).
- xen/pcpu: fix possible memory leak in register_pcpu() (git-fixes).
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (git-fixes).
- xfs: convert XLOG_FORCED_SHUTDOWN() to xlog_is_shutdown() (git-fixes).
- xfs: fix perag reference leak on iteration race with growfs (git-fixes).
- xfs: fix xfs_ifree() error handling to not leak perag ref (git-fixes).
- xfs: reserve quota for dir expansion when linking/unlinking files (bsc#1205616).
- xfs: reserve quota for target dir expansion when renaming files (bsc#1205679).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.38.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.38.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.38.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.38.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.38.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.38.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.38.1.150400.24.13.2" arch="src" src="src/kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.38.1.150400.24.13.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.38.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.38.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.38.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.38.1.150400.24.13.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-187</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674815227"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2771" id="PED-2771" title="https://jira.suse.com/browse/PED-2771" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2989" id="CVE-2022-2989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2989" id="CVE-2022-2989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4024" id="CVE-2021-4024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4024" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41190" id="CVE-2021-41190" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41190" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27649" id="CVE-2022-27649" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27649" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20199" id="CVE-2021-20199" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20199" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" id="CVE-2021-20206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199790" id="1199790" title="podman v3.4.4,  when used from distrobox, does not initialize correctly the container" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193273" id="1193273" title="VUL-1: CVE-2021-41190: opencontainers: OCI manifest and index parsing confusion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202809" id="1202809" title="VUL-0: CVE-2022-2989: podman: possible information disclosure and modification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193166" id="1193166" title="VUL-0: CVE-2021-4024: podman: podman machine spawns gvproxy with port binded to all IPs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197672" id="1197672" title="Podman is broken in 20220328" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181961" id="1181961" title="VUL-0: CVE-2021-20206: cni,podman,cni-plugins: Arbitrary path injection via type field in CNI configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181640" id="1181640" title="VUL-1: CVE-2021-20199: podman: Remote traffic to rootless containers is seen as orginating from localhost" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

podman was updated to version 4.3.1:

4.3.1:

* Bugfixes

- Fixed a deadlock between the `podman ps` and `podman container inspect` commands

* Misc

- Updated the containers/image library to v5.23.1
 
4.3.0:

* Features

- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml`
- The `podman kube play` command now supports the `emptyDir` volume type
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge &quot;PATH=$PATH:/my/app&quot; ...`)
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container)
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set

### Changes

- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers)
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.


Update to version 4.2.0:

* Features

- Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
- A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod
- A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins
- A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
- Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
- The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
- The podman play kube command now supports volumes with the BlockDevice and CharDevice types
- The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto
- The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
- Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube
- The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
- The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared)
- The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
- The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
- The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
- The podman create and podman run commands now include the -c short option for the --cpu-shares option.
- The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
- The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
- The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
- The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
- The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
- Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
- The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
- Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
- The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
- Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
- The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
- When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
- The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
- The remote Podman client now supports the podman image scp command.
- The podman image scp command now supports tagging the transferred image with a new name.
- The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
- The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
- The podman events command now includes the -f short option for the --filter option.
- The podman pull command now includes the -a short option for the --all-tags option.
- The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
- The Podman global option --url now has two aliases: -H and --host.
- The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
- Added the ability to create sigstore signatures in podman push and podman manifest push.
- Added an option to read image signing passphrase from a file.

* Changes

- Paused containers can now be killed with the podman kill command.
- The podman system prune command now removes unused networks.
- The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
- If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
- The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
- All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
- The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
- Init containers created with podman play kube now default to the once type (#14877).
- Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
- The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
- The libpod/common package has been removed as it's not used anywhere.
- The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).


* Misc

- Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
- The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
- Podman Machine support for QEMU installations at non-default paths has been improved.
- The podman machine ssh command no longer prints spurious warnings every time it is run.
- When accessing the WSL prompt on Windows, the rootless user will be preferred.
- The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
- The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
- The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
- Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
- Updated the containers/image library to v5.22.0
- Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
- Updated the containers/common library to v0.49.1
- Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
- Fixed an incorrect release note about regexp.
- A new MacOS installer (via pkginstaller) is now supported.

Update to version 4.1.1:

* The output of the podman load command now mirrors that of docker load.
* Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
* A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
* Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
* Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
* The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
* The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
* The podman play kube command will now set default resource limits when the provided YAML does not include them.
* The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
* The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
* The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
* The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
* The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
* The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
* The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
* The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
* The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
* The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
* The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
* The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
* The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
* The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
* The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
* The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
* The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
* The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
* Fix CVE-2022-27191 / bsc#1197284

- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods

Update to version 4.0.3:

* Security

  - This release fixes CVE-2022-27649, where containers run by Podman would have excess inheritable capabilities set.

* Changes

  - The podman machine rm --force command will now remove running machines as well (such machines are shut down first, then removed) (#13448).
  - When a podman machine VM is started that is using a too-old VM image, it will now start in a reduced functionality mode, and provide instructions on how to recreate it (previously, VMs were effectively unusable) (#13510).

  - Updated the containers/common library to v0.47.5

- This release addresses CVE-2021-4024 / bsc#1193166, where the podman machine command opened the gvproxy API (used to forward ports to podman machine VMs) to the public internet on port 7777.
- This release addresses CVE-2021-41190 / bsc#1193273, where incomplete specification of behavior regarding image manifests could lead to inconsistent decoding on different clients.

Update to version 3.1.0: (bsc#1181961, CVE-2021-20206)

- A fix for CVE-2021-20199 / bsc#1181640 is included. Podman between v1.8.0 and v2.2.1 used 127.0.0.1 as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue.
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.3.1" release="150400.4.11.1" arch="src" src="src/podman-4.3.1-150400.4.11.1.src.rpm">
          <filename>podman-4.3.1-150400.4.11.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.3.1" release="150400.4.11.1" arch="x86_64" src="x86_64/podman-4.3.1-150400.4.11.1.x86_64.rpm">
          <filename>podman-4.3.1-150400.4.11.1.x86_64.rpm</filename>
        </package>
        <package name="podman-cni-config" epoch="0" version="4.3.1" release="150400.4.11.1" arch="noarch" src="noarch/podman-cni-config-4.3.1-150400.4.11.1.noarch.rpm">
          <filename>podman-cni-config-4.3.1-150400.4.11.1.noarch.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.3.1" release="150400.4.11.1" arch="aarch64" src="aarch64/podman-4.3.1-150400.4.11.1.aarch64.rpm">
          <filename>podman-4.3.1-150400.4.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4463</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670947527"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" id="CVE-2022-27191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" id="CVE-2022-23471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206065" id="1206065" title="[trackerbug] Docker 20.10.21-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197284" id="1197284" title="VUL-0: CVE-2022-27191: docker, containerd, kubernetes, helm, helm3, etcd: crash in a golang.org/x/crypto/ssh server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206235" id="1206235" title="VUL-0: CVE-2022-23471: containerd, kubernetes, kubernetes1.18, kubernetes1.23: host memory exhaustion through Terminal resize goroutine leak" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="src" src="src/containerd-1.6.12-150000.79.1.src.rpm">
          <filename>containerd-1.6.12-150000.79.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="x86_64" src="x86_64/containerd-1.6.12-150000.79.1.x86_64.rpm">
          <filename>containerd-1.6.12-150000.79.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="aarch64" src="aarch64/containerd-1.6.12-150000.79.1.aarch64.rpm">
          <filename>containerd-1.6.12-150000.79.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-25</id>
    <title>Recommended update for timezone</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672908731"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177460" id="1177460" title="timezone updates - tracking bug" type="bugzilla"/>
    </references>
    <description>This update for timezone fixes the following issues:

Version update from 2022f to 2022g (bsc#1177460):

- In the Mexican state of Chihuahua:
  * The border strip near the US will change to agree with nearby US locations on 2022-11-30.
  * The strip's western part, represented by Ciudad Juarez, switches from -06 all year to -07/-06 with US DST rules,
    like El Paso, TX.
  * The eastern part, represented by Ojinaga, will observe US DST next year, like Presidio, TX.
  * A new Zone America/Ciudad_Juarez splits from America/Ojinaga.
- Much of Greenland, represented by America/Nuuk, stops observing winter time after March 2023, so its daylight saving
  time becomes standard time.
- Changes for pre-1996 northern Canada
- Update to past DST transition in Colombia (1993), Singapore (1981)
- 'timegm' is now supported by default
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2022g" release="150000.75.18.1" arch="src" src="src/timezone-2022g-150000.75.18.1.src.rpm">
          <filename>timezone-2022g-150000.75.18.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2022g" release="150000.75.18.1" arch="x86_64" src="x86_64/timezone-2022g-150000.75.18.1.x86_64.rpm">
          <filename>timezone-2022g-150000.75.18.1.x86_64.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2022g" release="150000.75.18.1" arch="aarch64" src="aarch64/timezone-2022g-150000.75.18.1.aarch64.rpm">
          <filename>timezone-2022g-150000.75.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1913</id>
    <title>Recommended update for libslirp, slirp4netns</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681907018"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201551" id="1201551" title="libslirp header file version macro is broken" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2771" id="PED-2771" title="https://jira.suse.com/browse/PED-2771" type="jira"/>
    </references>
    <description>This update for libslirp and slirp4netns fixes the following issues:

libslirp was updated to version 4.7.0+44 (current git master):

* Fix vmstate regression
* Align outgoing packets
* Bump incoming packet alignment to 8 bytes
* vmstate: only enable when building under GNU C
* ncsitest: Fix build with msvc
* Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
* ncsi: Add Mellanox Get Mac Address handler
* slirp: Add out-of-band ethernet address
* ncsi: Add OEM command handler
* ncsi: Add basic test for Get Version ID response
* ncsi: Use response header for payload length
* ncsi: Pass command header to response handlers
* ncsi: Add Get Version ID command
* ncsi: Pass Slirp structure to response handlers
* slirp: Add manufacturer's ID

Release v4.7.0

* slirp: invoke client callback before creating timers
* pingtest: port to timer_new_opaque
* introduce timer_new_opaque callback
* introduce slirp_timer_new wrapper
* icmp6: make ndp_send_ra static
* socket: Handle ECONNABORTED from recv
* bootp: fix g_str_has_prefix warning/critical
* slirp: Don't duplicate packet in tcp_reass
* Rename insque/remque -&gt; slirp_[ins|rem]que
* mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
* Replace inet_ntoa() with safer inet_ntop()
* Add VMS_END marker
* bootp: add support for UEFI HTTP boot
* IPv6 DNS proxying support
* Add missing scope_id in caching
* socket: Move closesocket(so-&gt;s_aux) to sofree
* socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
* socket: Add s_aux field to struct socket for storing auxilliary socket
* socket: Initialize so_type in socreate
* socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
* Allow to disable internal DHCP server
* slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
* CI: run integration tests with slirp4netns
* socket: Check address family for Unix-to-inet accept translation
* socket: Add debug args for tcpx_listen (inet and Unix sockets)
* socket: Restore original definition of fhost
* socket: Move &lt;sys/un.h&gt; include to socket.h
* Support Unix sockets in hostfwd
* resolv: fix IPv6 resolution on Darwin
* Use the exact sockaddr size in getnameinfo call
* Initialize sin6_scope_id to zero
* slirp_socketpair_with_oob: Connect pair through 127.0.0.1
* resolv: fix memory leak when using libresolv
* pingtest: Add a trivial ping test
* icmp: Support falling back on trying a SOCK_RAW socket

Update to version 4.6.1+7:

* Haiku: proper path to resolv.conf for DNS server
* Fix for Haiku
* dhcp: Always send DHCP_OPT_LEN bytes in options

Update to version 4.6.1:

* Fix &quot;DHCP broken in libslirp v4.6.0&quot;

Update to version 4.6.0:

* udp: check upd_input buffer size
* tftp: introduce a header structure
* tftp: check tftp_input buffer size
* upd6: check udp6_input buffer size
* bootp: check bootp_input buffer size
* bootp: limit vendor-specific area to input packet memory buffer

Update to version 4.4.0:

* socket: consume empty packets
* slirp: check pkt_len before reading protocol header
* Add DNS resolving for iOS
* sosendoob: better document what urgc is used for
* TCPIPHDR_DELTA: Fix potential negative value
* udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
* icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
* udp, udp6, icmp: handle TTL value
* ip_stripoptions use memmove

slirp4netns was updated to 1.2.0:


* Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
* Explicitly support DHCP (#270)
* Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd

Update to version 1.1.11:

* Add --macaddress option to specify the MAC address of the tap interface.
* Updated the man page.

Update to version 1.1.8:

Update to 1.0.0:

* --enable-sandbox is now out of experimental
</description>
    <pkglist>
      <collection>
        <package name="libslirp" epoch="0" version="4.7.0+44" release="150300.15.2" arch="src" src="src/libslirp-4.7.0+44-150300.15.2.src.rpm">
          <filename>libslirp-4.7.0+44-150300.15.2.src.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="x86_64" src="x86_64/libslirp0-4.7.0+44-150300.15.2.x86_64.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.x86_64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="src" src="src/slirp4netns-1.2.0-150300.8.5.2.src.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.src.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="x86_64" src="x86_64/slirp4netns-1.2.0-150300.8.5.2.x86_64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.x86_64.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="aarch64" src="aarch64/libslirp0-4.7.0+44-150300.15.2.aarch64.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.aarch64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="aarch64" src="aarch64/slirp4netns-1.2.0-150300.8.5.2.aarch64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-87</id>
    <title>Recommended update for python-cairo</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673636926"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206716" id="1206716" title="Nothing provides 'python3-cairo' for SUSE-FU-2022:4601-1 on Leap Micro 5.3" type="bugzilla"/>
    </references>
    <description>
This update for python-cairo ships the missing python3-cairo to openSUSE Leap Micro 5.3.
</description>
    <pkglist>
      <collection>
        <package name="python-cairo" epoch="0" version="1.15.1" release="150000.3.8.1" arch="src" src="src/python-cairo-1.15.1-150000.3.8.1.src.rpm">
          <filename>python-cairo-1.15.1-150000.3.8.1.src.rpm</filename>
        </package>
        <package name="python3-cairo" epoch="0" version="1.15.1" release="150000.3.8.1" arch="x86_64" src="x86_64/python3-cairo-1.15.1-150000.3.8.1.x86_64.rpm">
          <filename>python3-cairo-1.15.1-150000.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="python3-cairo" epoch="0" version="1.15.1" release="150000.3.8.1" arch="aarch64" src="aarch64/python3-cairo-1.15.1-150000.3.8.1.aarch64.rpm">
          <filename>python3-cairo-1.15.1-150000.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4492</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671022372"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201298" id="1201298" title="FIPS: NSS uses DSA for shared library integrity checking, mark DSA sigverify as APPROVED, rest as NOT-APPROVED in the SLI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198980" id="1198980" title="FIPS: NSS on-demand integrity tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191546" id="1191546" title="FIPS: mozilla-nss: service level indicator" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS: Disapprove the creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)
- FIPS: Allow the use SHA keygen mechs (bsc#1191546).
- FIPS: ensure abort() is called when the repeat integrity check fails (bsc#1198980).
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libfreebl3-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libfreebl3-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="src" src="src/mozilla-nss-3.79.2-150400.3.18.1.src.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libfreebl3-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libfreebl3-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4597</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671614001"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206308" id="1206308" title="VUL-0: EMBARGOED: CVE-2022-43551: curl: another HSTS bypass via IDN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206309" id="1206309" title="VUL-0: EMBARGOED: CVE-2022-43552: curl: HTTP Proxy deny use-after-free" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552" id="CVE-2022-43552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43551" id="CVE-2022-43551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43551" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).
- CVE-2022-43551: Fixed HSTS bypass via IDN (bsc#1206308).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.12.1" arch="src" src="src/curl-7.79.1-150400.5.12.1.src.rpm">
          <filename>curl-7.79.1-150400.5.12.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.12.1" arch="x86_64" src="x86_64/curl-7.79.1-150400.5.12.1.x86_64.rpm">
          <filename>curl-7.79.1-150400.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.79.1" release="150400.5.12.1" arch="x86_64" src="x86_64/libcurl4-7.79.1-150400.5.12.1.x86_64.rpm">
          <filename>libcurl4-7.79.1-150400.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.12.1" arch="aarch64" src="aarch64/curl-7.79.1-150400.5.12.1.aarch64.rpm">
          <filename>curl-7.79.1-150400.5.12.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.79.1" release="150400.5.12.1" arch="aarch64" src="aarch64/libcurl4-7.79.1-150400.5.12.1.aarch64.rpm">
          <filename>libcurl4-7.79.1-150400.5.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-18</id>
    <title>Recommended update for libnvme, nvme-cli, nvme-stas</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672744962"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205657" id="1205657" title="PDC handling broken during nvme connect-all using config JSON file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204975" id="1204975" title="[NetApp SLES15 SP4 Bug] nvme-stas fails to trim ascii spaces at the end of the traddr &amp; trsvcid strings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205873" id="1205873" title="[NetApp SLES15 SP4 Bug] nvme-stas ends up creating duplicate Persistent Discovery Controllers" type="bugzilla"/>
    </references>
    <description>This update for libnvme, nvme-cli and nvme-stas fixes the following issues:

libnvme, nvme-cli:

- Fix 'persistent' handling during connect-all with JSON file (bsc#1205657)

nvme-stas:
    
- Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute (bsc#1205873)
- staslib: Trim whitespaces at the source (bsc#1204975)
- stafd: Add &quot;origin&quot; parameter to DC controller objects
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0" release="150400.3.12.1" arch="src" src="src/libnvme-1.0-150400.3.12.1.src.rpm">
          <filename>libnvme-1.0-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.12.1" arch="x86_64" src="x86_64/libnvme1-1.0-150400.3.12.1.x86_64.rpm">
          <filename>libnvme1-1.0-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.12.1" arch="src" src="src/nvme-cli-2.0-150400.3.12.1.src.rpm">
          <filename>nvme-cli-2.0-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.12.1" arch="x86_64" src="x86_64/nvme-cli-2.0-150400.3.12.1.x86_64.rpm">
          <filename>nvme-cli-2.0-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.12.1" arch="aarch64" src="aarch64/libnvme1-1.0-150400.3.12.1.aarch64.rpm">
          <filename>libnvme1-1.0-150400.3.12.1.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.12.1" arch="aarch64" src="aarch64/nvme-cli-2.0-150400.3.12.1.aarch64.rpm">
          <filename>nvme-cli-2.0-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4629</id>
    <title>Security update for systemd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672215863"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200723" id="1200723" title="SLES15SP4: Splitter Disks are not showing up under /dev/ dir(nvme/splitter/sles15sp4/Denali/P10)." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205000" id="1205000" title="VUL-0: CVE-2022-4415: EMBARGOED: systemd-coredump: systemd-coredump not respecting fs.suid_dumpable kernel setting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4415" id="CVE-2022-4415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4415" type="cve"/>
    </references>
    <description>This update for systemd fixes the following issues:

- CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000).

Bug fixes:

- Support by-path devlink for multipath nvme block devices (bsc#1200723).
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/libsystemd0-249.12-150400.8.16.1.x86_64.rpm">
          <filename>libsystemd0-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/libudev1-249.12-150400.8.16.1.x86_64.rpm">
          <filename>libudev1-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.12" release="150400.8.16.1" arch="src" src="src/systemd-249.12-150400.8.16.1.src.rpm">
          <filename>systemd-249.12-150400.8.16.1.src.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/systemd-249.12-150400.8.16.1.x86_64.rpm">
          <filename>systemd-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/systemd-container-249.12-150400.8.16.1.x86_64.rpm">
          <filename>systemd-container-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.12-150400.8.16.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.12-150400.8.16.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.12" release="150400.8.16.1" arch="x86_64" src="x86_64/udev-249.12-150400.8.16.1.x86_64.rpm">
          <filename>udev-249.12-150400.8.16.1.x86_64.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/libsystemd0-249.12-150400.8.16.1.aarch64.rpm">
          <filename>libsystemd0-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/libudev1-249.12-150400.8.16.1.aarch64.rpm">
          <filename>libudev1-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/systemd-249.12-150400.8.16.1.aarch64.rpm">
          <filename>systemd-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/systemd-container-249.12-150400.8.16.1.aarch64.rpm">
          <filename>systemd-container-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.12-150400.8.16.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.12-150400.8.16.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.12" release="150400.8.16.1" arch="aarch64" src="aarch64/udev-249.12-150400.8.16.1.aarch64.rpm">
          <filename>udev-249.12-150400.8.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-52</id>
    <title>Recommended update for xfsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673257455"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205377" id="1205377" title="fstests xfs/543 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205284" id="1205284" title="fstests xfs/549 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205266" id="1205266" title="fstests xfs/019 output mismatch in extend protofile test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205272" id="1205272" title="fstests xfs/191 fails by inconsistent" type="bugzilla"/>
    </references>
    <description>This update for xfsprogs fixes the following issues:

- mkfs: don't trample the gid set in the protofile (bsc#1205266)
- mkfs: prevent corruption of passed-in suboption string values (bsc#1205377)
- mkfs: terminate getsubopt arrays properly (bsc#1205284)
- xfs_repair: ignore empty xattr leaf blocks (bsc#1205272)
</description>
    <pkglist>
      <collection>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.3.1" arch="src" src="src/xfsprogs-5.13.0-150400.3.3.1.src.rpm">
          <filename>xfsprogs-5.13.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.3.1" arch="x86_64" src="x86_64/xfsprogs-5.13.0-150400.3.3.1.x86_64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.3.1" arch="aarch64" src="aarch64/xfsprogs-5.13.0-150400.3.3.1.aarch64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-54</id>
    <title>Recommended update for bash-completion</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673257772"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200791" id="1200791" title="regression: curl bash completion fails" type="bugzilla"/>
    </references>
    <description>This update for bash-completion fixes the following issues:

- Fix curl help completion (bsc#1200791)
</description>
    <pkglist>
      <collection>
        <package name="bash-completion" epoch="0" version="2.7" release="150400.13.3.1" arch="noarch" src="noarch/bash-completion-2.7-150400.13.3.1.noarch.rpm">
          <filename>bash-completion-2.7-150400.13.3.1.noarch.rpm</filename>
        </package>
        <package name="bash-completion" epoch="0" version="2.7" release="150400.13.3.1" arch="src" src="src/bash-completion-2.7-150400.13.3.1.src.rpm">
          <filename>bash-completion-2.7-150400.13.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-51</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673257404"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204423" id="1204423" title="udev rule 80-hotplug-cpu-mem.rules tries to unconditionally online CPUs on Power LPARs resulting in journal errors  -  ref:_00D1igLOd._5005qCQJtZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195391" id="1195391" title="identify and declare bash dependencies explicitly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200107" id="1200107" title="suse-module-tools: false positives from driver-check.sh" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203092" id="1203092" title="GNU grep 3.8 egrep / grep warnings and migration to grep -E / grep -F" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- 80-hotplug-cpu-mem.rules: Restrict udev rule for Hotplug physical CPU to x86_64 architecture (bsc#1204423)
- driver-check.sh, unblacklist: Convert `egrep` to `grep -E` (bsc#1203092)
- driver-check.sh: Avoid false positive error messages (bsc#1200107)
- kernel-scriptlets: Don't pass flags to weak-modules2 (bsc#1195391)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.4.15" release="150400.3.5.1" arch="src" src="src/suse-module-tools-15.4.15-150400.3.5.1.src.rpm">
          <filename>suse-module-tools-15.4.15-150400.3.5.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.15" release="150400.3.5.1" arch="x86_64" src="x86_64/suse-module-tools-15.4.15-150400.3.5.1.x86_64.rpm">
          <filename>suse-module-tools-15.4.15-150400.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.15" release="150400.3.5.1" arch="aarch64" src="aarch64/suse-module-tools-15.4.15-150400.3.5.1.aarch64.rpm">
          <filename>suse-module-tools-15.4.15-150400.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4618</id>
    <title>Recommended update for catatonit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671796954"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2771" id="PED-2771" title="https://jira.suse.com/browse/PED-2771" type="jira"/>
    </references>
    <description>This update for catatonit fixes the following issues:

Update to catatonit v0.1.7:

- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done). 

Update to catatonit v0.1.6:

- which fixes a few bugs -- mainly ones related to socket activation
  or features somewhat adjacent to socket activation (such as passing
  file descriptors).
</description>
    <pkglist>
      <collection>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.3.1" arch="src" src="src/catatonit-0.1.7-150300.10.3.1.src.rpm">
          <filename>catatonit-0.1.7-150300.10.3.1.src.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.3.1" arch="x86_64" src="x86_64/catatonit-0.1.7-150300.10.3.1.x86_64.rpm">
          <filename>catatonit-0.1.7-150300.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.3.1" arch="aarch64" src="aarch64/catatonit-0.1.7-150300.10.3.1.aarch64.rpm">
          <filename>catatonit-0.1.7-150300.10.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-34</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672931897"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1032323" id="1032323" title="[KVM] hypfs error message on startup &quot;hypfs.7a79f0: Initialization of hypfs failed with rc=-61,[FAILED] Failed to start Load Kernel Modules. &quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1071995" id="1071995" title="[TRACKERBUG] SLE15 livepatch backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152489" id="1152489" title="[TRACKERBUG] git-fixes pile for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1164051" id="1164051" title="WARNING: at ../lib/vsprintf.c:1916 when create a MD Raid0 array with 50 disks. ref:_00D1igLOd._5001iLhGpk:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177471" id="1177471" title="VUL-0: CVE-2020-16119: kernel-source: DCCP CCID structure use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184350" id="1184350" title="SLES 15 SP3 - LPAR network did not come up after 10minutes during lpm test: (ibmvnic) (HANA)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185032" id="1185032" title="L3: SLES 15 SP3 Snapshot7 - [P10] System Crashed during pci hotplug test when htx is running (Radix/HPT/Redfish/lpfc/Broadcom)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188238" id="1188238" title="[RPi 3 B+] bluetooth command tx timeout and reset failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189297" id="1189297" title="Linux path loss occurs during FCoE uplink failover test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189999" id="1189999" title="Scheduler functional and performance backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190256" id="1190256" title="Keyboard not working after cold-boot on ASUS Zenbook 14 UM425UA with Tumbleweed 20210904" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190497" id="1190497" title="[TRACKERBUG] git-fixes pile for SLE15-SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192968" id="1192968" title="[Build 64.17] openQA test fails in zypper_migration - grub-core/kern/dl.c:380:symbol 'grub_disk_get_size' not found" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194023" id="1194023" title="[DELL EMC SLES15SP3 BUG] OS booted from md-raid disk shows watchdog timeout error in POST after reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194592" id="1194592" title="[PATCH] udf: Fix crash after seekdir" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194904" id="1194904" title="Javier AGX: kernel panic on heavy network trafic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195480" id="1195480" title="[PATCH] ext4: make sure quota gets properly shutdown on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195917" id="1195917" title="2nd display gets blanked after suspende/resume in dual USB display configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196018" id="1196018" title="VUL-0: CVE-2022-28748: kernel-source: malicious hardware can cause a leak of kernel memory over the network by ax88179_178a devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196444" id="1196444" title="arm64: kexec uses only the built-in keys for kernel verification, not the secondary nor platform keyring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196616" id="1196616" title="VUL-0: CVE-2020-36516: kernel-source-azure,kernel-source,kernel-source-rt: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196632" id="1196632" title="Raspberry Pi 3: kernel errors in journal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196867" id="1196867" title="VUL-1: CVE-2020-36516: kernel live patch: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196869" id="1196869" title="cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197158" id="1197158" title="resource RAID  failed during cluster patch, Mdadm gets floating point error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197391" id="1197391" title="VUL-0: CVE-2022-28356: kernel-source: refcount leak in llc_ui_bind and llc_ui_autobind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197659" id="1197659" title="mdadm striping causes XFS filesystem to hang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197755" id="1197755" title="[PATCH] ext4: Fix BUG_ON in ext4_bread when write quota data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197756" id="1197756" title="[PATCH] ext4: don't use the orphan list when migrating an inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197757" id="1197757" title="[PATCH] ext4: fix error handling in ext4_restore_inline_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197763" id="1197763" title="[PATCH] mm: bdi: initialize bdi_min_ratio when bdi is unregistered" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198189" id="1198189" title="VUL-0: CVE-2022-1263: kernel-source: x86/kvm: null-ptr-deref in kvm_dirty_ring_push" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198410" id="1198410" title="iSCSI qedi based installation hangs on reboot with warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198577" id="1198577" title="VUL-0: CVE-2022-1184: kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198702" id="1198702" title="VUL-0: CVE-2021-4037: kernel: security regression for CVE-2018-13405" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198971" id="1198971" title="SLES 15 SP3 - POWER10 Rainer: EXT4 filesystem : stress-ng test failed with errors in dmesg BUG: soft lockup CPU#6 stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199086" id="1199086" title="[NetApp SLES15 SP4 Bug]: Misc fixes for NVMe-oF in-band authentication" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199364" id="1199364" title="hv_netvsc: Add support for XDP_REDIRECT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199515" id="1199515" title="VUL-0: CVE-2021-33135: kernel-source-rt,kernel-source,kernel-source-azure: Uncontrolled resource consumption in the Linux kernel drivers for Intel SGX may lead to local DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199670" id="1199670" title="[DELL SLES 15 SP3 BUG] - NVMe TCP controller resets/reconnections observed under stress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199904" id="1199904" title="VUL-0: CVE-2022-1882: kernel-source-rt,kernel-source,kernel-source-azure: Use-After-Free in free_pipe_info() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200015" id="1200015" title="VUL-0: CVE-2022-32250: kernel: use-after-free in the netfilter subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200058" id="1200058" title="VUL-0: CVE-2022-1882: kernel live patch: Use-After-Free in free_pipe_info() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200268" id="1200268" title="VUL-0: CVE-2022-32250: kernel live patch: use-after-free in the netfilter subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200288" id="1200288" title="VUL-0: CVE-2022-32296: kernel-source-rt,kernel-source,kernel-source-azure: insufficient TCP source port randomness leads to client identification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200301" id="1200301" title="DMAR_UNITS_SUPPORTED is too small for larger systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200313" id="1200313" title="[NetApp SLES15 SP4 Bug]: Host crash at nvme_tcp_init_iter() with header digest enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200431" id="1200431" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200465" id="1200465" title="SLES15 SP4 [ Everest]: powersave mode is always set to &quot;static&quot; even if we change powersave mode from HMC on everest machine." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200494" id="1200494" title="VUL-0: CVE-2022-1966: kernel: netfilter: nf_tables: incorrect NFT_STATEFUL_EXPR check leads to a use-after-free (write)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200544" id="1200544" title="xbell no longer working" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200567" id="1200567" title="[NetApp SLES15 SP4 RFE]: Improved NVMe error logging" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200622" id="1200622" title="kernel PTF request with a patch fix from #1179195." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200644" id="1200644" title="NVMe autoconnect fails with &quot;nvme_fc: nvme_fc_parse_traddr: bad traddr string&quot; error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200651" id="1200651" title="12SP5 4.12.14-122.116 breaks qla2xxx nvme over FC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200692" id="1200692" title="VUL-0: CVE-2022-33981: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free in floppy driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200788" id="1200788" title="VUL-0: CVE-2022-2153: kernel-source-rt,kernel-source,kernel-source-azure: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200845" id="1200845" title="[Azure] [vPCI] add the support of multi-MSI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200868" id="1200868" title="[PATCH] ext4: fix symlink file size not match to file content" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200869" id="1200869" title="[PATCH] ext4: fix overhead calculation to account for the reserved  gdt blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200870" id="1200870" title="[PATCH] ext4: force overhead calculation if the s_overhead_cluster  makes no sense" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200871" id="1200871" title="[PATCH] ext4: fix use-after-free in ext4_rename_dir_prepare" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200872" id="1200872" title="[PATCH] ext4: fix bug_on in ext4_writepages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200873" id="1200873" title="[PATCH] =?UTF-8?q?fs-writeback:=20writeback=5Fsb=5Finodes?=  =?UTF-8?q?=EF=BC=9ARecalculate=20'wrote'=20according=20skipped=20pages?=" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201019" id="1201019" title="rpmbuild failure: Dependency tokens must begin with alpha-numeric, '_' or '/': BuildRequires: %kernel_module_package_buildreqs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201308" id="1201308" title="HP Z2 G8 Workstation:  supportconfig reboots on systool command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201309" id="1201309" title="[Azure][MANA] Add the Linux MANA PF Driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201310" id="1201310" title="[Azure][MANA]  New Feature MANA XDP_Redirect Action" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201361" id="1201361" title="error: ../../grub-core/kern/dl.c:380:symbol `grub_disk_get_size' not found." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201427" id="1201427" title="smb3 client cannot reconnect to servers after resume from suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201442" id="1201442" title="KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201455" id="1201455" title="VUL-0: CVE-2022-28693: kernel-source: information disclosure via local access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201489" id="1201489" title="[NetApp SLES15 SP4 Bug]: Host crash at crypto_ahash_digest() during NVMe re-auth" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201610" id="1201610" title="cgroup: Use separate src/dst nodes when preloading css_sets for  migration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201675" id="1201675" title="[NetApp SLES15 SP4 Bug]: NVMe/TCP host fails to retry auth for certain transient errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201725" id="1201725" title="[Build 6.199] openQA test fails in rename10: exfat returns EINVAL instead of ENAMETOOLONG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201726" id="1201726" title="VUL-0: CVE-2022-26373: CPU info leak via post-barrier RSB predictions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201768" id="1201768" title="[HPS Bug] include upstream commit to prevent buffer overflow panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201865" id="1201865" title="SLES15SP4 fail to reconnect powerstore with nvmeotcp  after NDU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201940" id="1201940" title="VUL-0: CVE-2022-36946: kernel-source-azure,kernel-source,kernel-source-rt: incorrect packet truncation in nfqnl_mangle() leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201941" id="1201941" title="VUL-0: CVE-2022-36946: kernel live patch: incorrect packet truncation in nfqnl_mangle() leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201948" id="1201948" title="VUL-0: CVE-2022-36879: kernel-source-azure,kernel-source-rt,kernel-source: xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201954" id="1201954" title="[NetApp SLES15 SP4 Bug] QLogic NVMe/FC broken after SP4 kernel MU upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201956" id="1201956" title="Update Broadcom Emulex lpfc driver to 14.2.0.5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201958" id="1201958" title="qla2xxx: update driver to 10.02.07.800-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202095" id="1202095" title="VUL-0: CVE-2022-2586: kernel-source: use-after-free with nf_tables cross-table reference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202096" id="1202096" title="VUL-0: CVE-2022-2588: kernel-source: use-after-free in cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202097" id="1202097" title="VUL-0: CVE-2022-2663: kernel-source: nf_conntrack_irc message handling issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202113" id="1202113" title="ntb_hw_amd: Add NTB PCI ID for new gen CPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202131" id="1202131" title="Bug 1188893 - Intel AX210 Wifi not working out of box in SLES15SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202154" id="1202154" title="VUL-0: CVE-2022-2639: kernel-source-azure,kernel-source,kernel-source-rt: integer underflow leads to out-of-bounds write in reserve_sfa_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202187" id="1202187" title="Kernel warning with Samsung SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202262" id="1202262" title="SLES 15 SP4 - s390/qeth: cache link_info for ethtool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202265" id="1202265" title="[NetApp SLES15 SP4 Bug] NVMe in-band auth broken with latest SP4 kernel updates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202312" id="1202312" title="CVE-2022-36946 on SLES 12 SP2 Reactive LTSS: kernel-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202341" id="1202341" title="Raspi 4 (4GB): boots to blank screen with kernel 5.14.21-150400.24.11-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202346" id="1202346" title="VUL-0: CVE-2022-20368: kernel: slab-out-of-bounds access in packet_recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202347" id="1202347" title="VUL-0: CVE-2022-20369: kernel: possible out of bounds write due to improper input validation in v4l2_m2m_querybuf of v4l2-mem2mem.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202385" id="1202385" title="kernel: debuginfo for vdso*.so should be in a separate file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202393" id="1202393" title="VUL-0: kernel: net_sched: cls_route: disallow handle of 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202447" id="1202447" title="mm: memcontrol: fix potential oom_lock recursion deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202471" id="1202471" title="[Huawei][aarch64] SAS controller cannot wakeup in several scenarios on Kunpeng 920" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202558" id="1202558" title="VUL-0: CVE-2022-2873: kernel-source-azure,kernel-source-rt,kernel-source: kernel: an out-of-bounds vulnerability in i2c-ismt driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202623" id="1202623" title="VUL-0: CVE-2022-2938: kernel: use-after-free when psi trigger is destroyed while being polled." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202636" id="1202636" title="NVMe: CPU Soft lockup when running NVMe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202672" id="1202672" title="VUL-0: CVE-2022-2977: kernel-source,kernel-source-rt,kernel-source-azure: use-after-free Read in put_device (/dev/vtpmx)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202681" id="1202681" title="VUL-0: CVE-2022-2959: kernel: watch queue race condition can lead to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202685" id="1202685" title="VUL-0: CVE-2022-2959: kernel live patch: watch queue race condition can lead to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202686" id="1202686" title="VUL-0: CVE-2022-2964: kernel: memory corruption in AX88179_178A based USB ethernet device." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202700" id="1202700" title="VUL-0: CVE-2022-2978: kernel-source-azure,kernel-source-rt,kernel-source: kernel: use-after-free in nilfs_mdt_destroy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202710" id="1202710" title="[PATCH] ext4: fix use-after-free in ext4_search_dir" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202711" id="1202711" title="[PATCH] ext4: fix warning in ext4_handle_inode_extension" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202712" id="1202712" title="[PATCH] ext4: add reserved GDT blocks check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202713" id="1202713" title="[PATCH] ext4: recover csum seed of tmp_inode after migrating to  extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202715" id="1202715" title="[PATCH] jbd2: fix outstanding credits assert in  jbd2_journal_commit_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202716" id="1202716" title="[PATCH] jbd2: fix assertion 'jh-&gt;b_frozen_data == NULL' failure when  journal aborted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202757" id="1202757" title="[PATCH] ext4: fix fast commit may miss tracking range for  FALLOC_FL_ZERO_RANGE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202758" id="1202758" title="[PATCH] ext4: use ext4_ext_remove_space() for fast commit replay  delete range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202759" id="1202759" title="[PATCH] ext4: fast commit may miss tracking unwritten range during  ftruncate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202761" id="1202761" title="[PATCH] ext4: make sure to reset inode lockdep class when quota  enabling fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202762" id="1202762" title="[PATCH] ext4: fix a possible ABBA deadlock due to busy PA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202763" id="1202763" title="[PATCH] ext4: initialize err_blk before calling __ext4_get_inode_loc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202764" id="1202764" title="[PATCH] ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202765" id="1202765" title="[PATCH] ext4: prevent used blocks from being allocated during fast  commit replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202766" id="1202766" title="[PATCH] ext4: modify the logic of ext4_mb_new_blocks_simple" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202767" id="1202767" title="[PATCH] ext4: fix error handling in ext4_fc_record_modified_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202768" id="1202768" title="[PATCH] ext4: fix fs corruption when tring to remove a non-empty  directory with IO error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202769" id="1202769" title="[PATCH] ext4: fix fallocate to use file_modified to update  permissions consistently" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202770" id="1202770" title="[PATCH] ext4: mark group as trimmed only if it was fully scanned" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202771" id="1202771" title="[PATCH] ext4: filter out EXT4_FC_REPLAY from on-disk superblock field  s_state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202773" id="1202773" title="[PATCH] ext4: fix super block checksum incorrect after mount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202774" id="1202774" title="[PATCH] filemap: Handle sibling entries in filemap_get_read_batch()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202775" id="1202775" title="[PATCH] jbd2: export jbd2_journal_[grab|put]_journal_head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202776" id="1202776" title="[PATCH] ocfs2: fix a deadlock when commit trans" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202778" id="1202778" title="[PATCH] ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202779" id="1202779" title="[PATCH] block: Fix fsync always failed if once failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202780" id="1202780" title="[PATCH] block: Fix wrong offset in bio_truncate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202781" id="1202781" title="[PATCH] block: fix rq-qos breakage from skipping rq_qos_done_bio()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202782" id="1202782" title="[PATCH] block: only mark bio as tracked if it really is tracked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202783" id="1202783" title="[PATCH] ext4: add new helper interface ext4_try_to_trim_range()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202822" id="1202822" title="ceph: use correct index when encoding client supported features" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202823" id="1202823" title="ceph: don't leak snap_rwsem in handle_cap_grant" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202824" id="1202824" title="ceph: don't truncate file in atomic_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202860" id="1202860" title="VUL-0: CVE-2022-2905: kernel-source-azure,kernel-source,kernel-source-rt: slab-out-of-bound read in bpf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202867" id="1202867" title="[PATCH] ext4: fix incorrect type issue during replay_del_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202872" id="1202872" title="ISST-RWS:- SLES15.4 Extending NMI watchdog's timer during LPM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202874" id="1202874" title="[EAR - NOT FOR USA Citizens] Request for a PTF to fix CVE-2020-36557 and CVE-2022-36946 on SLES11 SP3 LTSS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202898" id="1202898" title="VUL-0: CVE-2022-3028: kernel-source,kernel-source-rt,kernel-source-azure: kernel: race condition in xfrm_probe_algs can lead to out-of-bounds read/write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202914" id="1202914" title="[NetApp SLES15 SP4 Bug] DM-Multipath fails to set FCP devloss_tmo to infinity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202960" id="1202960" title="VUL-0: CVE-2022-41218: kernel:  vmalloc use-after-free in dvb-core/dmxdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202989" id="1202989" title="kernel: ipv6: Test issue during USGv6 testing of SLES 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202992" id="1202992" title="CVE-2022-32250 on SLES 12 SP2 Reactive LTSS: gcc11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202993" id="1202993" title="CVE-2022-32250 on SLES 12 SP2 Reactive LTSS: kernel-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203002" id="1203002" title="CVE-2022-32250 on SLES 12 SP2 Reactive LTSS: xen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203008" id="1203008" title="VUL-0: CVE-2022-2964: kernel live patch: memory corruption in AX88179_178A based USB ethernet device." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203036" id="1203036" title="Data corruption configuring raid1 with latest kernel (5.14.21-150400.24.18.1) ref:_00D1igLOd._5005qAL900:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203039" id="1203039" title="PVT:1030:virt:vPMEM: BTRFS reports read errors from multipath device after installing 5.14.21-150400.24.18 kernel [REGRESSION]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203041" id="1203041" title="VUL-0: CVE-2022-3078: kernel-source-rt,kernel-source-azure,kernel-source: NULL pointer dereference in drivers/media/test-drivers/vidtv/vidtv_s302m.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203063" id="1203063" title="Update Broadcom Emulex lpfc driver to 14.2.0.6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203066" id="1203066" title="VUL-0: CVE-2022-39189: kernel-source,kernel-source-azure,kernel-source-rt: unprivileged user can compromise guest kernel via PV TLB flush on preempted vCPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203067" id="1203067" title="VUL-0: CVE-2022-39189: kernel live patch: unprivileged user can compromise guest kernel via PV TLB flush on preempted vCPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203098" id="1203098" title="git-fixes: backport mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203101" id="1203101" title="SLES15SP4[P10] : &quot;Nodes uninitialized by the platform. Please report with boot dmesg&quot; error messages are seen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203107" id="1203107" title="VUL-0: CVE-2022-39188: kernel-source-azure,kernel-source-rt,kernel-source: race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203116" id="1203116" title="VUL-0: CVE-2022-39188: kernel live patch: race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203117" id="1203117" title="VUL-0: CVE-2022-39190: kernel-source-azure,kernel-source-rt,kernel-source: binding an already bound chain in netfilter leads to denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203138" id="1203138" title="fuse: limit nsec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203139" id="1203139" title="fuse: ioctl: translate ENOSYS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203159" id="1203159" title="git-fixes: backport mm: pagewalk: Fix race between unmap and page walker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203183" id="1203183" title="Problems with IPv6 with large messages on OPA fabrics" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203197" id="1203197" title="SLES 15 SP4 - s390: fix double free of GS and RI CBs on fork() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203208" id="1203208" title="kernel PTF request for CVE-2022-36946 on SLE 11 SP4 — ref:_00D1igLOd._5005qBA9Sg:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203229" id="1203229" title="SLES 15 SP4 - KVM: PV: ext call delivered twice when receiver in PSW wait" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203263" id="1203263" title="KVM: SVM: fix tsc scaling cache logic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203290" id="1203290" title="VUL-0: CVE-2022-3169: kernel-source-azure,kernel-source-rt,kernel-source: Request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET  may cause a DOS." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203338" id="1203338" title="statx() call over NFS randomly triggers workqueue lockup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203360" id="1203360" title="[PATCH] btrfs: fix relocation crash due to premature return from  btrfs_commit_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203361" id="1203361" title="[PATCH] btrfs: fix space cache corruption and potential double  allocations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203389" id="1203389" title="VUL-0: CVE-2022-3202: kernel: jfs: Null Pointer Deference in jfs_evict_inode leads to Denial of Service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203391" id="1203391" title="VUL-0: CVE-2022-3176: kernel: io_uring: disable polling pollfree files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203410" id="1203410" title="ISST-LTE:PowerVM:SLES15sp4:evelp59:unable to take the kdump when LMB is set to 4GB." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203435" id="1203435" title="VUL-0: CVE-2022-40476: kernel: A null pointer dereference issue in fs/io_uring.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203505" id="1203505" title="intel_iommu regression on 5.14.21-150400.24.21 (fails to boot with hard lock)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203511" id="1203511" title="VUL-0: CVE-2022-3176: kernel live patch: io_uring: disable polling pollfree files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203514" id="1203514" title="VUL-0: CVE-2022-40768: kernel: information disclosure in stex_queuecommand_lck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203552" id="1203552" title="VUL-0: CVE-2022-3239: kernel: em28xx  initialize refcount before kref_get" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203606" id="1203606" title="VUL-0: CVE-2022-41218: kernel live patch:  vmalloc use-after-free in dvb-core/dmxdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203664" id="1203664" title="PVT:1030:virt:vNIC:0CR:LPM operation for SUSE partition hung in the 7th leg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203693" id="1203693" title="kernel-default failed to build for aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203699" id="1203699" title="HP Inc.:  Firefly 14 G9 - Speakers not working" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203767" id="1203767" title="Backport AMD ACPI processor idle dummy wait fix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203769" id="1203769" title="VUL-0: CVE-2022-3303: kernel: race condition in snd_pcm_oss_sync leads to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203770" id="1203770" title="VUL-0: CVE-2022-41674: kernel: remote crash/code execution with wlan frames" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203794" id="1203794" title="IdeaPad 5 Flex Touch and trackpad not working with kernel 5.19.10 upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203798" id="1203798" title="fuse: Remove the control interface for virtio-fs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203802" id="1203802" title="ACPI: processor idle: Practically limit &quot;Dummy wait&quot; workaround to old Intel systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203893" id="1203893" title="Smartpqi managed interrupts add latency on larger configurations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203902" id="1203902" title="cgroup: Fix race condition at rebind_subsystems()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203908" id="1203908" title="mm: Fix PASID use-after-free issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203922" id="1203922" title="Sound is not working at all on Asus Zenbook 14 OLED" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203935" id="1203935" title="qla2xxx: update driver to 10.02.07.900-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203939" id="1203939" title="Update Broadcom Emulex lpfc driver to 14.2.0.7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203960" id="1203960" title="VUL-0: CVE-2022-41850: kernel: Race condition in roccat_report_event in drivers/hid/hid-roccat.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203969" id="1203969" title="BUG: unable to handle page fault for address: ffffffffc15977e2 - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203987" id="1203987" title="VUL-0: CVE-2022-41848: kernel: Race condition between mgslpc_ioctl and mgslpc_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203992" id="1203992" title="VUL-0: CVE-2022-41849: kernel-source,kernel-source-azure,kernel-source-rt: use after free during USB removal in smscufx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203994" id="1203994" title="VUL-0: CVE-2022-41674: kernel live patch: remote crash/code execution with wlan frames" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204017" id="1204017" title="Backports needed for SUSE kernels in Azure  ref:_00D1igLOd._5005qDcJ2i:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204051" id="1204051" title="VUL-0: CVE-2022-42719: kernel: remote crash/code execution with wlan frames when parsing a multi-BSSID element" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204059" id="1204059" title="VUL-0: CVE-2022-42720: kernel: remote crash/code execution due to refcounting bugs in multi-BSS handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204060" id="1204060" title="VUL-0: CVE-2022-42721: kernel: remote crash/code execution due list corruption in the wlan stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204092" id="1204092" title="CVE-2020-36516 CVE-2022-2588 CVE-2022-2991 CVE-2022-39188 CVE-2022-41218 on SLES 12 SP2 Reactive LTSS: kernel-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204125" id="1204125" title="VUL-0: CVE-2022-42722: kernel: remote denial of service in wlan beacon p2p processing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204132" id="1204132" title="[EAR - NOT FOR USA Citizens] Request PTF for 15 kernel CVEs on SLES 11 SP1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204142" id="1204142" title="Broadcom/ECD requests the attached patch be applied to SLES15SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204166" id="1204166" title="VUL-0: CVE-2022-3424: kernel: Use after Free in gru_set_context_option leading to kernel panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204168" id="1204168" title="VUL-0: CVE-2022-42703: kernel: mm/rmap.c has a use-after-free related to leaf anon_vma double reuse." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204170" id="1204170" title="VUL-0: CVE-2022-42703: kernel live patch: mm/rmap.c has a use-after-free related to leaf anon_vma double reuse." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204171" id="1204171" title="VUL-0: CVE-2022-3435: kernel: out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204183" id="1204183" title="[EAR - NOT FOR USA Citizens] PTF request for kernel to fix CVE-2020-36516, CVE-2022-2588 on sles12-sp2-ltss" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204228" id="1204228" title="VUL-0: CVE-2022-2602: kernel: defer registered files gc to io_uring release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204241" id="1204241" title="High risk of future null-pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204289" id="1204289" title="VUL-0: CVE-2022-42722: kernel live patch: remote denial of service in wlan beacon p2p processing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204290" id="1204290" title="VUL-0: CVE-2022-42721: kernel live patch: remote crash/code execution due list corruption in the wlan stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204291" id="1204291" title="VUL-0: CVE-2022-42720: kernel live patch: remote crash/code execution due to refcounting bugs in multi-BSS handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204292" id="1204292" title="VUL-0: CVE-2022-42719: kernel live patch: remote crash/code execution with wlan frames when parsing a multi-BSSID element" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204353" id="1204353" title="VUL-0: CVE-2022-3526: kernel: memory leak in macvlan_handle_frame()  from drivers/net/macvlan.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204354" id="1204354" title="VUL-0: CVE-2022-3524: kernel: memory leak in ipv6_renew_options()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204355" id="1204355" title="VUL-0: CVE-2022-3521: kernel: race condition in kcm_tx_work() from net/kcm/kcmsock.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204402" id="1204402" title="VUL-0: CVE-2022-3542: kernel: memory leak in bnx2x_tpa_stop() (drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204405" id="1204405" title="VUL-0: CVE-2022-3566: kernel: race condition in tcp_getsockopt()/tcp_setsockopt() of the component TCP handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204413" id="1204413" title="SLES15 SP4: CSB.V bit never becomes valid for NX Gzip job" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204414" id="1204414" title="VUL-0: CVE-2022-3567: kernel: race condition in inet6_stream_ops()/inet6_dgram_ops() of the component IPv6 Handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204415" id="1204415" title="VUL-0: CVE-2022-3545: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfp area_cache_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204417" id="1204417" title="VUL-1: CVE-2022-3535: kernel: memory leak in mvpp2_dbgfs_port_init() (drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204424" id="1204424" title="VUL-0: CVE-2022-3545: kernel live patch: use-after-free in nfp area_cache_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204428" id="1204428" title="VAS window open returned -55 when passing vas_id=-1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204431" id="1204431" title="VUL-0: CVE-2022-3565: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free bugs in mISDN l1oip timer handlers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204432" id="1204432" title="VUL-0: CVE-2022-3565: kernel live patch: use-after-free bugs in mISDN l1oip timer handlers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204439" id="1204439" title="VUL-0: CVE-2022-3586: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free in the network scheduler when using SFB, CAKE and GSO splitting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204470" id="1204470" title="VUL-0: CVE-2022-3577: kernel: HID: bigben: slab-out-of-bounds Write in bigben_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204479" id="1204479" title="VUL-0: CVE-2022-3594: kernel: logging of excessive data through intr_callback() (drivers/net/usb/r8152.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204486" id="1204486" title="VUL-0: CVE-2022-3577: kernel live patch: HID: bigben: slab-out-of-bounds Write in bigben_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204498" id="1204498" title="[DELL EMC SLES15 SP4-RT BUG] System is not booting into RT Kernel with perc 12." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204533" id="1204533" title="fuse: fix deadlock between atomic O_TRUNC and page invalidation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204569" id="1204569" title="VUL-0: CVE-2022-3619: kernel: memory leak in l2cap_recv_acldata() (net/bluetooth/l2cap_core.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204574" id="1204574" title="VUL-0: CVE-2022-3621: kernel: null pointer dereference in nilfs_bmap_lookup_at_level() (fs/nilfs2/inode.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204575" id="1204575" title="VUL-0: CVE-2022-3623: kernel: race condition in follow_page_pte() (mm/gup.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204576" id="1204576" title="VUL-0: CVE-2022-3586: kernel live patch: use-after-free in the network scheduler when using SFB, CAKE and GSO splitting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204619" id="1204619" title="VUL-0: CVE-2022-3640: kernel-source-azure,kernel-source-rt,kernel-source: use after free in l2cap_conn_del() due to improper reference counting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204624" id="1204624" title="VUL-0: CVE-2022-3640: kernel live patch: use after free in l2cap_conn_del() due to improper reference counting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204631" id="1204631" title="VUL-0: CVE-2022-3635: kernel-source,kernel-source-rt,kernel-source-azure: use-after-free bugs caused by tst_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204635" id="1204635" title="VUL-1: CVE-2022-3629: kernel: memory leak in vsock_connect() (net/vmw_vsock/af_vsock.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204636" id="1204636" title="VUL-0: CVE-2022-3635: kernel live patch: use-after-free bugs caused by tst_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204637" id="1204637" title="VUL-0: CVE-2022-3625: kernel: use after free in devlink_param_set()/devlink_param_get() (net/core/devlink.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204646" id="1204646" title="VUL-1: CVE-2022-3646: kernel-source-rt,kernel-source-azure,kernel-source: leak of nilfs_root in case of writer thread creation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204647" id="1204647" title="VUL-0: CVE-2022-3649: kernel: use after free in function nilfs_new_inode of the file fs/nilfs2/inode.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204650" id="1204650" title="VUL-1: CVE-2022-3633: kernel: memory leak in j1939_session_destroy() (net/can/j1939/transport.c)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204653" id="1204653" title="VUL-0: CVE-2022-43750: kernel: memory corruption from user space in usbmon" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204693" id="1204693" title="BTF-enabled kernel fails to build with dwarves-1.24" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204705" id="1204705" title="Kernel 6.0.3: NULL pointer dereference + Plasma 5.26.1 session not working; 6.0.2 works" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204719" id="1204719" title="Sound card on Dell WD15 Dock not working" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204728" id="1204728" title="SLES15 SP4 [ 5.14.21-150400.24.21-default ]: vmcore is not captured sometimes when fadump is triggered after memory add." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204745" id="1204745" title="VUL-0: CVE-2022-2978: kernel live patch: kernel: use-after-free in nilfs_mdt_destroy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204753" id="1204753" title="cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204780" id="1204780" title="VUL-0: CVE-2022-3707: kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204810" id="1204810" title="Delays in NPIV discovery/reinstatement causes LPM failures/readonly filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204850" id="1204850" title="Sometimes newly deployed VMs are not getting accelerated network during provisioning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204868" id="1204868" title="VUL-0: CVE-2022-3628: kernel: USB-accessible buffer overflow in Linux kernel driver brcmfmac" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204926" id="1204926" title="[PATCH] signal: break out of wait loops on kthread_stop()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204933" id="1204933" title="[PATCH] Revert &quot;workqueue: remove unused cancel_work()&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204934" id="1204934" title="[PATCH] printk: wake waiters for safe and NMI contexts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204947" id="1204947" title="[HPS Bug] Unknown kernel command line parameters intel_iommu=on" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204957" id="1204957" title="Update Broadcom Emulex lpfc driver to 14.2.0.8" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204963" id="1204963" title="qla2xxx: update driver to 10.02.07.900-k with fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204970" id="1204970" title="kernel boot leads to instant reset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205007" id="1205007" title="kvm_intel module crash with vmx_sync_pir_to_irr+0xe2/0x120" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205100" id="1205100" title="No sound from internal speakers [Samsung GBP360 aka NP930QDB]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205111" id="1205111" title="USB audio interface Edirol M-100FX is not recognized as audio interface anymore with kernel version &gt; 6.0.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205113" id="1205113" title="io_uring fails t/exit-no-cleanup.t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205128" id="1205128" title="VUL-0: CVE-2022-43945: kernel-source-azure,kernel-source,kernel-source-rt: nfsd: buffer overflow due to incorrect calculation of send buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205130" id="1205130" title="VUL-0: CVE-2022-43945: kernel live patch: nfsd: buffer overflow due to incorrect calculation of send buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205149" id="1205149" title="%kernel_module_package_buildreqs needs to require suse-kernel-rpm-scriptlets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205153" id="1205153" title="VUL-0: kernel: Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205220" id="1205220" title="VUL-0: CVE-2022-3903: kernel: An invalid pipe direction in the mceusb driver cause DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205257" id="1205257" title="SLES 15 SP4 - boot: Add secure boot trailer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205264" id="1205264" title="Apply microcode patch early on every logical thread" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205282" id="1205282" title="objtool does not recognise AMX instructions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205313" id="1205313" title="[EAR - NOT FOR USA Citizens] PTF request for kernel to fix CVE-2020-36557,CVE-2022-36946,CVE-2022-39188,CVE-2022-41218,CVE-2022-29581,CVE-2021-33655,CVE-2020-36558 for SLES 12 SP2 LTSS x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205331" id="1205331" title="fuse: fix readdir cache race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205332" id="1205332" title="fuse: add file_modified() to fallocate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205427" id="1205427" title="SLES 15 SP4 - kernel: missing exception table entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205428" id="1205428" title="SLES 15 SP3 - kernel: missing exception table entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205473" id="1205473" title="VUL-0: kernel: AMD speculation fix for S3 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205507" id="1205507" title="Yast Sound configuration not persistent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205514" id="1205514" title="VUL-0: CVE-2022-4095: kernel: use after free in rtl8712 driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205521" id="1205521" title="fstests btrfs/262 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205567" id="1205567" title="WARNING: CPU: 2 PID: 31106 at ../mm/vmalloc.c:2590 __vunmap+0x207/0x240 - ref:_00D1igLOd._5005qFh4oZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205616" id="1205616" title="fstests generic/681 fails in xfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205617" id="1205617" title="[Azure] VM Deployment Failures Patch Request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205653" id="1205653" title="SLES15 SP4 MU [ 5.14.21-150400.24.28-default ] : smt=off is taking more time on SLES15 SP4 [59min]." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205671" id="1205671" title="VUL-0: CVE-2022-41858: kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205679" id="1205679" title="fstests generic/682 fails in xfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205683" id="1205683" title="[SPR] Telemetry value is not correct with read method" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205700" id="1205700" title="VUL-0: CVE-2022-4139: kernel: incorrect GPU TLB flush in i915 kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205705" id="1205705" title="VUL-0: CVE-2022-42895: kernel-source,kernel-source-azure,kernel-source-rt: Information leak in l2cap_parse_conf_req function in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205709" id="1205709" title="VUL-0: CVE-2022-42896: kernel-source,kernel-source-azure,kernel-source-rt: Use after free in l2cap_connect and l2cap_le_connect_req functions in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205711" id="1205711" title="VUL-0: CVE-2022-4129: kernel-source-rt,kernel-source,kernel-source-azure: kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205744" id="1205744" title="[SLE15 SP5 Beta1][KVM]Host hang when creating VM with shadow mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205764" id="1205764" title="VUL-0: CVE-2022-45888: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/char/xillybus/xillyusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205796" id="1205796" title="VUL-0: CVE-2022-45934: kernel: integer wraparound via L2CAP_CONF_REQ packets affects l2cap_config_req in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205882" id="1205882" title="VUL-0: CVE-2022-45869: kernel-source-rt,kernel-source,kernel-source-azure: Race condition in the x86 KVM subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205993" id="1205993" title="Kernel doesn't build when swap is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206035" id="1206035" title="[PATCH] btrfs: prevent subvol with swapfile from being deleted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206036" id="1206036" title="btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206037" id="1206037" title="VUL-0: kernel: MSR_SPEC_CTRL not correctly updated when doing S3 resumes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206045" id="1206045" title="ceph: properly handle statfs on multifs setups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206046" id="1206046" title="ceph: switch netfs read ops to use rreq-&gt;inode instead of  rreq-&gt;mapping-&gt;host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206047" id="1206047" title="ceph: do not update snapshot context when there is no new snapshot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206048" id="1206048" title="ceph: fix inode reference leakage in ceph_get_snapdir()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206049" id="1206049" title="ceph: fix memory leak in ceph_readdir when note_last_dentry returns  error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206050" id="1206050" title="ceph: allow ceph.dir.rctime xattr to be updatable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206051" id="1206051" title="ceph: avoid putting the realm twice when decoding snaps fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206056" id="1206056" title="[PATCH] btrfs: fix processing of delayed data refs during backref  walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206057" id="1206057" title="[PATCH] btrfs: fix processing of delayed tree block refs during  backref walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206113" id="1206113" title="VUL-0: CVE-2022-3643: xen: Guests can trigger NIC interface reset/abort/crash via netback (XSA-423)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206114" id="1206114" title="VUL-0: CVE-2022-42328, CVE-2022-42329: xen: Guests can trigger deadlock in Linux netback driver (XSA-424)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206147" id="1206147" title="fstests btrfs/275 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206149" id="1206149" title="fstests btrfs/264 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206207" id="1206207" title="VUL-0: CVE-2022-4378: kernel: stack overflow in __do_proc_dointvec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206273" id="1206273" title="fuse: lock inode unconditionally in fuse_fallocate()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" id="CVE-2022-4378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" id="CVE-2022-42328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" id="CVE-2022-42329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" id="CVE-2022-3643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" id="CVE-2022-3635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45869" id="CVE-2022-45869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45888" id="CVE-2022-45888" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45888" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" id="CVE-2022-4139" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3424" id="CVE-2022-3424" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3424" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" id="CVE-2022-41850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" id="CVE-2022-45934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" id="CVE-2022-4129" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" id="CVE-2022-42896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" id="CVE-2022-42895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41858" id="CVE-2022-41858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" id="CVE-2022-43945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" id="CVE-2022-4095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" id="CVE-2022-3566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" id="CVE-2022-3567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" id="CVE-2022-2602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" id="CVE-2022-3176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" id="CVE-2022-3903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" id="CVE-2022-3707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" id="CVE-2022-33981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3628" id="CVE-2022-3628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28748" id="CVE-2022-28748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28748" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2964" id="CVE-2022-2964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2964" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43750" id="CVE-2022-43750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43750" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3625" id="CVE-2022-3625" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3625" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40476" id="CVE-2022-40476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3535" id="CVE-2022-3535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3542" id="CVE-2022-3542" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3542" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3545" id="CVE-2022-3545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3646" id="CVE-2022-3646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3649" id="CVE-2022-3649" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3649" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3629" id="CVE-2022-3629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3640" id="CVE-2022-3640" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3640" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3633" id="CVE-2022-3633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3633" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3621" id="CVE-2022-3621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3619" id="CVE-2022-3619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3619" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3594" id="CVE-2022-3594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3577" id="CVE-2022-3577" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3577" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3521" id="CVE-2022-3521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3524" id="CVE-2022-3524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3586" id="CVE-2022-3586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3565" id="CVE-2022-3565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3526" id="CVE-2022-3526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2153" id="CVE-2022-2153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2153" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2978" id="CVE-2022-2978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2978" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42703" id="CVE-2022-42703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42722" id="CVE-2022-42722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42722" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42719" id="CVE-2022-42719" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42719" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3435" id="CVE-2022-3435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42721" id="CVE-2022-42721" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42721" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42720" id="CVE-2022-42720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42720" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40768" id="CVE-2022-40768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40768" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3169" id="CVE-2022-3169" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3169" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41848" id="CVE-2022-41848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41849" id="CVE-2022-41849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41674" id="CVE-2022-41674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41674" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3303" id="CVE-2022-3303" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3303" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1263" id="CVE-2022-1263" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1263" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41218" id="CVE-2022-41218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41218" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3239" id="CVE-2022-3239" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3239" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32296" id="CVE-2022-32296" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32296" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3202" id="CVE-2022-3202" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3202" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39189" id="CVE-2022-39189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586" id="CVE-2022-2586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16119" id="CVE-2020-16119" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16119" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1882" id="CVE-2022-1882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1882" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39190" id="CVE-2022-39190" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39190" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39188" id="CVE-2022-39188" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39188" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2663" id="CVE-2022-2663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3078" id="CVE-2022-3078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28356" id="CVE-2022-28356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3028" id="CVE-2022-3028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3028" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2905" id="CVE-2022-2905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2977" id="CVE-2022-2977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2977" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2938" id="CVE-2022-2938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2938" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28693" id="CVE-2022-28693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33135" id="CVE-2021-33135" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33135" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588" id="CVE-2022-2588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2959" id="CVE-2022-2959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" id="CVE-2022-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1184" id="CVE-2022-1184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1184" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4037" id="CVE-2021-4037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4037" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2873" id="CVE-2022-2873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36879" id="CVE-2022-36879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20368" id="CVE-2022-20368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20368" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20369" id="CVE-2022-20369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20369" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26373" id="CVE-2022-26373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26373" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3695" id="CVE-2016-3695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" id="CVE-2022-2639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" id="CVE-2020-36516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" id="CVE-2022-32250" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1082" id="PED-1082" title="https://jira.suse.com/browse/PED-1082" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1084" id="PED-1084" title="https://jira.suse.com/browse/PED-1084" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1085" id="PED-1085" title="https://jira.suse.com/browse/PED-1085" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1096" id="PED-1096" title="https://jira.suse.com/browse/PED-1096" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1211" id="PED-1211" title="https://jira.suse.com/browse/PED-1211" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1573" id="PED-1573" title="https://jira.suse.com/browse/PED-1573" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1649" id="PED-1649" title="https://jira.suse.com/browse/PED-1649" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1706" id="PED-1706" title="https://jira.suse.com/browse/PED-1706" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1936" id="PED-1936" title="https://jira.suse.com/browse/PED-1936" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2684" id="PED-2684" title="https://jira.suse.com/browse/PED-2684" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-387" id="PED-387" title="https://jira.suse.com/browse/PED-387" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-529" id="PED-529" title="https://jira.suse.com/browse/PED-529" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-611" id="PED-611" title="https://jira.suse.com/browse/PED-611" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-634" id="PED-634" title="https://jira.suse.com/browse/PED-634" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-652" id="PED-652" title="https://jira.suse.com/browse/PED-652" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-664" id="PED-664" title="https://jira.suse.com/browse/PED-664" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-676" id="PED-676" title="https://jira.suse.com/browse/PED-676" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-678" id="PED-678" title="https://jira.suse.com/browse/PED-678" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-679" id="PED-679" title="https://jira.suse.com/browse/PED-679" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-682" id="PED-682" title="https://jira.suse.com/browse/PED-682" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-688" id="PED-688" title="https://jira.suse.com/browse/PED-688" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-707" id="PED-707" title="https://jira.suse.com/browse/PED-707" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-720" id="PED-720" title="https://jira.suse.com/browse/PED-720" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-729" id="PED-729" title="https://jira.suse.com/browse/PED-729" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-732" id="PED-732" title="https://jira.suse.com/browse/PED-732" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-755" id="PED-755" title="https://jira.suse.com/browse/PED-755" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-763" id="PED-763" title="https://jira.suse.com/browse/PED-763" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-813" id="PED-813" title="https://jira.suse.com/browse/PED-813" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-817" id="PED-817" title="https://jira.suse.com/browse/PED-817" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-822" id="PED-822" title="https://jira.suse.com/browse/PED-822" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-824" id="PED-824" title="https://jira.suse.com/browse/PED-824" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-825" id="PED-825" title="https://jira.suse.com/browse/PED-825" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-833" id="PED-833" title="https://jira.suse.com/browse/PED-833" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-842" id="PED-842" title="https://jira.suse.com/browse/PED-842" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-846" id="PED-846" title="https://jira.suse.com/browse/PED-846" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-849" id="PED-849" title="https://jira.suse.com/browse/PED-849" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-850" id="PED-850" title="https://jira.suse.com/browse/PED-850" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-851" id="PED-851" title="https://jira.suse.com/browse/PED-851" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-856" id="PED-856" title="https://jira.suse.com/browse/PED-856" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-857" id="PED-857" title="https://jira.suse.com/browse/PED-857" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-13847" id="SLE-13847" title="https://jira.suse.com/browse/SLE-13847" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18130" id="SLE-18130" title="https://jira.suse.com/browse/SLE-18130" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19359" id="SLE-19359" title="https://jira.suse.com/browse/SLE-19359" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19924" id="SLE-19924" title="https://jira.suse.com/browse/SLE-19924" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-20183" id="SLE-20183" title="https://jira.suse.com/browse/SLE-20183" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-23766" id="SLE-23766" title="https://jira.suse.com/browse/SLE-23766" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24572" id="SLE-24572" title="https://jira.suse.com/browse/SLE-24572" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24682" id="SLE-24682" title="https://jira.suse.com/browse/SLE-24682" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24814" id="SLE-24814" title="https://jira.suse.com/browse/SLE-24814" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-9246" id="SLE-9246" title="https://jira.suse.com/browse/SLE-9246" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190969" id="1190969" title="Partner-L3: Wrong recognize VROC partitions." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203829" id="1203829" title="[ampere] SLERT/arm64: kernel BUG at fs/inode.c:548!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205496" id="1205496" title="ext4 fs driver hangs with large ext4 volume (&gt;120TB ??)  and xattr and ACL enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206391" id="1206391" title="VUL-0: CVE-2022-3114: kernel: Unchecked kcalloc return leads to null pointer dereference" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3114" id="CVE-2022-3114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3114" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3633: Fixed a memory leak in j1939_session_destroy of the file net/can/j1939/transport.c (bsc#1204650).
- CVE-2022-3114: Fixed a denial of service in imx_register_uart_clocks() in drivers/clk/imx/clk.c (bsc#1206391).
- CVE-2022-3619: Fixed a memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (bsc#1204569).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).
- CVE-2022-33981: Fixed a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function (bsc#1200692).
- CVE-2022-45869: Fixed a race condition in the x86 KVM subsystem which could cause a denial of service (bsc#1205882).
- CVE-2022-45888: Fixed a use-after-free during physical removal of a USB devices when using drivers/char/xillybus/xillyusb.c (bsc#1205764).
- CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory (bsc#1205700).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711)
- CVE-2022-3566: Fixed a race condition in the functions tcp_getsockopt/tcp_setsockopt. The manipulation leads to a race condition (bsc#1204405).
- CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1204228).
- CVE-2022-3176: Fixed a use-after-free in io_uring related to signalfd_poll() and binder_poll() (bsc#1203391).
- CVE-2022-3707: Fixed a double free in the Intel GVT-g graphics driver (bsc#1204780).
- CVE-2022-3625: Fixed a user-after-free vulnerability in devlink_param_set/devlink_param_get of the file net/core/devlink.c (bsc#1204637).
- CVE-2022-3535: Fixed a memory leak in mvpp2_dbgfs_port_init of the file drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c (bsc#1204417).
- CVE-2022-39189: Fixed an issue were an unprivileged guest users can compromise the guest kernel because TLB flush operations were mishandled in certain KVM_VCPU_PREEMPTED situations (bsc#1203066).
- CVE-2022-3577: Fixed an out-of-bounds memory write in bigben_probe of drivers/hid/hid-bigbenff.c (bsc#1204470).
- CVE-2022-2978: Fixed a use-after-free in the NILFS file system (bsc#1202700).
- CVE-2022-1184: Fixed a use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (bsc#1198577).
- CVE-2022-1263: Fixed a NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allowed an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service (bsc#1198189).
- CVE-2022-1882: Fixed a use-after-free flaw in free_pipe_info() that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1199904).
- CVE-2022-20369: Fixed possible out of bounds write due to improper input validation in v4l2_m2m_querybuf of v4l2-mem2mem.c (bsc#1202347).
- CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed CPU information leak via post-barrier RSB predictions (bsc#1201726).
- CVE-2022-2639: Fixed integer underflow that could lead to out-of-bounds write in reserve_sfa_size() (bsc#1202154).
- CVE-2022-2663: Fixed an issue which allowed a firewall to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured (bsc#1202097).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-28356: Fixed a refcount bug in llc_ui_bind and llc_ui_autobind which could allow an unprivileged user to execute a denial of service. (bsc#1197391)
- CVE-2022-2873: Fixed an out-of-bounds memory access flaw that was found in iSMT SMBus host controller driver (bsc#1202558).
- CVE-2022-2905: Fixed tnum_range usage on array range checking for poke descriptors (bsc#1202860).
- CVE-2022-2938: Fixed a flaw that was found inside the Pressure Stall Information implementation that could have been used to allow an attacker to crash the system or have other memory-corruption side effects (bsc#1202623).
- CVE-2022-2959: Fixed a race condition that was found inside the watch queue due to a missing lock in pipe_resize_ring() (bsc#1202681).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed a race condition that was found in the IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously (bsc#1202898).
- CVE-2022-3078: Fixed a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c (bsc#1203041).
- CVE-2022-3202: Fixed a NULL pointer dereference flaw in Journaled File System. This could allow a local attacker to crash the system or leak kernel internal information (bsc#1203389).
- CVE-2022-32250: Fixed user-after-free in net/netfilter/nf_tables_api.c that could allow local privilege escalation (bsc#1200015).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bsc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bsc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bsc#1203769).
- CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c (bsc#1204171).
- CVE-2022-3526: Fixed a memory leak in macvlan_handle_frame() from drivers/net/macvlan.c (bsc#1204353).
- CVE-2022-3640: Fixed use-after-free in l2cap_conn_del() in net/bluetooth/l2cap_core.c (bsc#1204619).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bsc#1201948).
- CVE-2022-36946: Fixed a denial of service inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c (bsc#1201940).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bsc#1203107).
- CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon binding to an already bound chain (bsc#1203117).
- CVE-2022-40476: Fixed a null pointer dereference in fs/io_uring.c (bsc#1203435).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
- CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
- CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bsc#1203987).
- CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bsc#1203992).
- CVE-2022-42719: Fixed remote code execution with wlan frames when parsing a multi-BSSID element (bsc#1204051).
- CVE-2022-42720: Fixed remote code execution due to refcounting bugs (bsc#1204059).
- CVE-2022-42721: Fixed remote code execution due list corruption in the wlan stack (bsc#1204060).
- CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)
- CVE-2021-33135: Fixed uncontrolled resource consumption inside Intel(R) SGX that may have allowed an authenticated user to potentially enable denial of service via local access (bsc#1199515).
- CVE-2020-16119: Fixed a use-after-free vulnerability exploitable by a local attacker due to reuse of a DCCP socket. (bsc#1177471)
- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bsc#1196616).
- CVE-2016-3695: Fixed an issue inside the einj_error_inject function in drivers/acpi/apei/einj.c that allowed users to simulate hardware errors and consequently cause a denial of service (bsc#1023051).

The following non-security bugs were fixed:

- 9p: Fix refcounting during full path walks for fid lookups (git-fixes).
- 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl (git-fixes).
- 9p: fix fid refcount leak in v9fs_vfs_get_link (git-fixes).
- ACPI / scan: Create platform device for CS35L41 (bsc#1203699).
- ACPI: APEI: Better fix to avoid spamming the console with old error logs (git-fixes).
- ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (git-fixes).
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (git-fixes).
- ACPI: APEI: explicit init of HEST and GHES in apci_init() (git-fixes).
- ACPI: CPPC: Do not prevent CPPC from working in the future (git-fixes).
- ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk (git-fixes).
- ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator systems (git-fixes).
- ACPI: HMAT: Release platform device in case of platform_device_add_data() fails (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization (git-fixes).
- ACPI: LPSS: Fix missing check in register_device_clock() (git-fixes).
- ACPI: PM: save NVS memory for Lenovo G40-45 (git-fixes).
- ACPI: VIOT: Fix ACS setup (git-fixes).
- ACPI: extlog: Handle multiple records (git-fixes).
- ACPI: processor idle: Practically limit &quot;Dummy wait&quot; workaround to old Intel systems (bsc#1203767).
- ACPI: processor/idle: Annotate more functions to live in cpuidle section (git-fixes).
- ACPI: processor: Remove freq Qos request for all CPUs (git-fixes).
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (git-fixes).
- ACPI: resource: skip IRQ override on AMD Zen platforms (git-fixes).
- ACPI: scan: Add CLSA0101 Laptop Support (bsc#1203699).
- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (git-fixes).
- ACPI: tables: FPDT: Do not call acpi_os_map_memory() on invalid phys address (git-fixes).
- ACPI: thermal: drop an always true check (git-fixes).
- ACPI: utils: Add api to read _SUB from ACPI (bsc#1203699).
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (git-fixes).
- ACPI: video: Force backlight native for some TongFang devices (git-fixes).
- ACPI: video: Make backlight class device registration a separate step (v2) (git-fixes).
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (git-fixes).
- ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (git-fixes).
- ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (git-fixes).
- ALSA: Use del_timer_sync() before freeing timer (git-fixes).
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (git-fixes).
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer (git-fixes).
- ALSA: aoa: Fix I2S device accounting (git-fixes).
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (git-fixes).
- ALSA: asihpi - Remove useless code in hpi_meter_get_peak() (git-fixes).
- ALSA: au88x0: use explicitly signed char (git-fixes).
- ALSA: bcd2000: Fix a UAF bug on the error path of probing (git-fixes).
- ALSA: core: Fix double-free at snd_card_new() (git-fixes).
- ALSA: cs35l41: Check hw_config before using it (bsc#1203699).
- ALSA: cs35l41: Enable Internal Boost in shared lib (bsc#1203699).
- ALSA: cs35l41: Move cs35l41_gpio_config to shared lib (bsc#1203699).
- ALSA: cs35l41: Unify hardware configuration (bsc#1203699).
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S (git-fixes).
- ALSA: dmaengine: increment buffer pointer atomically (git-fixes).
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (git-fixes).
- ALSA: hda/cirrus - support for iMac 12,1 model (git-fixes).
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (git-fixes).
- ALSA: hda/conexant: add a new hda codec SN6140 (git-fixes).
- ALSA: hda/cs8409: Add Speaker Playback Switch for Cyborg (bsc#1203699).
- ALSA: hda/cs8409: Add Speaker Playback Switch for Warlock (bsc#1203699).
- ALSA: hda/cs8409: Add new Dolphin HW variants (bsc#1203699).
- ALSA: hda/cs8409: Disable HSBIAS_SENSE_EN for Cyborg (bsc#1203699).
- ALSA: hda/cs8409: Fix Full Scale Volume setting for all variants (bsc#1203699).
- ALSA: hda/cs8409: Fix Warlock to use mono mic configuration (bsc#1203699).
- ALSA: hda/cs8409: Re-order quirk table into ascending order (bsc#1203699).
- ALSA: hda/cs8409: Support manual mode detection for CS42L42 (bsc#1203699).
- ALSA: hda/cs8409: Support new Dolphin Variants (bsc#1203699).
- ALSA: hda/cs8409: Support new Odin Variants (bsc#1203699).
- ALSA: hda/cs8409: Support new Warlock MLK Variants (bsc#1203699).
- ALSA: hda/cs8409: Use general cs42l42 include in cs8409 hda driver (bsc#1203699).
- ALSA: hda/cs8409: change cs8409_fixups v.pins initializers to static (bsc#1203699).
- ALSA: hda/cs_dsp_ctl: Fix mutex inversion when creating controls (bsc#1203699).
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio (git-fixes).
- ALSA: hda/hdmi: Do not skip notification handling during PM operation (git-fixes).
- ALSA: hda/hdmi: Fix the converter allocation for the silent stream (git-fixes).
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream (git-fixes).
- ALSA: hda/hdmi: change type for the 'assigned' variable (git-fixes).
- ALSA: hda/realtek: Add CS35L41 support for Thinkpad laptops (bsc#1203699).
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (git-fixes).
- ALSA: hda/realtek: Add Positivo C6300 model quirk (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED (git-fixes).
- ALSA: hda/realtek: Add another HP ZBook G9 model quirks (bsc#1203699).
- ALSA: hda/realtek: Add mute and micmut LED support for Zbook Fury 17 G9 (bsc#1203699).
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (git-fixes).
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (bsc#1203922).
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NV45PZ (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Zbook Firefly 14 G9 model (bsc#1203699).
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga7 14IAL7 (bsc#1203699).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga9 14IAP7 (git-fixes).
- ALSA: hda/realtek: Add quirk for another Asus K42JZ model (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS Zenbooks using CS35L41 (bsc#1203699).
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (git-fixes).
- ALSA: hda/realtek: Add support for HP Laptops (bsc#1203699).
- ALSA: hda/realtek: Add support for Legion 7 16ACHg6 laptop (bsc#1203699).
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z (git-fixes).
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (git-fixes).
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook 845/865 G9 (bsc#1203699).
- ALSA: hda/realtek: Enable mute/micmute LEDs support for HP Laptops (bsc#1203699).
- ALSA: hda/realtek: Enable speaker and mute LEDs for HP laptops (bsc#1203699).
- ALSA: hda/realtek: Fix LED on Zbook Studio G9 (bsc#1203699).
- ALSA: hda/realtek: Fix mute led issue on thinkpad with cs35l41 s-codec (bsc#1203699).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1205100).
- ALSA: hda/realtek: More robust component matching for CS35L41 (bsc#1203699).
- ALSA: hda/realtek: Re-arrange quirk table entries (git-fixes).
- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (bsc#1205100).
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (git-fixes).
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change (git-fixes).
- ALSA: hda/sigmatel: Keep power up while beep is enabled (bsc#1200544).
- ALSA: hda/tegra: Add Tegra234 hda driver support (git-fixes).
- ALSA: hda/tegra: Align BDL entry to 4KB boundary (git-fixes).
- ALSA: hda/tegra: Update scratch reg. communication (git-fixes).
- ALSA: hda/tegra: set depop delay for tegra (git-fixes).
- ALSA: hda: Fix Nvidia dp infoframe (git-fixes).
- ALSA: hda: Fix dependencies of CS35L41 on SPI/I2C buses (bsc#1203699).
- ALSA: hda: Fix dependency on ASoC cs35l41 codec (bsc#1203699).
- ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (git-fixes).
- ALSA: hda: Fix position reporting on Poulsbo (git-fixes).
- ALSA: hda: add Intel 5 Series / 3400 PCI DID (git-fixes).
- ALSA: hda: cs35l41: Add Amp Name based on channel and index (bsc#1203699).
- ALSA: hda: cs35l41: Add Boost type flag (bsc#1203699).
- ALSA: hda: cs35l41: Add Support for Interrupts (bsc#1203699).
- ALSA: hda: cs35l41: Add calls to newly added test key function (bsc#1203699).
- ALSA: hda: cs35l41: Add defaulted values into dsp bypass config sequence (bsc#1203699).
- ALSA: hda: cs35l41: Add initial DSP support and firmware loading (bsc#1203699).
- ALSA: hda: cs35l41: Add missing default cases (bsc#1203699).
- ALSA: hda: cs35l41: Add module parameter to control firmware load (bsc#1203699).
- ALSA: hda: cs35l41: Add support for CS35L41 in HDA systems (bsc#1203699).
- ALSA: hda: cs35l41: Allow compilation test on non-ACPI configurations (bsc#1203699).
- ALSA: hda: cs35l41: Always configure the DAI (bsc#1203699).
- ALSA: hda: cs35l41: Avoid overwriting register patch (bsc#1203699).
- ALSA: hda: cs35l41: Clarify support for CSC3551 without _DSD Properties (bsc#1203699).
- ALSA: hda: cs35l41: Consolidate selections under SND_HDA_SCODEC_CS35L41 (bsc#1203699).
- ALSA: hda: cs35l41: Do not dereference fwnode handle (bsc#1203699).
- ALSA: hda: cs35l41: Drop wrong use of ACPI_PTR() (bsc#1203699).
- ALSA: hda: cs35l41: Enable GPIO2 Interrupt for CLSA0100 laptops (bsc#1203699).
- ALSA: hda: cs35l41: Fix I2S params comments (bsc#1203699).
- ALSA: hda: cs35l41: Fix comments wrt serial-multi-instantiate reference (bsc#1203699).
- ALSA: hda: cs35l41: Fix error in spi cs35l41 hda driver name (bsc#1203699).
- ALSA: hda: cs35l41: Handle all external boost setups the same way (bsc#1203699).
- ALSA: hda: cs35l41: Improve dev_err_probe() messaging (bsc#1203699).
- ALSA: hda: cs35l41: Make cs35l41_hda_remove() return void (bsc#1203699).
- ALSA: hda: cs35l41: Make use of the helper function dev_err_probe() (bsc#1203699).
- ALSA: hda: cs35l41: Move boost config to initialization code (bsc#1203699).
- ALSA: hda: cs35l41: Move cs35l41* calls to its own symbol namespace (bsc#1203699).
- ALSA: hda: cs35l41: Move external boost handling to lib for ASoC use (bsc#1203699).
- ALSA: hda: cs35l41: Mute the device before shutdown (bsc#1203699).
- ALSA: hda: cs35l41: Put the device into safe mode for external boost (bsc#1203699).
- ALSA: hda: cs35l41: Read Speaker Calibration data from UEFI variables (bsc#1203699).
- ALSA: hda: cs35l41: Remove Set Channel Map api from binding (bsc#1203699).
- ALSA: hda: cs35l41: Remove cs35l41_hda_reg_sequence struct (bsc#1203699).
- ALSA: hda: cs35l41: Remove suspend/resume hda hooks (bsc#1203699).
- ALSA: hda: cs35l41: Reorganize log for playback actions (bsc#1203699).
- ALSA: hda: cs35l41: Save Subsystem ID inside CS35L41 Driver (bsc#1203699).
- ALSA: hda: cs35l41: Save codec object inside component struct (bsc#1203699).
- ALSA: hda: cs35l41: Set Speaker Position for CLSA0100 Laptop (bsc#1203699).
- ALSA: hda: cs35l41: Support CLSA0101 (bsc#1203699).
- ALSA: hda: cs35l41: Support Firmware switching and reloading (bsc#1203699).
- ALSA: hda: cs35l41: Support Hibernation during Suspend (bsc#1203699).
- ALSA: hda: cs35l41: Support Speaker ID for laptops (bsc#1203699).
- ALSA: hda: cs35l41: Support System Suspend (bsc#1203699).
- ALSA: hda: cs35l41: Support multiple load paths for firmware (bsc#1203699).
- ALSA: hda: cs35l41: Support reading subsystem id from ACPI (bsc#1203699).
- ALSA: hda: cs35l41: Tidyup code (bsc#1203699).
- ALSA: hda: cs35l41: Use the CS35L41 HDA internal define (bsc#1203699).
- ALSA: hda: cs35l41: fix double free on error in probe() (bsc#1203699).
- ALSA: hda: fix potential memleak in 'add_widget_node' (git-fixes).
- ALSA: hda: hda_cs_dsp_ctl: Add Library to support CS_DSP ALSA controls (bsc#1203699).
- ALSA: hda: hda_cs_dsp_ctl: Add apis to write the controls directly (bsc#1203699).
- ALSA: hda: hda_cs_dsp_ctl: Add fw id strings (bsc#1203699).
- ALSA: hda: hda_cs_dsp_ctl: Ensure pwr_lock is held before reading/writing controls (bsc#1203699).
- ALSA: hda: hda_cs_dsp_ctl: Minor clean and redundant code removal (bsc#1203699).
- ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs (jsc#PED-720).
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (git-fixes).
- ALSA: hiface: fix repeated words in comments (git-fixes).
- ALSA: info: Fix llseek return value when using callback (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: oss: Fix potential deadlock at unregistration (git-fixes).
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (git-fixes).
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (git-fixes).
- ALSA: rme9652: use explicitly signed char (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support (git-fixes).
- ALSA: scarlett2: Add support for the internal &quot;standalone&quot; switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections (git-fixes).
- ALSA: seq: Fix data-race at module auto-loading (git-fixes).
- ALSA: seq: oss: Fix data-race for max_midi_devs access (git-fixes).
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (git-fixes).
- ALSA: usb-audio: Add endianness annotations (git-fixes).
- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos (git-fixes).
- ALSA: usb-audio: Add quirk entry for M-Audio Micro (git-fixes).
- ALSA: usb-audio: Add quirk for Behringer UMC202HD (git-fixes).
- ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support (git-fixes).
- ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (git-fixes).
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (git-fixes).
- ALSA: usb-audio: Fix NULL dererence at error path (git-fixes).
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (git-fixes).
- ALSA: usb-audio: Fix last interface check for registration (git-fixes).
- ALSA: usb-audio: Fix potential memory leaks (git-fixes).
- ALSA: usb-audio: Fix regression with Dell Dock jack detection (bsc#1204719).
- ALSA: usb-audio: Inform the delayed registration more properly (git-fixes).
- ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II (git-fixes).
- ALSA: usb-audio: Register card again for iface over delayed_register option (git-fixes).
- ALSA: usb-audio: Register card at the last interface (git-fixes).
- ALSA: usb-audio: Remove redundant workaround for Roland quirk (bsc#1205111).
- ALSA: usb-audio: Split endpoint setups for hw_params and prepare (git-fixes).
- ALSA: usb-audio: Support jack detection on Dell dock (git-fixes).
- ALSA: usb-audio: Turn off 'manual mode' on Dell dock (git-fixes).
- ALSA: usb-audio: Yet more regression for for the delayed card registration (bsc#1205111).
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (git-fixes).
- ALSA: usb-audio: make read-only array marker static const (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in scarlett2_usb() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (git-fixes).
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (git-fixes).
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() (git-fixes).
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (git-fixes).
- ARM: Drop CMDLINE_* dependency on ATAGS (git-fixes).
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (git-fixes).
- ARM: OMAP2+: Fix refcount leak in omapdss_init_of (git-fixes).
- ARM: OMAP2+: display: Fix refcount leak bug (git-fixes).
- ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (git-fixes).
- ARM: at91: rm9200: fix usb device clock id (git-fixes).
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init (git-fixes).
- ARM: decompressor: Include .data.rel.ro.local (git-fixes).
- ARM: defconfig: clean up multi_v4t and multi_v5 configs (git-fixes).
- ARM: defconfig: drop CONFIG_PTP_1588_CLOCK=y (git-fixes).
- ARM: defconfig: drop CONFIG_SERIAL_OMAP references (git-fixes).
- ARM: defconfig: drop CONFIG_USB_FSL_USB2 (git-fixes).
- ARM: dts: BCM5301X: Add DT for Meraki MR26 (git-fixes).
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node (git-fixes).
- ARM: dts: am33xx: Fix MMCHS0 dma properties (git-fixes).
- ARM: dts: armada-38x: Add gpio-ranges for pin muxing (git-fixes).
- ARM: dts: ast2500-evb: fix board compatible (git-fixes).
- ARM: dts: ast2600-evb-a1: fix board compatible (git-fixes).
- ARM: dts: ast2600-evb: fix board compatible (git-fixes).
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (git-fixes).
- ARM: dts: at91: sama5d27_wlsom1: do not keep ldo2 enabled all the time (git-fixes).
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (git-fixes).
- ARM: dts: at91: sama5d2_icp: do not keep vdd_other enabled all the time (git-fixes).
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (git-fixes).
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (git-fixes).
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (git-fixes).
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (git-fixes).
- ARM: dts: imx6dl: add missing properties for sram (git-fixes).
- ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (git-fixes).
- ARM: dts: imx6q: add missing properties for sram (git-fixes).
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (git-fixes).
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (git-fixes).
- ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (git-fixes).
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (git-fixes).
- ARM: dts: imx6qp: add missing properties for sram (git-fixes).
- ARM: dts: imx6sl: add missing properties for sram (git-fixes).
- ARM: dts: imx6sll: add missing properties for sram (git-fixes).
- ARM: dts: imx6sx: add missing properties for sram (git-fixes).
- ARM: dts: imx6ul: add missing properties for sram (git-fixes).
- ARM: dts: imx6ul: change operating-points to uint32-matrix (git-fixes).
- ARM: dts: imx6ul: fix csi node compatible (git-fixes).
- ARM: dts: imx6ul: fix keypad compatible (git-fixes).
- ARM: dts: imx6ul: fix lcdif node compatible (git-fixes).
- ARM: dts: imx6ul: fix qspi node compatible (git-fixes).
- ARM: dts: imx7: Fix NAND controller size-cells (git-fixes).
- ARM: dts: imx7d-colibri-emmc: add cpu1 supply (git-fixes).
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (git-fixes).
- ARM: dts: imx: align SPI NOR node name with dtschema (git-fixes).
- ARM: dts: integrator: Tag PCI host with device_type (git-fixes).
- ARM: dts: kirkwood: lsxl: fix serial line (git-fixes).
- ARM: dts: kirkwood: lsxl: remove first ethernet port (git-fixes).
- ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg (git-fixes).
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells (git-fixes).
- ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART (git-fixes).
- ARM: dts: turris-omnia: Add label for wan port (git-fixes).
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment (git-fixes).
- ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC (git-fixes).
- ARM: findbit: fix overflowing offset (git-fixes).
- ARM: mxs: fix memory leak in mxs_machine_init() (git-fixes).
- ARM: shmobile: rcar-gen2: Increase refcount for new reference (git-fixes).
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (git-fixes).
- ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (git-fixes).
- ASoC: SOF: Intel: pci-tgl: add ADL-PS support (jsc#PED-720).
- ASoC: SOF: Intel: pci-tgl: add RPL-P support (jsc#PED-720).
- ASoC: SOF: Intel: pci-tgl: add RPL-S support (jsc#PED-652).
- ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (git-fixes).
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (git-fixes).
- ASoC: audio-graph-card: Add of_node_put() in fail path (git-fixes).
- ASoC: codec: tlv320aic32x4: fix mono playback via I2S (git-fixes).
- ASoC: codecs: da7210: add check for i2c_add_driver (git-fixes).
- ASoC: codecs: jz4725b: Fix spelling mistake &quot;Sourc&quot; -&gt; &quot;Source&quot;, &quot;Routee&quot; -&gt; &quot;Route&quot; (git-fixes).
- ASoC: codecs: jz4725b: add missed Line In power control bit (git-fixes).
- ASoC: codecs: jz4725b: fix capture selector naming (git-fixes).
- ASoC: codecs: jz4725b: fix reported volume for Master ctl (git-fixes).
- ASoC: codecs: jz4725b: use right control for Capture Volume (git-fixes).
- ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (git-fixes).
- ASoC: codecs: tx-macro: fix kcontrol put (git-fixes).
- ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (git-fixes).
- ASoC: core: Fix use-after-free in snd_soc_exit() (git-fixes).
- ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe (git-fixes).
- ASoC: cs35l41: Add ASP TX3/4 source to register patch (bsc#1203699).
- ASoC: cs35l41: Add bindings for CS35L41 (bsc#1203699).
- ASoC: cs35l41: Add common cs35l41 enter hibernate function (bsc#1203699).
- ASoC: cs35l41: Add cs35l51/53 IDs (bsc#1203699).
- ASoC: cs35l41: Add endianness flag in snd_soc_component_driver (bsc#1203699).
- ASoC: cs35l41: Add one more variable in the debug log (bsc#1203699).
- ASoC: cs35l41: Add support for CLSA3541 ACPI device ID (bsc#1203699).
- ASoC: cs35l41: Add support for hibernate memory retention mode (bsc#1203699).
- ASoC: cs35l41: Binding fixes (bsc#1203699).
- ASoC: cs35l41: CS35L41 Boosted Smart Amplifier (bsc#1203699).
- ASoC: cs35l41: Change monitor widgets to siggens (bsc#1203699).
- ASoC: cs35l41: Combine adjacent register writes (bsc#1203699).
- ASoC: cs35l41: Convert tables to shared source code (bsc#1203699).
- ASoC: cs35l41: Correct DSP power down (bsc#1203699).
- ASoC: cs35l41: Correct handling of some registers in the cache (bsc#1203699).
- ASoC: cs35l41: Correct some control names (bsc#1203699).
- ASoC: cs35l41: Create shared function for boost configuration (bsc#1203699).
- ASoC: cs35l41: Create shared function for errata patches (bsc#1203699).
- ASoC: cs35l41: Create shared function for setting channels (bsc#1203699).
- ASoC: cs35l41: DSP Support (bsc#1203699).
- ASoC: cs35l41: Do not overwrite returned error code (bsc#1203699).
- ASoC: cs35l41: Do not print error when waking from hibernation (bsc#1203699).
- ASoC: cs35l41: Document CS35l41 External Boost (bsc#1203699).
- ASoC: cs35l41: Fix DSP mbox start command and global enable order (bsc#1203699).
- ASoC: cs35l41: Fix GPIO2 configuration (bsc#1203699).
- ASoC: cs35l41: Fix a bunch of trivial code formating/style issues (bsc#1203699).
- ASoC: cs35l41: Fix a shift-out-of-bounds warning found by UBSAN (bsc#1203699).
- ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t (bsc#1203699).
- ASoC: cs35l41: Fix link problem (bsc#1203699).
- ASoC: cs35l41: Fix max number of TX channels (bsc#1203699).
- ASoC: cs35l41: Fix undefined reference to core functions (bsc#1203699).
- ASoC: cs35l41: Fix use of an uninitialised variable (bsc#1203699).
- ASoC: cs35l41: Fixup the error messages (bsc#1203699).
- ASoC: cs35l41: Make cs35l41_remove() return void (bsc#1203699).
- ASoC: cs35l41: Move cs35l41 exit hibernate function into shared code (bsc#1203699).
- ASoC: cs35l41: Move cs35l41 fs errata into shared code (bsc#1203699).
- ASoC: cs35l41: Move cs35l41_otp_unpack to shared code (bsc#1203699).
- ASoC: cs35l41: Move cs35l41_set_cspl_mbox_cmd to shared code (bsc#1203699).
- ASoC: cs35l41: Move cs_dsp config struct into shared code (bsc#1203699).
- ASoC: cs35l41: Move power initializations to reg_sequence (bsc#1203699).
- ASoC: cs35l41: Read System Name from ACPI _SUB to identify firmware (bsc#1203699).
- ASoC: cs35l41: Remove incorrect comment (bsc#1203699).
- ASoC: cs35l41: Remove unnecessary param (bsc#1203699).
- ASoC: cs35l41: Set the max SPI speed for the whole device (bsc#1203699).
- ASoC: cs35l41: Support external boost (bsc#1203699).
- ASoC: cs35l41: Update handling of test key registers (bsc#1203699).
- ASoC: cs35l41: Use regmap_read_poll_timeout to wait for OTP boot (bsc#1203699).
- ASoC: cs42l42: Add control for audio slow-start switch (bsc#1203699).
- ASoC: cs42l42: Add warnings about DETECT_MODE and PLL_START (bsc#1203699).
- ASoC: cs42l42: Allow time for HP/ADC to power-up after enable (bsc#1203699).
- ASoC: cs42l42: Always enable TS_PLUG and TS_UNPLUG interrupts (bsc#1203699).
- ASoC: cs42l42: Change jack_detect_mutex to a lock of all IRQ handling (bsc#1203699).
- ASoC: cs42l42: Do not claim to support 192k (bsc#1203699).
- ASoC: cs42l42: Do not reconfigure the PLL while it is running (bsc#1203699).
- ASoC: cs42l42: Fix WARN in remove() if running without an interrupt (bsc#1203699).
- ASoC: cs42l42: Handle system suspend (bsc#1203699).
- ASoC: cs42l42: Implement Manual Type detection as fallback (bsc#1203699).
- ASoC: cs42l42: Mark OSC_SWITCH_STATUS register volatile (bsc#1203699).
- ASoC: cs42l42: Minor fix all errors reported by checkpatch.pl script (bsc#1203699).
- ASoC: cs42l42: Move CS42L42 register descriptions to general include (bsc#1203699).
- ASoC: cs42l42: Only report button state if there was a button interrupt (git-fixes).
- ASoC: cs42l42: Prevent NULL pointer deref in interrupt handler (bsc#1203699).
- ASoC: cs42l42: Remove redundant pll_divout member (bsc#1203699).
- ASoC: cs42l42: Remove redundant writes to DETECT_MODE (bsc#1203699).
- ASoC: cs42l42: Remove redundant writes to RS_PLUG/RS_UNPLUG masks (bsc#1203699).
- ASoC: cs42l42: Remove unused runtime_suspend/runtime_resume callbacks (bsc#1203699).
- ASoC: cs42l42: Report full jack status when plug is detected (bsc#1203699).
- ASoC: cs42l42: Report initial jack state (bsc#1203699).
- ASoC: cs42l42: Reset and power-down on remove() and failed probe() (bsc#1203699).
- ASoC: cs42l42: Set correct SRC MCLK (bsc#1203699).
- ASoC: cs42l42: Simplify reporting of jack unplug (bsc#1203699).
- ASoC: cs42l42: Use PLL for SCLK &gt; 12.288MHz (bsc#1203699).
- ASoC: cs42l42: Use two thresholds and increased wait time for manual type detection (bsc#1203699).
- ASoC: cs42l42: free_irq() before powering-down on probe() fail (bsc#1203699).
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (git-fixes).
- ASoC: dt-bindings: cs42l42: Convert binding to yaml (bsc#1203699).
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (git-fixes).
- ASoC: fsl-asoc-card: force cast the asrc_format type (git-fixes).
- ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (git-fixes).
- ASoC: fsl_asrc: force cast the asrc_format type (git-fixes).
- ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format (git-fixes).
- ASoC: fsl_sai: Remove unnecessary FIFO reset in ISR (git-fixes).
- ASoC: fsl_sai: use local device pointer (git-fixes).
- ASoC: imx-audmux: Silence a clang warning (git-fixes).
- ASoC: imx-card: Fix DSD/PDM mclk frequency (git-fixes).
- ASoC: imx-card: Fix refcount issue with of_node_put (git-fixes).
- ASoC: imx-card: use snd_pcm_format_t type for asrc_format (git-fixes).
- ASoC: max98373: Add checks for devm_kcalloc (git-fixes).
- ASoC: mchp-spdifrx: disable end of block interrupt on failures (git-fixes).
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (git-fixes).
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (git-fixes).
- ASoC: mt6359: Fix refcount leak bug (git-fixes).
- ASoC: mt6359: fix tests for platform_get_irq() failure (git-fixes).
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (git-fixes).
- ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (git-fixes).
- ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (git-fixes).
- ASoC: nau8824: Fix semaphore unbalance at error paths (git-fixes).
- ASoC: ops: Fix bounds check for _sx controls (git-fixes).
- ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).
- ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (git-fixes).
- ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (git-fixes).
- ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (git-fixes).
- ASoC: qcom: sm8250: add missing module owner (git-fixes).
- ASoC: rsnd: Add check for rsnd_mod_power_on (git-fixes).
- ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() (git-fixes).
- ASoC: rt1019: Fix the TDM settings (git-fixes).
- ASoC: samsung: Fix error handling in aries_audio_probe (git-fixes).
- ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables (git-fixes).
- ASoC: samsung: change neo1973_audio from a global to static (git-fixes).
- ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header (git-fixes).
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (git-fixes).
- ASoC: soc-pcm: Do not zero TDM masks in __soc_pcm_open() (git-fixes).
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (git-fixes).
- ASoC: stm32: dfsdm: manage cb buffers cleanup (git-fixes).
- ASoC: tas2764: Allow mono streams (git-fixes).
- ASoC: tas2764: Drop conflicting set_bias_level power setting (git-fixes).
- ASoC: tas2764: Fix mute/unmute (git-fixes).
- ASoC: tas2764: Fix set_tdm_slot in case of single slot (git-fixes).
- ASoC: tas2770: Allow mono streams (git-fixes).
- ASoC: tas2770: Drop conflicting set_bias_level power setting (git-fixes).
- ASoC: tas2770: Fix handling of mute/unmute (git-fixes).
- ASoC: tas2770: Fix set_tdm_slot in case of single slot (git-fixes).
- ASoC: tas2770: Reinit regcache on reset (git-fixes).
- ASoC: tas2770: Set correct FSYNC polarity (git-fixes).
- ASoC: wcd9335: fix order of Slimbus unprepare/disable (git-fixes).
- ASoC: wcd934x: fix order of Slimbus unprepare/disable (git-fixes).
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (git-fixes).
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (git-fixes).
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (git-fixes).
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (git-fixes).
- ASoC: wm_adsp: Add support for &quot;toggle&quot; preloaders (bsc#1203699).
- ASoC: wm_adsp: Add trace caps to speaker protection FW (bsc#1203699).
- ASoC: wm_adsp: Cancel ongoing work when removing controls (bsc#1203699).
- ASoC: wm_adsp: Compressed stream DSP memory structs should be __packed (bsc#1203699).
- ASoC: wm_adsp: Correct control read size when parsing compressed buffer (bsc#1203699).
- ASoC: wm_adsp: Expand firmware loading search options (bsc#1203699).
- ASoC: wm_adsp: Fix event for preloader (bsc#1203699).
- ASoC: wm_adsp: Handle optional legacy support (git-fixes).
- ASoC: wm_adsp: Introduce cs_dsp logging macros (bsc#1203699).
- ASoC: wm_adsp: Make compressed buffers optional (bsc#1203699).
- ASoC: wm_adsp: Minor clean and redundant code removal (bsc#1203699).
- ASoC: wm_adsp: Move check for control existence (bsc#1203699).
- ASoC: wm_adsp: Move check of dsp-&gt;running to better place (bsc#1203699).
- ASoC: wm_adsp: Move sys_config_size to wm_adsp (bsc#1203699).
- ASoC: wm_adsp: Pass firmware names as parameters when starting DSP core (bsc#1203699).
- ASoC: wm_adsp: Remove pointless string comparison (bsc#1203699).
- ASoC: wm_adsp: Remove the wmfw_add_ctl helper function (bsc#1203699).
- ASoC: wm_adsp: Remove use of snd_ctl_elem_type_t (bsc#1203699).
- ASoC: wm_adsp: Rename generic DSP support (bsc#1203699).
- ASoC: wm_adsp: Separate generic cs_dsp_coeff_ctl handling (bsc#1203699).
- ASoC: wm_adsp: Separate some ASoC and generic functions (bsc#1203699).
- ASoC: wm_adsp: Separate wm_adsp specifics in cs_dsp_client_ops (bsc#1203699).
- ASoC: wm_adsp: Split DSP power operations into helper functions (bsc#1203699).
- ASoC: wm_adsp: Split out struct cs_dsp from struct wm_adsp (bsc#1203699).
- ASoC: wm_adsp: Switch to using wm_coeff_read_ctrl for compressed buffers (bsc#1203699).
- ASoC: wm_adsp: move firmware loading to client (bsc#1203699).
- ASoC: wm_adsp: remove a repeated including (bsc#1203699).
- ASoC: wm_adsp: wm_adsp_control_add() error: uninitialized symbol 'ret' (bsc#1203699).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (git-fixes).
- Bluetooth: Add bt_skb_sendmmsg helper (git-fixes).
- Bluetooth: Add bt_skb_sendmsg helper (git-fixes).
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: Fix passing NULL to PTR_ERR (git-fixes).
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (git-fixes).
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (git-fixes).
- Bluetooth: L2CAP: Fix build errors in some archs (git-fixes).
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (git-fixes).
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (git-fixes).
- Bluetooth: L2CAP: Fix user-after-free (git-fixes).
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (git-fixes).
- Bluetooth: MGMT: Fixes build warnings with C=1 (git-fixes).
- Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (git-fixes).
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (git-fixes).
- Bluetooth: SCO: Fix sco_send_frame returning skb-&gt;len (git-fixes).
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (git-fixes).
- Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 (git-fixes).
- Bluetooth: btusb: Add support of IMC Networks PID 0x3568 (git-fixes).
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (git-fixes).
- Bluetooth: hci_bcm: Add BCM4349B1 variant (git-fixes).
- Bluetooth: hci_bcm: Add DT compatible for CYW55572 (git-fixes).
- Bluetooth: hci_core: Fix not handling link timeouts propertly (git-fixes).
- Bluetooth: hci_intel: Add check for platform_driver_register (git-fixes).
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (git-fixes).
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Decrease the number of SMB3 smbdirect client SGEs (bsc#1193629).
- Documentation: ACPI: EINJ: Fix obsolete example (git-fixes).
- Documentation: PM: Drop pme_interrupt reference (git-fixes).
- Documentation: add description for net.core.gro_normal_batch (git-fixes).
- Documentation: add description for net.sctp.ecn_enable (git-fixes).
- Documentation: add description for net.sctp.intl_enable (git-fixes).
- Documentation: add description for net.sctp.reconf_enable (git-fixes).
- Documentation: devres: add missing I2C helper (git-fixes).
- Documentation: dm writecache: Render status list as list (git-fixes).
- Documentation: fix sctp_wmem in ip-sysctl.rst (git-fixes).
- Documentation: fix udp_wmem_min in ip-sysctl.rst (git-fixes).
- Documentation: move watch_queue to core-api (git-fixes).
- Documentation: siphash: Fix typo in the name of offsetofend macro (git-fixes).
- Drivers: hv: Always reserve framebuffer region for Gen1 VMs (git-fixes).
- Drivers: hv: Fix syntax errors in comments (git-fixes).
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (git-fixes).
- Drivers: hv: fix repeated words in comments (git-fixes).
- Drivers: hv: remove duplicate word in a comment (git-fixes).
- Drivers: hv: vmbus: Accept hv_sock offers in isolated guests (git-fixes).
- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Do not wait for the ACPI device upon initialization (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: Fix kernel-doc (git-fixes).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017).
- Drivers: hv: vmbus: Optimize vmbus_on_event (git-fixes).
- Drivers: hv: vmbus: Release cpu lock in error case (git-fixes).
- Drivers: hv: vmbus: Use PCI_VENDOR_ID_MICROSOFT for better discoverability (git-fixes).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: fix typo in comment (git-fixes).
- EDAC/dmc520: Do not print an error for each unconfigured interrupt line (bsc#1190497).
- EDAC/ghes: Set the DIMM label unconditionally (bsc#1201768).
- Enable livepatching related packages on -RT (jsc#PED-1706)
- HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (git-fixes).
- HID: add Lenovo Yoga C630 battery quirk (git-fixes).
- HID: alps: Declare U1_UNICORN_LEGACY support (git-fixes).
- HID: amd_sfh: Add NULL check for hid device (git-fixes).
- HID: amd_sfh: Handle condition of &quot;no sensors&quot; (git-fixes).
- HID: asus: ROG NKey: Ignore portion of 0x5a report (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (git-fixes).
- HID: cp2112: prevent a buffer overflow in cp2112_xfer() (git-fixes).
- HID: hid-input: add Surface Go battery quirk (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- HID: hidraw: fix memory leak in hidraw_release() (git-fixes).
- HID: hyperv: fix possible memory leak in mousevsc_probe() (git-fixes).
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (git-fixes).
- HID: magicmouse: Do not set BTN_MOUSE on double report (git-fixes).
- HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() (git-fixes).
- HID: multitouch: Add memory barriers (git-fixes).
- HID: multitouch: new device class fix Lenovo X12 trackpad sticky (git-fixes).
- HID: playstation: add initial DualSense Edge controller support (git-fixes).
- HID: roccat: Fix use-after-free in roccat_read() (git-fixes).
- HID: saitek: add madcatz variant of MMO7 mouse device ID (git-fixes).
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (git-fies).
- HID: thrustmaster: Add sparco wheel and fix array length (git-fixes).
- HID: usbhid: Add ALWAYS_POLL quirk for some mice (git-fixes).
- HID: wacom: Do not register pad_input for touch switch (git-fixes).
- HID: wacom: Only report rotation for art pen (git-fixes).
- HSI: omap_ssi: Fix refcount leak in ssi_probe (git-fixes).
- HSI: omap_ssi_port: Fix dma_map_sg error check (git-fixes).
- Handle variable number of SGEs in client smbdirect send (bsc#1193629).
- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- IB/hfi1: Correctly move list in sc_disable() (git-fixes)
- IB/rdmavt: Add __init/__exit annotations to module init/exit funcs (git-fixes)
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (git-fixes)
- Input: exc3000 - fix return value check of wait_for_completion_timeout (git-fixes).
- Input: goodix - add compatible string for GT1158 (git-fixes).
- Input: goodix - add support for GT1158 (git-fixes).
- Input: goodix - try resetting the controller when no config is set (git-fixes).
- Input: gscps2 - check return value of ioremap() in gscps2_probe() (git-fixes).
- Input: i8042 - add TUXEDO devices to i8042 quirk tables (git-fies).
- Input: i8042 - add additional TUXEDO devices to i8042 quirk tables (git-fies).
- Input: i8042 - fix leaking of platform device on module removal (git-fixes).
- Input: i8042 - fix refount leak on sparc (git-fixes).
- Input: i8042 - merge quirk tables (git-fies).
- Input: i8042 - move __initconst to fix code styling warning (git-fies).
- Input: iforce - add support for Boeder Force Feedback Wheel (git-fixes).
- Input: iforce - invert valid length check when fetching device IDs (git-fixes).
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (git-fixes).
- Input: iqs62x-keys - drop unused device node references (git-fixes).
- Input: melfas_mip4 - fix return value check in mip4_probe() (git-fixes).
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (git-fixes).
- Input: rk805-pwrkey - fix module autoloading (git-fixes).
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address (git-fixes).
- Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (git-fixes).
- Input: soc_button_array - add use_low_level_irq module parameter (git-fixes).
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (git-fixes).
- Input: synaptics-rmi4 - fix firmware update operations with bootloader v8 (git-fixes).
- Input: xpad - add supported devices as contributed on github (git-fixes).
- Input: xpad - fix wireless 360 controller breaking after suspend (git-fixes).
- KABI: cgroup: Restore KABI of css_set (bsc#1201610).
- KEYS: asymmetric: enforce SM2 signature use pkey algo (git-fixes).
- KVM-x86-Avoid-theoretical-NULL-pointer-dereference-i.patch
- KVM-x86-Check-lapic_in_kernel-before-attempting-to-s.patch
- KVM-x86-Forbid-VMM-to-set-SYNIC-STIMER-MSRs-when-Syn.patch
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (git-fixes).
- KVM: MMU: shadow nested paging does not have PKU (git-fixes).
- KVM: Move wiping of the kvm-&gt;vcpus array to common code (git-fixes).
- KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init (bsc#1194869).
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB (bsc#1156395).
- KVM: PPC: Book3S HV: Remove kvmhv_p9_[set,restore]_lpcr declarations (bsc#1194869).
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() (bsc#1156395).
- KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator (bsc#1194869).
- KVM: PPC: Book3s HV: Remove unused function kvmppc_bad_interrupt (bsc#1194869).
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation (bsc#1156395).
- KVM: PPC: Use arch_get_random_seed_long instead of powernv variant (bsc#1156395).
- KVM: SEV: Mark nested locking of vcpu-&gt;lock (git-fixes).
- KVM: SVM: Create a separate mapping for the GHCB save area (jsc#SLE-19924, jsc#SLE-24814).
- KVM: SVM: Create a separate mapping for the SEV-ES save area (jsc#SLE-19924, jsc#SLE-24814).
- KVM: SVM: Define sev_features and VMPL field in the VMSA (jsc#SLE-19924, jsc#SLE-24814).
- KVM: SVM: Disable SEV-ES support if MMIO caching is disable (git-fixes).
- KVM: SVM: Do not BUG if userspace injects an interrupt with GIF=0 (git-fixes).
- KVM: SVM: Do not intercept #GP for SEV guests (git-fixes).
- KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (git-fixes).
- KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported (git-fixes).
- KVM: SVM: Unwind &quot;speculative&quot; RIP advancement if INTn injection &quot;fails&quot; (git-fixes).
- KVM: SVM: Update the SEV-ES save area mapping (jsc#SLE-19924, jsc#SLE-24814).
- KVM: SVM: adjust register allocation for __svm_vcpu_run() (git-fixes).
- KVM: SVM: fix panic on out-of-bounds guest IRQ (git-fixes).
- KVM: SVM: fix tsc scaling cache logic (bsc#1203263).
- KVM: SVM: move guest vmsave/vmload back to assembly (git-fixes).
- KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm (git-fixes).
- KVM: SVM: retrieve VMCB from assembly (git-fixes).
- KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (git-fixes).
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (git-fixes).
- KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (git-fixes).
- KVM: VMX: Inject #PF on ENCLS as &quot;emulated&quot; #PF (git-fixes).
- KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (git-fixes).
- KVM: VMX: Print VM-instruction error as unsigned (git-fixes).
- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (bsc#1205007).
- KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (git-fixes).
- KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled (git-fixes).
- KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock (git-fixes).
- KVM: X86: Fix when shadow_root_level=5 &amp;&amp; guest root_level&amp;lt;4 (git-fixes).
- KVM: X86: Use vcpu-&gt;arch.walk_mmu for kvm_mmu_invlpg() (git-fixes).
- KVM: X86: avoid uninitialized 'fault.async_page_fault' from fixed-up #PF (git-fixes).
- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 (bsc#1201442)
- KVM: fix avic_set_running for preemptable kernels (git-fixes).
- KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (git-fixes).
- KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (git-fixes).
- KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (git-fixes).
- KVM: nVMX: Ignore SIPI that arrives in L2 when vCPU is not in WFS (git-fixes).
- KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 (git-fixes).
- KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value (git-fixes).
- KVM: nVMX: Rename handle_vm{on,off}() to handle_vmx{on,off}() (git-fixes).
- KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP (git-fixes).
- KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (git-fixes).
- KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (git-fixes).
- KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required (git-fixes).
- KVM: nVMX: Unconditionally purge queued/injected events on nested &quot;exit&quot; (git-fixes).
- KVM: nVMX: do not use vcpu-&gt;arch.efer when checking host state on nested state load (git-fixes).
- KVM: s390: Add a routine for setting userspace CPU state (git-fixes jsc#PED-611).
- KVM: s390: Clarify SIGP orders versus STOP/RESTART (git-fixes).
- KVM: s390: Simplify SIGP Set Arch handling (git-fixes jsc#PED-611).
- KVM: s390: pv: do not allow userspace to set the clock under PV (git-fixes).
- KVM: s390: pv: do not present the ecall interrupt twice (bsc#1203229 LTC#199905).
- KVM: s390: pv: leak the topmost page table when destroy fails (git-fixes).
- KVM: s390x: fix SCK locking (git-fixes).
- KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE (git-fixes).
- KVM: selftests: Silence compiler warning in the kvm_page_table_test (git-fixes).
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (git-fixes).
- KVM: x86/mmu: Do not advance iterator after restart due to yielding (git-fixes).
- KVM: x86/mmu: Do not freak out if pml5_root is NULL on 4-level host (git-fixes).
- KVM: x86/mmu: Fix wrong/misleading comments in TDP MMU fast zap (git-fixes).
- KVM: x86/mmu: Move &quot;invalid&quot; check out of kvm_tdp_mmu_get_root() (git-fixes).
- KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (git-fixes).
- KVM: x86/mmu: WARN if old _or_ new SPTE is REMOVED in non-atomic path (git-fixes).
- KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (git-fixes).
- KVM: x86/mmu: fix memoryleak in kvm_mmu_vendor_module_init() (git-fixes).
- KVM: x86/mmu: include EFER.LMA in extended mmu role (git-fixes).
- KVM: x86/mmu: make apf token non-zero to fix bug (git-fixes).
- KVM: x86/pmu: Add pmc-&gt;intr to refactor kvm_perf_overflow{_intr}() (git-fixes).
- KVM: x86/pmu: Do not truncate the PerfEvtSeln MSR when creating a perf event (git-fixes).
- KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (git-fixes).
- KVM: x86/pmu: Fix available_event_types check for REF_CPU_CYCLES event (git-fixes).
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() (git-fixes).
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (git-fixes).
- KVM: x86/pmu: Use different raw event masks for AMD and Intel (git-fixes).
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (git-fixes).
- KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 (git-fixes).
- KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (git-fixes).
- KVM: x86: Always set kvm_run-&gt;if_flag (git-fixes).
- KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (git-fixes).
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (git-fixes).
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (git-fixes).
- KVM: x86: Forcibly leave nested virt when SMM state is toggled (git-fixes).
- KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (git-fixes).
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (git-fixes).
- KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (git-fixes).
- KVM: x86: Keep MSR_IA32_XSS unchanged for INIT (git-fixes).
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000001H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000006H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000008H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001AH (git-fixes).
- KVM: x86: Move lookup of indexed CPUID leafs to helper (jsc#SLE-19924, jsc#SLE-24814).
- KVM: x86: Register perf callbacks after calling vendor's hardware_setup() (git-fixes).
- KVM: x86: Report error when setting CPUID if Hyper-V allocation fails (git-fixes).
- KVM: x86: Retry page fault if MMU reload is pending and root has no sp (bsc#1205744).
- KVM: x86: SVM: do not passthrough SMAP/SMEP/PKE bits in !NPT &amp;&amp; !gCR0.PG case (git-fixes).
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (git-fixes).
- KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (git-fixes).
- KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time (git-fixes).
- KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (git-fixes).
- KVM: x86: Update vPMCs when retiring branch instructions (git-fixes).
- KVM: x86: Update vPMCs when retiring instructions (git-fixes).
- KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (git-fixes).
- KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (git-fixes).
- KVM: x86: avoid loading a vCPU after .vm_destroy was called (git-fixes).
- KVM: x86: check PIR even for vCPUs with disabled APICv (git-fixes).
- KVM: x86: do not report preemption if the steal time cache is stale (git-fixes).
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (git-fixes).
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (git-fixes).
- KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes).
- KVM: x86: emulator: update the emulation mode after rsm (git-fixes).
- KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb() (git-fixes).
- KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi() (git-fixes).
- KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall (git-fixes).
- KVM: x86: ignore APICv if LAPIC is not enabled (git-fixes).
- KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a result of RSM (git-fixes).
- KVM: x86: nSVM: fix potential NULL derefernce on nested migration (git-fixes).
- KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state (git-fixes).
- KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all (git-fixes).
- KVM: x86: revalidate steal time cache if MSR value changes (git-fixes).
- KVM: x86: use a separate asm-offsets.c file (git-fixes).
- MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- NFC: nci: fix memory leak in nci_rx_data_packet() (git-fixes).
- NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (git-fixes).
- NFS: Fix another fsync() issue after a server reboot (git-fixes).
- NFS: LOOKUP_DIRECTORY is also ok with symlinks (git-fixes).
- NFSD: Clamp WRITE offsets (git-fixes).
- NFSD: Clean up the show_nf_flags() macro (git-fixes).
- NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (git-fixes).
- NFSD: Fix ia_size underflow (git-fixes).
- NFSD: Fix offset type in I/O trace points (git-fixes).
- NFSD: Fix possible sleep during nfsd4_release_lockowner() (git-fixes).
- NFSD: prevent integer overflow on 32 bit systems (git-fixes).
- NFSD: prevent underflow in nfssvc_decode_writeargs() (git-fixes).
- NFSD: restore EINVAL error translation in nfsd_commit() (git-fixes).
- NFSv4.1: Do not decrease the value of seq_nr_highest_sent (git-fixes).
- NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly (git-fixes).
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES (git-fixes).
- NFSv4.2 fix problems with __nfs42_ssc_open (git-fixes).
- NFSv4.2: Update mode bits after ALLOCATE and DEALLOCATE (git-fixes).
- NFSv4: Fix races in the legacy idmapper upcall (git-fixes).
- NFSv4: Fixes for nfs4_inode_return_delegation() (git-fixes).
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (git-fixes).
- NTB: ntb_tool: uninitialized heap data in tool_fn_write() (git-fixes).
- PCI/ACPI: Guard ARM64-specific mcfg_quirks (git-fixes).
- PCI/AER: Iterate over error counters instead of error strings (git-fixes).
- PCI/ASPM: Correct LTR_L1.2_THRESHOLD computation (git-fixes).
- PCI/ASPM: Ignore L1 PM Substates if device lacks capability (git-fixes).
- PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited (jsc#PED-387).
- PCI/portdrv: Do not disable AER reporting in get_port_device_capability() (git-fixes).
- PCI: Add ACS quirk for Broadcom BCM5750x NICs (git-fixes).
- PCI: Correct misspelled words (git-fixes).
- PCI: Disable MSI for Tegra234 Root Ports (git-fixes).
- PCI: Fix used_buses calculation in pci_scan_child_bus_extend() (git-fixes).
- PCI: Move PCI_VENDOR_ID_MICROSOFT/PCI_DEVICE_ID_HYPERV_VIDEO definitions to pci_ids.h (git-fixes).
- PCI: Prefer 'unsigned int' over bare 'unsigned' (git-fixes).
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (git-fixes).
- PCI: aardvark: Fix reporting Slot capabilities on emulated bridge (git-fixes).
- PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (git-fixes).
- PCI: dwc: Always enable CDM check if &quot;snps,enable-cdm-check&quot; exists (git-fixes).
- PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (git-fixes).
- PCI: dwc: Disable outbound windows only for controllers using iATU (git-fixes).
- PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address (git-fixes).
- PCI: dwc: Stop link on host_init errors and de-initialization (git-fixes).
- PCI: endpoint: Do not stop controller when unbinding endpoint function (git-fixes).
- PCI: hv: Add validation for untrusted Hyper-V values (git-fixes).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (git-fixes).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- PCI: mediatek-gen3: Change driver name to mtk-pcie-gen3 (git-fixes).
- PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() (git-fixes).
- PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (git-fixes).
- PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (git-fixes).
- PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() (git-fixes).
- PCI: tegra194: Fix Root Port interrupt handling (git-fixes).
- PCI: tegra194: Fix link up retry sequence (git-fixes).
- PM: domains: Ensure genpd_debugfs_dir exists before remove (git-fixes).
- PM: domains: Fix handling of unavailable/disabled idle states (git-fixes).
- PM: hibernate: Allow hybrid sleep to work with s2idle (git-fixes).
- PM: hibernate: defer device probing when resuming from hibernation (git-fixes).
- RDMA/cm: Fix memory leak in ib_cm_insert_listen (git-fixes)
- RDMA/cm: Use SLID in the work completion as the DLID in responder side (git-fixes)
- RDMA/cma: Fix arguments order in net device validation (git-fixes)
- RDMA/cma: Use output interface for net_dev check (git-fixes)
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (git-fixes)
- RDMA/hfi1: Fix potential integer multiplication overflow errors (git-fixes)
- RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes)
- RDMA/hfi1: Prevent use of lock before it is initialized (git-fixes)
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (git-fixes)
- RDMA/hns: Add the detection for CMDQ status in the device initialization process (git-fixes)
- RDMA/hns: Correct the type of variables participating in the shift operation (git-fixes)
- RDMA/hns: Disable local invalidate operation (git-fixes)
- RDMA/hns: Fix incorrect clearing of interrupt status register (git-fixes)
- RDMA/hns: Fix supported page size (git-fixes)
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift (git-fixes)
- RDMA/hns: Remove magic number (git-fixes)
- RDMA/hns: Remove the num_cqc_timer variable (git-fixes)
- RDMA/hns: Remove the num_qpc_timer variable (git-fixes)
- RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP (git-fixes)
- RDMA/hns: Replace tab with space in the right-side comments (git-fixes)
- RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (git-fixes)
- RDMA/irdma: Add support for address handle re-use (git-fixes)
- RDMA/irdma: Align AE id codes to correct flush code and event (git-fixes)
- RDMA/irdma: Do not advertise 1GB page size for x722 (git-fixes)
- RDMA/irdma: Fix VLAN connection with wildcard address (git-fixes)
- RDMA/irdma: Fix a window for use-after-free (git-fixes)
- RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (git-fixes)
- RDMA/irdma: Fix setting of QP context err_rq_idx_valid field (git-fixes)
- RDMA/irdma: Fix sleep from invalid context BUG (git-fixes)
- RDMA/irdma: Move union irdma_sockaddr to header file (git-fixes)
- RDMA/irdma: Remove the unnecessary variable saddr (git-fixes)
- RDMA/irdma: Report RNR NAK generation in device caps (git-fixes)
- RDMA/irdma: Report the correct max cqes from query device (git-fixes)
- RDMA/irdma: Return correct WC error for bind operation failure (git-fixes)
- RDMA/irdma: Return error on MR deregister CQP failure (git-fixes)
- RDMA/irdma: Use net_type to check network type (git-fixes)
- RDMA/irdma: Use s/g array in post send only when its valid (git-fixes)
- RDMA/irdma: Validate udata inlen and outlen (git-fixes)
- RDMA/mlx5: Add missing check for return value in get namespace flow (git-fixes)
- RDMA/mlx5: Do not compare mkey tags in DEVX indirect mkey (git-fixes)
- RDMA/mlx5: Set local port to one when accessing counters (git-fixes)
- RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (git-fixes)
- RDMA/qedr: Fix reporting QP timeout attribute (git-fixes)
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (git-fixes)
- RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (git-fixes)
- RDMA/rtrs-srv: Fix modinfo output for stringify (git-fixes)
- RDMA/rxe: Fix &quot;kernel NULL pointer dereference&quot; error (git-fixes)
- RDMA/rxe: Fix deadlock in rxe_do_local_ops() (git-fixes)
- RDMA/rxe: Fix error unwind in rxe_create_qp() (git-fixes)
- RDMA/rxe: Fix mw bind to allow any consumer key portion (git-fixes)
- RDMA/rxe: Fix resize_finish() in rxe_queue.c (git-fixes)
- RDMA/rxe: Fix rnr retry behavior (git-fixes)
- RDMA/rxe: Fix the error caused by qp-&gt;sk (git-fixes)
- RDMA/rxe: For invalidate compare according to set keys in mr (git-fixes)
- RDMA/rxe: Generate a completion for unsupported/invalid opcode (git-fixes)
- RDMA/rxe: Limit the number of calls to each tasklet (git-fixes)
- RDMA/rxe: Remove useless pkt parameters (git-fixes)
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (git-fixes)
- RDMA/siw: Fix QP destroy to wait for all references dropped. (git-fixes)
- RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (git-fixes)
- RDMA/siw: Pass a pointer to virt_to_page() (git-fixes)
- RDMA/srp: Fix srp_abort() (git-fixes)
- RDMA/srp: Handle dev_set_name() failure (git-fixes)
- RDMA/srp: Rework the srp_add_port() error path (git-fixes)
- RDMA/srp: Set scmnd-&gt;result only when scmnd is not NULL (git-fixes)
- RDMA/srp: Support more than 255 rdma ports (git-fixes)
- RDMA/srp: Use the attribute group mechanism for sysfs attributes (git-fixes)
- RDMA/srpt: Duplicate port name members (git-fixes)
- RDMA/srpt: Fix a use-after-free (git-fixes)
- RDMA/srpt: Introduce a reference count in struct srpt_device (git-fixes)
- RDMA/usnic: fix set-but-not-unused variable 'flags' warning (git-fixes)
- RDMA: remove useless condition in siw_create_cq() (git-fixes)
- Reduce client smbdirect max receive segment size (bsc#1193629).
- Refresh nvme in-band authentication patches (bsc#1199086)
- Refresh patches.suse/iommu-vt-d-Acquiring-lock-in-domain-ID-allocation-helpers Fix spin deadlock in intel_iommu (bsc#1203505)
- Refresh patches.suse/iwlwifi-module-firmware-ucode-fix.patch (bsc#1202131) Now iwlwifi queries *-72.ucode, but again, this is non-existing version. Correct to the existing *-71.ucode
- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch to upstream version.
- Remove doubly applied amdgpu patches
- Replace the in-house patch by the above upstream version, patches.suse/md-raid0-fix-buffer-overflow-at-debug-print.patch.
- Revert &quot;ALSA: hda: cs35l41: Allow compilation test on non-ACPI configurations&quot; (bsc#1203699).
- Revert &quot;ALSA: usb-audio: Split endpoint setups for hw_params and prepare&quot; (git-fixes).
- Revert &quot;SUNRPC: Remove unreachable error condition&quot; (git-fixes).
- Revert &quot;arm64: Mitigate MTE issues with str{n}cmp()&quot; (git-fixes)
- Revert &quot;clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops&quot; (git-fixes).
- Revert &quot;constraints: increase disk space for all architectures&quot; (bsc#1203693). This reverts commit 43a9011f904bc7328d38dc340f5e71aecb6b19ca.
- Revert &quot;crypto: qat - reduce size of mapped region&quot; (git-fixes).
- Revert &quot;drivers/video/backlight/platform_lcd.c: add support for device tree based probe&quot; (git-fixes).
- Revert &quot;drm/amdgpu: use dirty framebuffer helper&quot; (git-fixes).
- Revert &quot;drm/i915: Hold reference to intel_context over life of i915_request&quot; (git-fixes).
- Revert &quot;drm/udl: Kill pending URBs at suspend and disconnect&quot; (bsc#1195917).
- Revert &quot;drm/vc4: hvs: Reset muxes at probe time (git-fixes).&quot; (bsc#1202341) This reverts commit 303122d0f2160411fa1068220bc59849d848550d. The reverted change clears hardware state on the RPi4, which leaves the screen blank. Without it, the display works correctly.
- Revert &quot;drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time&quot; (git-fixes).
- Revert &quot;firmware: arm_scmi: Add clock management to the SCMI power domain&quot; (git-fixes).
- Revert &quot;ice: Hide bus-info in ethtool for PRs in switchdev mode&quot; (git-fixes).
- Revert &quot;ipv6: Honor all IPv6 PIO Valid Lifetime values&quot; (bsc#1202989).
- Revert &quot;net: phy: meson-gxl: improve link-up behavior&quot; (git-fixes).
- Revert &quot;net: usb: ax88179_178a needs FLAG_SEND_ZLP&quot; (git-fixes).
- Revert &quot;pNFS: nfs3_set_ds_client should set NFS_CS_NOPING&quot; (git-fixes).
- Revert &quot;powerpc/rtas: Implement reentrant rtas call&quot; (bsc#1203664 ltc#199236).
- Revert &quot;scripts/mod/modpost.c: permit '.cranges' secton for sh64 architecture.&quot; (git-fixes).
- Revert &quot;tty: n_gsm: avoid call of sleeping functions from atomic context&quot; (git-fixes).
- Revert &quot;tty: n_gsm: replace kicktimer with delayed_work&quot; (git-fixes).
- Revert &quot;usb: add quirks for Lenovo OneLink+ Dock&quot; (git-fixes).
- Revert &quot;usb: dwc3: disable USB core PHY management&quot; (git-fixes).
- Revert &quot;usb: gadget: udc-xilinx: replace memcpy with memcpy_toio&quot; (git-fixes).
- Revert &quot;usb: storage: Add quirk for Samsung Fit flash&quot; (git-fixes).
- Revert &quot;workqueue: remove unused cancel_work()&quot; (bsc#1204933).
- Revert &quot;x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV&quot; (bsc#1190497).
- Revert selftest patches that have been reverted in stable-5.15.y
- SCSI: scsi_probe_lun: retry INQUIRY after timeout (bsc#1189297).
- SMB3: fix lease break timeout when multiple deferred close handles for the same file (bsc#1193629).
- SUNRPC: Do not call connect() more than once on a TCP socket (git-fixes).
- SUNRPC: Do not leak sockets in xs_local_connect() (git-fixes).
- SUNRPC: Fix NFSD's request deferral on RDMA transports (git-fixes).
- SUNRPC: Fix READ_PLUS crasher (git-fixes).
- SUNRPC: Fix xdr_encode_bool() (git-fixes).
- SUNRPC: Prevent immediate close+reconnect (git-fixes).
- SUNRPC: RPC level errors should set task-&gt;tk_rpc_status (git-fixes).
- SUNRPC: Reinitialise the backchannel request buffers before reuse (git-fixes).
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin (git-fixes).
- USB: Follow-up to SPDX GPL-2.0+ identifiers addition - remove now useless comments (git-fixes).
- USB: Follow-up to SPDX identifiers addition - remove now useless comments (git-fixes).
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (git-fixes).
- USB: bcma: Make GPIO explicitly optional (git-fixes).
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (git-fixes).
- USB: core: Fix RST error in hub.c (git-fixes).
- USB: core: Prevent nested device-reset calls (git-fixes).
- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- USB: serial: ch341: fix disabled rx timer on older devices (git-fixes).
- USB: serial: ch341: fix lost character on LCR updates (git-fixes).
- USB: serial: console: move mutex_unlock() before usb_serial_put() (git-fixes).
- USB: serial: cp210x: add Decagon UCA device id (git-fixes).
- USB: serial: fix tty-port initialized comments (git-fixes).
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (git-fixes).
- USB: serial: ftdi_sio: fix 300 bps rate for SIO (git-fixes).
- USB: serial: option: add Fibocom FM160 0x0111 composition (git-fixes).
- USB: serial: option: add Quectel BG95 0x0203 composition (git-fixes).
- USB: serial: option: add Quectel EM060K modem (git-fixes).
- USB: serial: option: add Quectel RM520N (git-fixes).
- USB: serial: option: add Sierra Wireless EM9191 (git-fixes).
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (git-fixes).
- USB: serial: option: add support for OPPO R11 diag port (git-fixes).
- USB: serial: option: add u-blox LARA-L6 modem (git-fixes).
- USB: serial: option: add u-blox LARA-R6 00B modem (git-fixes).
- USB: serial: option: remove old LARA-R6 PID (git-fixes).
- USB: serial: qcserial: add new usb-id for Dell branded EM7455 (git-fixes).
- XArray: Update the LRU list in xas_split() (git-fixes).
- add another bug reference to some hyperv changes (bsc#1205617).
- apparmor: Fix failed mount permission check error message (git-fixes).
- apparmor: Fix memleak in aa_simple_write_to_buffer() (git-fixes).
- apparmor: fix aa_label_asxprint return check (git-fixes).
- apparmor: fix absroot causing audited secids to begin with = (git-fixes).
- apparmor: fix overlapping attachment computation (git-fixes).
- apparmor: fix quiet_denied for file rules (git-fixes).
- apparmor: fix reference count leak in aa_pivotroot() (git-fixes).
- apparmor: fix setting unconfined mode on a loaded profile (git-fixes).
- arcnet: fix potential memory leak in com20020_probe() (git-fixes).
- arm64/bti: Disable in kernel BTI when cross section thunks are broken (git-fixes)
- arm64/mm: Consolidate TCR_EL1 fields (git-fixes).
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- arm64: Add AMPERE1 to the Spectre-BHB affected list (git-fixes).
- arm64: Do not forget syscall when starting a new thread (git-fixes).
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (git-fixes)
- arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (git-fixes).
- arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (git-fixes).
- arm64: dts: allwinner: a64: orangepi-win: Fix LED node name (git-fixes).
- arm64: dts: imx8: correct clock order (git-fixes).
- arm64: dts: imx8mm: Fix NAND controller size-cells (git-fixes).
- arm64: dts: imx8mn: Fix NAND controller size-cells (git-fixes).
- arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (git-fixes).
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply (git-fixes).
- arm64: dts: juno: Add thermal critical trip points (git-fixes).
- arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: mt7622: fix BPI-R64 WPS button (git-fixes).
- arm64: dts: mt8192: Fix idle-states entry-method (git-fixes).
- arm64: dts: mt8192: Fix idle-states nodes naming scheme (git-fixes).
- arm64: dts: qcom: ipq8074: fix NAND node name (git-fixes).
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (git-fixes).
- arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment (git-fixes).
- arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sc7280: Cleanup the lpasscc node (git-fixes).
- arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells (git-fixes).
- arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8350: fix UFS PHY serdes size (git-fixes).
- arm64: dts: renesas: Fix thermal-sensors on single-zone sensors (git-fixes).
- arm64: dts: renesas: beacon: Fix regulator node names (git-fixes).
- arm64: dts: rockchip: Fix typo in lisense text for PX30.Core (git-fixes).
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (git-fixes).
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (git-fixes).
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (git-fixes).
- arm64: dts: rockchip: add enable-strobe-pulldown to emmc phy on nanopi4 (git-fixes).
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (git-fixes).
- arm64: dts: ti: k3-j7200: fix main pinmux range (git-fixes).
- arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (git-fixes).
- arm64: efi: Fix handling of misaligned runtime regions and drop warning (git-fixes).
- arm64: entry: avoid kprobe recursion (git-fixes).
- arm64: errata: Add Cortex-A510 to the repeat tlbi list (git-fixes) Enable this errata fix configuration option to arm64/default.
- arm64: errata: Add Cortex-A55 to the repeat tlbi list (git-fixes). Enable CONFIG_ARM64_ERRATUM_2441007, too
- arm64: errata: Remove AES hwcap for COMPAT tasks (git-fixes) Enable CONFIG_ARM64_ERRATUM_1742098 in arm64/default
- arm64: fix oops in concurrently setting insn_emulation sysctls (git-fixes).
- arm64: fix rodata=full (git-fixes).
- arm64: fix rodata=full again (git-fixes)
- arm64: ftrace: fix module PLTs with mcount (git-fixes).
- arm64: kasan: Revert &quot;arm64: mte: reset the page tag in page-&gt;flags&quot; (git-fixes).
- arm64: kexec_file: use more system keyrings to verify kernel image signature (bsc#1196444).
- arm64: lib: Import latest version of Arm Optimized Routines' strcmp (git-fixes)
- arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (git-fixes).
- arm64: select TRACE_IRQFLAGS_NMI_SUPPORT (git-fixes)
- arm64: set UXN on swapper page tables (git-fixes).
- arm64: tegra: Fix SDMMC1 CD on P2888 (git-fixes).
- arm64: tegra: Fixup SYSRAM references (git-fixes).
- arm64: tegra: Mark BPMP channels as no-memory-wc (git-fixes).
- arm64: tegra: Update Tegra234 BPMP channel addresses (git-fixes).
- arm64: topology: fix possible overflow in amu_fie_setup() (git-fixes).
- arm64: topology: move store_cpu_topology() to shared code (git-fixes).
- arm_pmu: Validate single/group leader events (git-fixes).
- asm-generic: remove a broken and needless ifdef conditional (git-fixes).
- asm-generic: sections: refactor memory_intersects (git-fixes).
- ata: ahci-imx: Fix MODULE_ALIAS (git-fixes).
- ata: fix ata_id_has_devslp() (git-fixes).
- ata: fix ata_id_has_dipm() (git-fixes).
- ata: fix ata_id_has_ncq_autosense() (git-fixes).
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (git-fixes).
- ata: libahci_platform: Sanity check the DT child nodes number (git-fixes).
- ata: libata-core: do not issue non-internal commands once EH is pending (git-fixes).
- ata: libata-eh: Add missing command name (git-fixes).
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (git-fixes).
- ata: libata-scsi: simplify __ata_scsi_queuecmd() (git-fixes).
- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tdev_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tlink_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tport_add() (git-fixes).
- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- ath10k: do not enforce interrupt trigger type (git-fixes).
- ath11k: Fix incorrect debug_mask mappings (git-fixes).
- ath11k: fix netdev open race (git-fixes).
- atm: idt77252: fix use-after-free bugs caused by tst_timer (git-fixes).
- audit: fix potential double free on error path from fsnotify_add_inode_mark (git-fixes).
- audit: fix undefined behavior in bit shift for AUDIT_BIT (git-fixes).
- ax25: Fix ax25 session cleanup problems (git-fixes).
- batman-adv: Fix hang up with small MTU hard-interface (git-fixes).
- bitfield.h: Fix &quot;type of reg too small for mask&quot; test (git-fixes).
- blk-cgroup: fix missing put device in error path from blkg_conf_pref() (git-fixes).
- blk-mq: Properly init requests from blk_mq_alloc_request_hctx() (git-fixes).
- blk-mq: do not create hctx debugfs dir until q-&gt;debugfs_dir is created (git-fixes).
- blk-mq: fix io hung due to missing commit_rqs (git-fixes).
- blk-wbt: call rq_qos_add() after wb_normal is initialized (git-fixes).
- blktrace: Trace remapped requests correctly (git-fixes).
- block/rnbd-srv: Set keep_id to true after mutex_trylock (git-fixes).
- block: Do not reread partition table on exclusively open device (bsc#1190969).
- block: Fix fsync always failed if once failed (bsc#1202779).
- block: Fix wrong offset in bio_truncate() (bsc#1202780).
- block: add bio_start_io_acct_time() to control start_time (git-fixes).
- block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (git-fixes).
- block: drop unused includes in &amp;lt;linux/genhd.h&gt; (git-fixes).
- block: fix rq-qos breakage from skipping rq_qos_done_bio() (bsc#1202781).
- block: only mark bio as tracked if it really is tracked (bsc#1202782).
- bnx2x: Invalidate fastpath HSI version for VFs (git-fixes).
- bnx2x: Utilize firmware 7.13.21.0 (git-fixes).
- bnx2x: fix built-in kernel driver load failure (git-fixes).
- bnx2x: fix driver load from initrd (git-fixes).
- bnxt_en: Fix bnxt_refclk_read() (git-fixes).
- bnxt_en: Fix bnxt_reinit_after_abort() code path (git-fixes).
- bnxt_en: fix livepatch query (git-fixes).
- bnxt_en: reclaim max resources if sriov enable fails (git-fixes).
- bonding: 802.3ad: fix no transmission of LACPDUs (git-fixes).
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers (git-fixes).
- bridge: switchdev: Fix memory leaks when changing VLAN protocol (git-fixes).
- btrfs-fix-deadlock-between-quota-enable-and-other-qu.patch: (bsc#1205521).
- btrfs: check if root is readonly while setting security xattr (bsc#1206147).
- btrfs: do not allow compression on nodatacow files (bsc#1206149).
- btrfs: export a helper for compression hard check (bsc#1206149).
- btrfs: fix processing of delayed data refs during backref walking (bsc#1206056).
- btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057).
- btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (bsc#1203360).
- btrfs: fix space cache corruption and potential double allocations (bsc#1203361).
- btrfs: prevent subvol with swapfile from being deleted (bsc#1206035).
- btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA (git-fixes).
- btrfs: send: always use the rbtree based inode ref management infrastructure (bsc#1206036).
- btrfs: send: fix failures when processing inodes with no links (bsc#1206036).
- btrfs: send: fix send failure of a subcase of orphan inodes (bsc#1206036).
- btrfs: send: fix sending link commands for existing file paths (bsc#1206036).
- btrfs: send: introduce recorded_ref_alloc and recorded_ref_free (bsc#1206036).
- btrfs: send: refactor arguments of get_inode_info() (bsc#1206036).
- btrfs: send: remove unused found_type parameter to lookup_dir_item_inode() (bsc#1206036).
- btrfs: send: remove unused type parameter to iterate_inode_ref_t (bsc#1206036).
- btrfs: send: use boolean types for current inode status (bsc#1206036).
- bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (git-fixes).
- bus: sunxi-rsb: Remove the shutdown callback (git-fixes).
- bus: sunxi-rsb: Support atomic transfers (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- can: Break loopback loop on loopback documentation (git-fixes).
- can: af_can: fix NULL pointer dereference in can_rx_register() (git-fixes).
- can: bcm: check the result of can_send() in bcm_can_tx() (git-fixes).
- can: cc770: cc770_isa_probe(): add missing free_cc770dev() (git-fixes).
- can: do not increase rx statistics when generating a CAN rx error message frame (git-fixes).
- can: do not increase rx_bytes statistics for RTR frames (git-fixes).
- can: ems_usb: fix clang's -Wunaligned-access warning (git-fixes).
- can: error: specify the values of data[5..7] of CAN error frames (git-fixes).
- can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (git-fixes).
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition (git-fixes).
- can: hi311x: do not report txerr and rxerr during bus-off (git-fixes).
- can: j1939: j1939_send_one(): fix missing CAN header initialization (git-fixes).
- can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (git-fixes).
- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (git-fixes).
- can: kvaser_usb: Fix possible completions during init_completion (git-fixes).
- can: kvaser_usb: Fix use of uninitialized completion (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (git-fixes).
- can: kvaser_usb: make use of units.h in assignment of frequency (git-fixes).
- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (git-fixes).
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (git-fixes).
- can: kvaser_usb_leaf: Fix CAN state after restart (git-fixes).
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart (git-fixes).
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (git-fixes).
- can: m_can: Add check for devm_clk_get (git-fixes).
- can: m_can: fix typo prescalar -&gt; prescaler (git-fixes).
- can: m_can: is_lec_err(): clean up LEC error handling (git-fixes).
- can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (git-fixes).
- can: mcp251x: Fix race condition on receive interrupt (git-fixes).
- can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (git-fixes).
- can: mcp251xfd: mcp251xfd_dump(): fix comment (git-fixes).
- can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix endianness conversion (git-fixes).
- can: mcp251xfd: mcp251xfd_register_get_dev_id(): use correct length to read dev_id (git-fixes).
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (git-fixes).
- can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback (git-fixes).
- can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback (git-fixes).
- can: pch_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: pch_can: pch_can_error(): initialize errc before using it (git-fixes).
- can: rcar_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: rx-offload: can_rx_offload_init_queue(): fix typo (git-fixes).
- can: sja1000: do not report txerr and rxerr during bus-off (git-fixes).
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (git-fixes).
- can: sun4i_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: usb_8dev: do not report txerr and rxerr during bus-off (git-fixes).
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (git-fixes).
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (git-fixes).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: avoid putting the realm twice when decoding snaps fails (bsc#1206051).
- ceph: do not leak snap_rwsem in handle_cap_grant (bsc#1202823).
- ceph: do not truncate file in atomic_open (bsc#1202824).
- ceph: do not update snapshot context when there is no new snapshot (bsc#1206047).
- ceph: fix inode reference leakage in ceph_get_snapdir() (bsc#1206048).
- ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (bsc#1206049).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of rreq-&gt;mapping-&gt;host (bsc#1206046).
- ceph: use correct index when encoding client supported features (bsc#1202822).
- cfg80211/mac80211: assume CHECKSUM_COMPLETE includes SNAP (bsc#1202131).
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (bsc#1204753).
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (bsc#1196869).
- cgroup: Fix race condition at rebind_subsystems() (bsc#1203902).
- cgroup: Fix threadgroup_rwsem &amp;lt;-&gt; cpus_read_lock() deadlock (bsc#1196869).
- cgroup: Use separate src/dst nodes when preloading css_sets for migration (bsc#1201610).
- cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (bsc#1203906).
- char: tpm: Protect tpm_pm_suspend with locks (git-fixes).
- cifs: Add constructor/destructors for tcon-&gt;cfid (bsc#1193629).
- cifs: Add helper function to check smb1+ server (bsc#1193629).
- cifs: Do not access tcon-&gt;cfids-&gt;cfid directly from is_path_accessible (bsc#1193629).
- cifs: Do not use tcon-&gt;cfid directly, use the cfid we get from open_cached_dir (bsc#1193629).
- cifs: Fix connections leak when tlink setup failed (git-fixes).
- cifs: Fix memory leak on the deferred close (bsc#1193629).
- cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1193629).
- cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1193629).
- cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1193629).
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (bsc#1193629).
- cifs: Fix wrong return value checking when GETFLAGS (git-fixes).
- cifs: Fix xid leak in cifs_copy_file_range() (bsc#1193629).
- cifs: Fix xid leak in cifs_create() (bsc#1193629).
- cifs: Fix xid leak in cifs_flock() (bsc#1193629).
- cifs: Fix xid leak in cifs_get_file_info_unix() (bsc#1193629).
- cifs: Fix xid leak in cifs_ses_add_channel() (bsc#1193629).
- cifs: Make tcon contain a wrapper structure cached_fids instead of cached_fid (bsc#1193629).
- cifs: Move cached-dir functions into a separate file (bsc#1193629).
- cifs: Replace a couple of one-element arrays with flexible-array members (bsc#1193629).
- cifs: Use after free in debug code (git-fixes).
- cifs: Use help macro to get the header preamble size (bsc#1193629).
- cifs: Use help macro to get the mid header size (bsc#1193629).
- cifs: add check for returning value of SMB2_close_init (git-fixes).
- cifs: add check for returning value of SMB2_set_info_init (git-fixes).
- cifs: add missing spinlock around tcon refcount (bsc#1193629).
- cifs: alloc_mid function should be marked as static (bsc#1193629).
- cifs: always initialize struct msghdr smb_msg completely (bsc#1193629).
- cifs: always iterate smb sessions using primary channel (bsc#1193629).
- cifs: avoid deadlocks while updating iface (bsc#1193629).
- cifs: avoid unnecessary iteration of tcp sessions (bsc#1193629).
- cifs: avoid use of global locks for high contention data (bsc#1193629).
- cifs: cache the dirents for entries in a cached directory (bsc#1193629).
- cifs: change iface_list from array to sorted linked list (bsc#1193629).
- cifs: destage dirty pages before re-reading them for cache=none (bsc#1193629).
- cifs: do not send down the destination address to sendmsg for a SOCK_STREAM (bsc#1193629).
- cifs: drop the lease for cached directories on rmdir or rename (bsc#1193629).
- cifs: during reconnect, update interface if necessary (bsc#1193629).
- cifs: enable caching of directories for which a lease is held (bsc#1193629).
- cifs: find and use the dentry for cached non-root directories also (bsc#1193629).
- cifs: fix double-fault crash during ntlmssp (bsc#1193629).
- cifs: fix lock length calculation (bsc#1193629).
- cifs: fix memory leaks in session setup (bsc#1193629).
- cifs: fix missing unlock in cifs_file_copychunk_range() (git-fixes).
- cifs: fix race condition with delayed threads (bsc#1193629).
- cifs: fix reconnect on smb3 mount types (bsc#1201427).
- cifs: fix skipping to incorrect offset in emit_cached_dirents (bsc#1193629).
- cifs: fix small mempool leak in SMB2_negotiate() (bsc#1193629).
- cifs: fix static checker warning (bsc#1193629).
- cifs: fix uninitialised var in smb2_compound_op() (bsc#1193629).
- cifs: fix use-after-free caused by invalid pointer `hostname` (bsc#1193629).
- cifs: fix use-after-free on the link name (bsc#1193629).
- cifs: fix wrong unlock before return from cifs_tree_connect() (bsc#1193629).
- cifs: improve handlecaching (bsc#1193629).
- cifs: improve symlink handling for smb2+ (bsc#1193629).
- cifs: lease key is uninitialized in smb1 paths (bsc#1193629).
- cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1193629).
- cifs: list_for_each() -&gt; list_for_each_entry() (bsc#1193629).
- cifs: misc: fix spelling typo in comment (bsc#1193629).
- cifs: move from strlcpy with unused retval to strscpy (bsc#1193629).
- cifs: periodically query network interfaces from server (bsc#1193629).
- cifs: populate empty hostnames for extra channels (bsc#1193629).
- cifs: prevent copying past input buffer boundaries (bsc#1193629).
- cifs: remove &quot;cifs_&quot; prefix from init/destroy mids functions (bsc#1193629).
- cifs: remove initialization value (bsc#1193629).
- cifs: remove minor build warning (bsc#1193629).
- cifs: remove redundant initialization to variable mnt_sign_enabled (bsc#1193629).
- cifs: remove remaining build warnings (bsc#1193629).
- cifs: remove some camelCase and also some static build warnings (bsc#1193629).
- cifs: remove unnecessary (void*) conversions (bsc#1193629).
- cifs: remove unnecessary locking of chan_lock while freeing session (bsc#1193629).
- cifs: remove unnecessary type castings (bsc#1193629).
- cifs: remove unused server parameter from calc_smb_size() (bsc#1193629).
- cifs: remove useless DeleteMidQEntry() (bsc#1193629).
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (bsc#1193629).
- cifs: replace kfree() with kfree_sensitive() for sensitive data (bsc#1193629).
- cifs: return correct error in -&gt;calc_signature() (bsc#1193629).
- cifs: return errors during session setup during reconnects (bsc#1193629).
- cifs: revalidate mapping when doing direct writes (bsc#1193629).
- cifs: secmech: use shash_desc directly, remove sdesc (bsc#1193629).
- cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (bsc#1193629).
- cifs: skip extra NULL byte in filenames (bsc#1193629).
- cifs: store a pointer to a fid in the cfid structure instead of the struct (bsc#1193629).
- cifs: truncate the inode and mapping when we simulate fcollapse (bsc#1193629).
- cifs: update cifs_ses::ip_addr after failover (bsc#1193629).
- cifs: update internal module number (bsc#1193629).
- cifs: use ALIGN() and round_up() macros (bsc#1193629).
- cifs: use LIST_HEAD() and list_move() to simplify code (bsc#1193629).
- cifs: when a channel is not found for server, log its connection id (bsc#1193629).
- cifs: when insecure legacy is disabled shrink amount of SMB1 code (bsc#1193629).
- clk: ast2600: BCLK comes from EPLL (git-fixes).
- clk: at91: fix the build with binutils 2.27 (git-fixes).
- clk: baikal-t1: Add SATA internal ref clock buffer (git-fixes).
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (git-fixes).
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider (git-fixes).
- clk: bcm2835: Make peripheral PLLC critical (git-fixes).
- clk: bcm2835: Round UART input clock up (bsc#1188238)
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (git-fixes).
- clk: bcm: rpi: Add support for VEC clock (bsc#1196632)
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (git-fixes).
- clk: bcm: rpi: Prevent out-of-bounds access (git-fixes).
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (git-fixes).
- clk: berlin: Add of_node_put() for of_get_parent() (git-fixes).
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (git-fixes).
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (git-fixes).
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (git-fixes).
- clk: imx: scu: fix memleak on platform_device_add() fails (git-fixes).
- clk: ingenic-tcu: Properly enable registers before accessing timers (git-fixes).
- clk: iproc: Do not rely on node name for correct PLL setup (git-fixes).
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (git-fixes).
- clk: mediatek: reset: Fix written reset bit offset (git-fixes).
- clk: meson: Hold reference returned by of_get_parent() (git-fixes).
- clk: oxnas: Hold reference returned by of_get_parent() (git-fixes).
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (git-fixes).
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (git-fixes).
- clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level (git-fixes).
- clk: qcom: camcc-sm8250: Fix topology around titan_top power domain (git-fixes).
- clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description (git-fixes).
- clk: qcom: clk-krait: unlock spin after mux completion (git-fixes).
- clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled (git-fixes).
- clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register (git-fixes).
- clk: qcom: gcc-msm8916: use ARRAY_SIZE instead of specifying num_parents (git-fixes).
- clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC (git-fixes).
- clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src (git-fixes).
- clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address (git-fixes).
- clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk (git-fixes).
- clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock (git-fixes).
- clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (git-fixes).
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (git-fixes).
- clk: qcom: ipq8074: fix NSS core PLL-s (git-fixes).
- clk: qcom: ipq8074: fix NSS port frequency tables (git-fixes).
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (git-fixes).
- clk: qoriq: Hold reference returned by of_get_parent() (git-fixes).
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel (git-fixes).
- clk: sprd: Hold reference returned by of_get_parent() (git-fixes).
- clk: tegra20: Fix refcount leak in tegra20_clock_init (git-fixes).
- clk: tegra: Fix refcount leak in tegra114_clock_init (git-fixes).
- clk: tegra: Fix refcount leak in tegra210_clock_init (git-fixes).
- clk: ti: Stop using legacy clkctrl names for omap4 and 5 (git-fixes).
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (git-fixes).
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (git-fixes).
- clk: zynqmp: Fix stack-out-of-bounds in strncpy` (git-fixes).
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (git-fixes).
- clocksource/drivers/hyperv: add data structure for reference TSC MSR (git-fixes).
- configfs: fix a race in configfs_{,un}register_subsystem() (git-fixes).
- constraints: increase disk space for all architectures References: bsc#1203693 aarch64 is already suffering. SLE15-SP5 x86_64 stats show that it is very close to the limit.
- cpufreq: intel_pstate: Handle no_turbo in frequency invariance (jsc#PED-849).
- cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (jsc#PED-849).
- cpufreq: qcom: fix memory leak in error path (git-fixes).
- cpufreq: qcom: fix writes in read-only memory region (git-fixes).
- cpufreq: zynq: Fix refcount leak in zynq_get_revision (git-fixes).
- cpuidle: intel_idle: Drop redundant backslash at line end (jsc#PED-1936).
- crypto: akcipher - default implementation for setting a private key (git-fixes).
- crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (git-fixes)
- crypto: arm64/poly1305 - fix a read out-of-bound (git-fixes).
- crypto: cavium - prevent integer overflow loading firmware (git-fixes).
- crypto: ccp - During shutdown, check SEV data pointer before using (git-fixes).
- crypto: ccp - Release dma channels before dmaengine unrgister (git-fixes).
- crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (git-fixes).
- crypto: hisilicon - Kunpeng916 crypto driver do not sleep when in softirq (git-fixes).
- crypto: hisilicon/hpre - do not use GFP_KERNEL to alloc mem during softirq (git-fixes).
- crypto: hisilicon/sec - do not sleep when in softirq (git-fixes).
- crypto: hisilicon/sec - fix auth key size error (git-fixes).
- crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (git-fixes).
- crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (git-fixes).
- crypto: inside-secure - Change swab to swab32 (git-fixes).
- crypto: inside-secure - Replace generic aes with libaes (git-fixes).
- crypto: marvell/octeontx - prevent integer overflows (git-fixes).
- crypto: qat - fix default value of WDT timer (git-fixes).
- crypto: sahara - do not sleep when in softirq (git-fixes).
- crypto: sun8i-ss - do not allocate memory when handling hash requests (git-fixes).
- crypto: sun8i-ss - fix error codes in allocate_flows() (git-fixes).
- crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() (git-fixes).
- cs-dsp and serial-multi-instantiate enablement (bsc#1203699)
- device property: Check fwnode-&gt;secondary when finding properties (git-fixes).
- device property: Fix documentation for *_match_string() APIs (git-fixes).
- devlink: Fix use-after-free after a failed reload (git-fixes).
- dm btree remove: fix use after free in rebalance_children() (git-fixes).
- dm crypt: make printing of the key constant-time (git-fixes).
- dm era: commit metadata in postsuspend after worker stops (git-fixes).
- dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes).
- dm mirror log: clear log bits up to BITS_PER_LONG boundary (git-fixes).
- dm raid: fix KASAN warning in raid5_add_disks (git-fixes).
- dm raid: fix accesses beyond end of raid member array (git-fixes).
- dm stats: add cond_resched when looping over entries (git-fixes).
- dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (git-fixes).
- dm: fix double accounting of flush with data (git-fixes).
- dm: interlock pending dm_io and dm_wait_for_bios_completion (git-fixes).
- dm: properly fix redundant bio-based IO accounting (git-fixes).
- dm: remove unnecessary assignment statement in alloc_dev() (git-fixes).
- dm: return early from dm_pr_call() if DM device is suspended (git-fixes).
- dm: revert partial fix for redundant bio-based IO accounting (git-fixes).
- dma-buf: fix racing conflict of dma_heap_add() (git-fixes).
- dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC (git-fixes).
- dma-debug: make things less spammy under memory pressure (git-fixes).
- dmaengine: at_hdmac: Check return code of dma_async_device_register (git-fixes).
- dmaengine: at_hdmac: Do not allow CPU to reorder channel enable (git-fixes).
- dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (git-fixes).
- dmaengine: at_hdmac: Do not start transactions at tx_submit level (git-fixes).
- dmaengine: at_hdmac: Fix at_lli struct definition (git-fixes).
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (git-fixes).
- dmaengine: at_hdmac: Fix concurrency over descriptor (git-fixes).
- dmaengine: at_hdmac: Fix concurrency over the active list (git-fixes).
- dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (git-fixes).
- dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (git-fixes).
- dmaengine: at_hdmac: Fix impossible condition (git-fixes).
- dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (git-fixes).
- dmaengine: at_hdmac: Free the memset buf without holding the chan lock (git-fixes).
- dmaengine: at_hdmac: Protect atchan-&gt;status with the channel lock (git-fixes).
- dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (git-fixes).
- dmaengine: dw-axi-dmac: do not print NULL LLI during error (git-fixes).
- dmaengine: dw-axi-dmac: ignore interrupt if no descriptor (git-fixes).
- dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics (git-fixes).
- dmaengine: hisilicon: Add multi-thread support for a DMA channel (git-fixes).
- dmaengine: hisilicon: Disable channels when unregister hisi_dma (git-fixes).
- dmaengine: hisilicon: Fix CQ head update (git-fixes).
- dmaengine: idxd: add helper for per interrupt handle drain (jsc#PED-682).
- dmaengine: idxd: add knob for enqcmds retries (jsc#PED-755).
- dmaengine: idxd: change MSIX allocation based on per wq activation (jsc#PED-664).
- dmaengine: idxd: change bandwidth token to read buffers (jsc#PED-679).
- dmaengine: idxd: create locked version of idxd_quiesce() call (jsc#PED-682).
- dmaengine: idxd: deprecate token sysfs attributes for read buffers (jsc#PED-679).
- dmaengine: idxd: embed irq_entry in idxd_wq struct (jsc#PED-664).
- dmaengine: idxd: fix descriptor flushing locking (jsc#PED-664).
- dmaengine: idxd: fix retry value to be constant for duration of function call (git-fixes).
- dmaengine: idxd: force wq context cleanup on device disable path (git-fixes).
- dmaengine: idxd: handle interrupt handle revoked event (jsc#PED-682).
- dmaengine: idxd: handle invalid interrupt handle descriptors (jsc#PED-682).
- dmaengine: idxd: int handle management refactoring (jsc#PED-682).
- dmaengine: idxd: match type for retries var in idxd_enqcmds() (git-fixes).
- dmaengine: idxd: move interrupt handle assignment (jsc#PED-682).
- dmaengine: idxd: rework descriptor free path on failure (jsc#PED-682).
- dmaengine: idxd: set defaults for wq configs (jsc#PED-688).
- dmaengine: idxd: update IAA definitions for user header (jsc#PED-763).
- dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) (git-fixes).
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (git-fixes).
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (git-fixes).
- dmaengine: mxs: use platform_driver_register (git-fixes).
- dmaengine: pxa_dma: use platform_get_irq_optional (git-fixes).
- dmaengine: sf-pdma: Add multithread support for a DMA channel (git-fixes).
- dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (git-fixes).
- dmaengine: stm32-mdma: Remove dead code in stm32_mdma_irq_handler() (git-fixes).
- dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (git-fixes).
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (git-fixes).
- dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (git-fixes).
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (git-fixes).
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (git-fixes).
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (git-fixes).
- docs, kprobes: Fix the wrong location of Kprobes (git-fixes).
- docs/core-api: expand Fedora instructions for GCC plugins (git-fixes).
- docs/kernel-parameters: Update descriptions for &quot;mitigations=&quot; param with retbleed (git-fixes).
- docs: i2c: i2c-sysfs: fix hyperlinks (git-fixes).
- docs: i2c: i2c-topology: fix incorrect heading (git-fixes).
- docs: zh_CN: fix a broken reference (git-fixes).
- dpaa2-eth: fix ethtool statistics (git-fixes).
- dpaa2-eth: trace the allocated address instead of page struct (git-fixes).
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (git-fixes).
- driver core: Do not probe devices after bus_type.match() probe deferral (git-fixes).
- driver core: fix potential deadlock in __driver_attach (git-fixes).
- drivers/iio: Remove all strcpy() uses (git-fixes).
- drivers: serial: jsm: fix some leaks in probe (git-fixes).
- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- drm/amd/amd_shared.h: Add missing doc for PP_GFX_DCS_MASK (git-fixes).
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV (git-fixes).
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (git-fixes).
- drm/amd/display: Add HUBP surface flip interrupt handler (git-fixes).
- drm/amd/display: Add option to defer works of hpd_rx_irq (git-fixes).
- drm/amd/display: Assume an LTTPR is always present on fixed_vs links (git-fixes).
- drm/amd/display: Avoid MPC infinite loop (git-fixes).
- drm/amd/display: Changed pipe split policy to allow for multi-display (bsc#1152472) Backporting notes: 	* remove changes to non-existing 201 and 31 directories
- drm/amd/display: Check correct bounds for stream encoder instances for DCN303 (git-fixes).
- drm/amd/display: Correct MPC split policy for DCN301 (git-fixes).
- drm/amd/display: Enable building new display engine with KCOV enabled (git-fixes).
- drm/amd/display: Fix HDMI VSIF V3 incorrect issue (git-fixes).
- drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (git-fixes).
- drm/amd/display: Fix double cursor on non-video RGB MPO (git-fixes).
- drm/amd/display: Fix pixel clock programming (git-fixes).
- drm/amd/display: Fix surface optimization regression on Carrizo (git-fixes).
- drm/amd/display: Fix vblank refcount in vrr transition (git-fixes).
- drm/amd/display: For stereo keep &quot;FLIP_ANY_FRAME&quot; (git-fixes).
- drm/amd/display: Ignore First MST Sideband Message Return Error (git-fixes).
- drm/amd/display: Limit user regamma to a valid value (git-fixes).
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage (git-fixes).
- drm/amd/display: Optimize bandwidth on following fast update (git-fixes).
- drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() (git-fixes).
- drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() (git-fixes).
- drm/amd/display: Remove interface for periodic interrupt 1 (git-fixes).
- drm/amd/display: Reset DMCUB before HW init (git-fixes).
- drm/amd/display: Revert &quot;drm/amd/display: turn DPMS off on connector unplug&quot; (git-fixes).
- drm/amd/display: avoid doing vm_init multiple time (git-fixes).
- drm/amd/display: clear optc underflow before turn off odm clock (git-fixes).
- drm/amd/display: skip audio setup when audio stream is enabled (git-fixes).
- drm/amd/display: update gamut remap if plane has changed (git-fixes).
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid (git-fixes).
- drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards (git-fixes).
- drm/amd/pm: smu7_hwmgr: fix potential off-by-one overflow in 'performance_levels' (git-fixes).
- drm/amdgpu/display: change pipe policy for DCN 2.0 (git-fixes).
- drm/amdgpu/display: change pipe policy for DCN 2.1 (git-fixes).
- drm/amdgpu/gfx10: add wraparound gpu counter check for APUs as well (bsc#1152472) Backporting notes: 	* also fix default branch
- drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ (bsc#1152472) Backporting notes: 	* replace IP_VERSION() with CHIP_ constants
- drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (git-fixes).
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup (git-fixes).
- drm/amdgpu: Increase tlb flush timeout for sriov (git-fixes).
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (git-fixes).
- drm/amdgpu: Remove one duplicated ef removal (git-fixes).
- drm/amdgpu: Separate vf2pf work item init from virt data exchange (git-fixes).
- drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() (git-fixes).
- drm/amdgpu: disable BACO on special BEIGE_GOBY card (git-fixes).
- drm/amdgpu: do not register a dirty callback for non-atomic (git-fixes).
- drm/amdgpu: fix initial connector audio value (git-fixes).
- drm/amdgpu: fix sdma doorbell init ordering on APUs (git-fixes).
- drm/amdgpu: make sure to init common IP before gmc (git-fixes).
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (git-fixes).
- drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (git-fixes).
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (git-fixes).
- drm/amdgpu: remove useless condition in amdgpu_job_stop_all_jobs_on_sched() (git-fixes).
- drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (git-fixes).
- drm/amdgpu: use dirty framebuffer helper (git-fixes).
- drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (git-fixes).
- drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (git-fixes).
- drm/amdkfd: Migrate in CPU page fault use current mm (git-fixes).
- drm/amdkfd: avoid recursive lock in migrations back to RAM (git-fixes).
- drm/amdkfd: handle CPU fault on COW mapping (git-fixes).
- drm/bridge: Avoid uninitialized variable warning (git-fixes).
- drm/bridge: display-connector: implement bus fmts callbacks (git-fixes).
- drm/bridge: lt8912b: add vsync hsync (git-fixes).
- drm/bridge: lt8912b: fix corrupted image output (git-fixes).
- drm/bridge: lt8912b: set hdmi or dvi mode (git-fixes).
- drm/bridge: lt9611uxc: Cancel only driver's work (git-fixes).
- drm/bridge: megachips: Fix a null pointer dereference bug (git-fixes).
- drm/bridge: parade-ps8640: Fix regulator supply order (git-fixes).
- drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function (git-fixes).
- drm/bridge: tc358767: Make sure Refclk clock are enabled (git-fixes).
- drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function (git-fixes).
- drm/doc: Fix comment typo (git-fixes).
- drm/drv: Fix potential memory leak in drm_dev_init() (git-fixes).
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed (git-fixes).
- drm/gem: Fix GEM handle release errors (git-fixes).
- drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (git-fixes).
- drm/gma500: Fix BUG: sleeping function called from invalid context errors (git-fixes).
- drm/hyperv: Add ratelimit on error message (git-fixes).
- drm/hyperv: Do not overwrite dirt_needed value set by host (git-fixes).
- drm/i915/display: avoid warnings when registering dual panel backlight (git-fixes).
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (git-fixes).
- drm/i915/dp: Reset frl trained flag before restarting FRL training (git-fixes).
- drm/i915/ehl: Update MOCS table for EHL (git-fixes).
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (git-fixes).
- drm/i915/gt: Restrict forced preemption to the active context (git-fixes).
- drm/i915/gt: Skip TLB invalidations once wedged (git-fixes).
- drm/i915/gvt: fix a memory leak in intel_gvt_init_vgpu_types (git-fixes).
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915 (bsc#1152489) Backporting notes: 	* update additional patch on top
- drm/i915/reg: Fix spelling mistake &quot;Unsupport&quot; -&gt; &quot;Unsupported&quot; (git-fixes).
- drm/i915/sdvo: Filter out invalid outputs more sensibly (git-fixes).
- drm/i915/sdvo: Setup DDC fully before output init (git-fixes).
- drm/i915: Implement WaEdpLinkRateDataReload (git-fixes).
- drm/i915: Reject unsupported TMDS rates on ICL+ (git-fixes).
- drm/i915: Skip wm/ddb readout for disabled pipes (git-fixes).
- drm/i915: fix null pointer dereference (git-fixes).
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (git-fixes).
- drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook (git-fixes).
- drm/mcde: Fix refcount leak in mcde_dsi_bind (git-fixes).
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (git-fixes).
- drm/mediatek: Allow commands to be sent during video mode (git-fixes).
- drm/mediatek: Keep dsi as LP00 before dcs cmds transfer (git-fixes).
- drm/mediatek: Modify dsi funcs to atomic operations (git-fixes).
- drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs (git-fixes).
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled (git-fixes).
- drm/mediatek: dpi: Remove output format of YUV (git-fixes).
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks (git-fixes).
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() (git-fixes).
- drm/meson: Correct OSD1 global alpha value (git-fixes).
- drm/meson: Fix OSD1 RGB to YCbCr coefficient (git-fixes).
- drm/meson: Fix overflow implicit truncation warnings (git-fixes).
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (git-fixes).
- drm/meson: explicitly remove aggregate driver at module unload time (git-fixes).
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer (git-fixes).
- drm/mipi-dsi: Detach devices when removing the host (git-fixes).
- drm/msm/dp: Silence inconsistent indent warning (git-fixes).
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (git-fixes).
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (git-fixes).
- drm/msm/dp: fix IRQ lifetime (git-fixes).
- drm/msm/dpu: Fix comment typo (git-fixes).
- drm/msm/dpu: Fix for non-visible planes (git-fixes).
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx (git-fixes).
- drm/msm/dsi: Fix number of regulators for SDM660 (git-fixes).
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (git-fixes).
- drm/msm/dsi: fix memory corruption with too many bridges (git-fixes).
- drm/msm/dsi: fix the inconsistent indenting (git-fixes).
- drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (git-fixes).
- drm/msm/hdmi: drop empty 'none' regulator lists (git-fixes).
- drm/msm/hdmi: enable core-vcc/core-vdda-supply for 8996 platform (git-fixes).
- drm/msm/hdmi: fix IRQ lifetime (git-fixes).
- drm/msm/hdmi: fix memory corruption with too many bridges (git-fixes).
- drm/msm/mdp5: Fix global state lock backoff (git-fixes).
- drm/msm/rd: Fix FIFO-full deadlock (git-fixes).
- drm/msm: Avoid dirtyfb stalls on video mode displays (v2) (git-fixes).
- drm/msm: Fix dirtyfb refcounting (git-fixes).
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (git-fixes).
- drm/msm: Make .remove and .shutdown HW shutdown consistent (git-fixes).
- drm/msm: fix use-after-free on probe deferral (git-fixes).
- drm/nouveau/acpi: Do not print error when we get -EINPROGRESS from pm_runtime (git-fixes).
- drm/nouveau/kms/nv140-: Disable interlacing (git-fixes).
- drm/nouveau/kms: Fix failure path for creating DP connectors (git-fixes).
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (git-fixes).
- drm/nouveau: Do not pm_runtime_put_sync(), only pm_runtime_put_autosuspend() (git-fixes).
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (git-fixes).
- drm/nouveau: fix another off-by-one in nvbios_addr (git-fixes).
- drm/nouveau: recognise GA103 (git-fixes).
- drm/nouveau: wait for the exclusive fence after the shared ones v2 (bsc#1152472) Backporting notes: 	* context changes
- drm/omap: dss: Fix refcount leak bugs (git-fixes).
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format (git-fixes).
- drm/panel: simple: set bpc field for logic technologies displays (git-fixes).
- drm/panfrost: devfreq: set opp to the recommended one to configure regulator (git-fixes).
- drm/radeon: add a force flush to delay work when radeon (git-fixes).
- drm/radeon: fix incorrrect SPDX-License-Identifiers (git-fixes).
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (git-fixes).
- drm/rockchip: Fix an error handling path rockchip_dp_probe() (git-fixes).
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (git-fixes).
- drm/rockchip: dsi: Force synchronous probe (git-fixes).
- drm/rockchip: vop: Do not crash for invalid duplicate_state() (git-fixes).
- drm/scheduler: quieten kernel-doc warnings (git-fixes).
- drm/shmem-helper: Add missing vunmap on error (git-fixes).
- drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() (git-fixes).
- drm/st7735r: Fix module autoloading for Okaya RH128128T (git-fixes).
- drm/sun4i: dsi: Prevent underflow when computing packet sizes (git-fixes).
- drm/tegra: vic: Fix build warning when CONFIG_PM=n (git-fixes).
- drm/ttm: Fix dummy res NULL ptr deref bug (git-fixes).
- drm/udl: Add parameter to set number of URBs (bsc#1195917).
- drm/udl: Add reset_resume (bsc#1195917)
- drm/udl: Do not re-initialize stuff at retrying the URB list allocation (bsc#1195917).
- drm/udl: Drop unneeded alignment (bsc#1195917).
- drm/udl: Enable damage clipping (bsc#1195917).
- drm/udl: Fix inconsistent urbs.count value during udl_free_urb_list() (bsc#1195917).
- drm/udl: Fix potential URB leaks (bsc#1195917).
- drm/udl: Increase the default URB list size to 20 (bsc#1195917).
- drm/udl: Kill pending URBs at suspend and disconnect (bsc#1195917).
- drm/udl: Replace BUG_ON() with WARN_ON() (bsc#1195917).
- drm/udl: Replace semaphore with a simple wait queue (bsc#1195917).
- drm/udl: Restore display mode on resume (bsc#1195917)
- drm/udl: Suppress error print for -EPROTO at URB completion (bsc#1195917).
- drm/udl: Sync pending URBs at suspend / disconnect (bsc#1195917).
- drm/udl: Sync pending URBs at the end of suspend (bsc#1195917).
- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (git-fixes).
- drm/vc4: change vc4_dma_range_matches from a global to static (git-fixes).
- drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component (git-fixes).
- drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration (git-fixes).
- drm/vc4: dsi: Correct DSI divider calculations (git-fixes).
- drm/vc4: dsi: Correct pixel order for DSI0 (git-fixes).
- drm/vc4: dsi: Fix dsi0 interrupt support (git-fixes).
- drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type (git-fixes).
- drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes (git-fixes).
- drm/vc4: hdmi: Disable audio if dmas property is present but empty (git-fixes).
- drm/vc4: hdmi: Fix timings for interlaced modes (git-fixes).
- drm/vc4: hdmi: Reset HDMI MISC_CONTROL register (git-fixes).
- drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (git-fixes).
- drm/vc4: plane: Fix margin calculations for the right/bottom edges (git-fixes).
- drm/vc4: plane: Remove subpixel positioning check (git-fixes).
- drm/virtio: Check whether transferred 2D BO is shmem (git-fixes).
- drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error (git-fixes).
- drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (git-fixes).
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer (git-fixes).
- drm: Use size_t type for len variable in drm_copy_field() (git-fixes).
- drm: adv7511: override i2c address of cec before accessing it (git-fixes).
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register (git-fixes).
- drm: bridge: adv7511: fix CEC power down control register offset (git-fixes).
- drm: bridge: dw_hdmi: only trigger hotplug event on link change (git-fixes).
- drm: bridge: sii8620: fix possible off-by-one (git-fixes).
- drm: fix drm_mipi_dbi build errors (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (git-fixes).
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() (git-fixes).
- dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED (git-fixes).
- dt-bindings: PCI: microchip,pcie-host: fix missing clocks properties (git-fixes).
- dt-bindings: PCI: microchip,pcie-host: fix missing dma-ranges (git-fixes).
- dt-bindings: arm: qcom: fix MSM8916 MTP compatibles (git-fixes).
- dt-bindings: arm: qcom: fix MSM8994 boards compatibles (git-fixes).
- dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding (git-fixes).
- dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources (git-fixes).
- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: drop dma-coherent property (git-fixes).
- dt-bindings: display/msm: dpu-sc7180: add missing DPU opp-table (git-fixes).
- dt-bindings: display/msm: dpu-sdm845: add missing DPU opp-table (git-fixes).
- dt-bindings: gpio: zynq: Add missing compatible strings (git-fixes).
- dt-bindings: hwmon: (mr75203) fix &quot;intel,vm-map&quot; property to be optional (git-fixes).
- dt-bindings: iio: accel: Add DT binding doc for ADXL355 (git-fixes).
- dt-bindings: mtd: intel: lgm-nand: Fix compatible string (git-fixes).
- dt-bindings: mtd: intel: lgm-nand: Fix maximum chip select value (git-fixes).
- dt-bindings: phy: qcom,qmp-usb3-dp: fix bogus clock-cells property (git-fixes).
- dt-bindings: phy: qcom,qmp: fix bogus clock-cells property (git-fixes).
- dt-bindings: power: gpcv2: add power-domains property (git-fixes).
- dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional (git-fixes).
- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- dyndbg: fix module.dyndbg handling (git-fixes).
- dyndbg: fix static_branch manipulation (git-fixes).
- dyndbg: let query-modname override actual module name (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- e100: Fix possible use after free in e100_xmit_prepare (git-fixes).
- eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() (git-fixes).
- efi/tpm: Pass correct address to memblock_reserve (git-fixes).
- efi: Correct Macmini DMI match in uefi cert quirk (git-fixes).
- efi: capsule-loader: Fix use-after-free in efi_capsule_write (git-fixes).
- efi: libstub: Disable struct randomization (git-fixes).
- efi: libstub: drop pointless get_memory_map() call (git-fixes).
- efi: random: Use 'ACPI reclaim' memory for random seed (git-fixes).
- efi: random: reduce seed size to 32 bytes (git-fixes).
- erofs: fix deadlock when shrink erofs slab (git-fixes).
- eth: alx: take rtnl_lock on resume (git-fixes).
- eth: sun: cassini: remove dead code (git-fixes).
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (git-fies).
- exfat: Define NLS_NAME_* as bit flags explicitly (bsc#1201725).
- exfat: Downgrade ENAMETOOLONG error message to debug messages (bsc#1201725).
- exfat: Drop superfluous new line for error messages (bsc#1201725).
- exfat: Expand exfat_err() and co directly to pr_*() macro (bsc#1201725).
- exfat: Return ENAMETOOLONG consistently for oversized paths (bsc#1201725).
- exfat: fix i_blocks for files truncated over 4 GiB (git-fixes).
- exfat: fix referencing wrong parent directory information after renaming (git-fixes).
- exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() (git-fixes).
- exfat: use updated exfat_chain directly during renaming (git-fixes).
- export: fix string handling of namespace in EXPORT_SYMBOL_NS (git-fixes).
- ext4: Fix BUG_ON in ext4_bread when write quota data (bsc#1197755).
- ext4: add new helper interface ext4_try_to_trim_range() (bsc#1202783).
- ext4: add reserved GDT blocks check (bsc#1202712).
- ext4: avoid BUG_ON when creating xattrs (bsc#1205496).
- ext4: do not use the orphan list when migrating an inode (bsc#1197756).
- ext4: fast commit may miss tracking unwritten range during ftruncate (bsc#1202759).
- ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state (bsc#1202771).
- ext4: fix a possible ABBA deadlock due to busy PA (bsc#1202762).
- ext4: fix bug_on in ext4_writepages (bsc#1200872).
- ext4: fix error handling in ext4_fc_record_modified_inode() (bsc#1202767).
- ext4: fix error handling in ext4_restore_inline_data() (bsc#1197757).
- ext4: fix fallocate to use file_modified to update permissions consistently (bsc#1202769). Refresh ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE (bsc#1202757).
- ext4: fix fs corruption when tring to remove a non-empty directory with IO error (bsc#1202768).
- ext4: fix incorrect type issue during replay_del_range (bsc#1202867).
- ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' (bsc#1202764).
- ext4: fix overhead calculation to account for the reserved gdt blocks (bsc#1200869).
- ext4: fix race when reusing xattr blocks (bsc#1198971).
- ext4: fix super block checksum incorrect after mount (bsc#1202773).
- ext4: fix symlink file size not match to file content (bsc#1200868).
- ext4: fix use-after-free in ext4_rename_dir_prepare (bsc#1200871).
- ext4: fix use-after-free in ext4_search_dir (bsc#1202710).
- ext4: fix warning in ext4_handle_inode_extension (bsc#1202711).
- ext4: force overhead calculation if the s_overhead_cluster makes no sense (bsc#1200870).
- ext4: initialize err_blk before calling __ext4_get_inode_loc (bsc#1202763).
- ext4: make sure quota gets properly shutdown on error (bsc#1195480).
- ext4: make sure to reset inode lockdep class when quota enabling fails (bsc#1202761).
- ext4: mark group as trimmed only if it was fully scanned (bsc#1202770).
- ext4: modify the logic of ext4_mb_new_blocks_simple (bsc#1202766).
- ext4: prevent used blocks from being allocated during fast commit replay (bsc#1202765).
- ext4: recover csum seed of tmp_inode after migrating to extents (bsc#1202713).
- ext4: remove EA inode entry from mbcache on inode eviction (bsc#1198971).
- ext4: unindent codeblock in ext4_xattr_block_set() (bsc#1198971).
- ext4: use ext4_ext_remove_space() for fast commit replay delete range (bsc#1202758).
- fat: add ratelimit to fat*_ent_bread() (git-fixes).
- fbcon: Add option to enable legacy hardware acceleration (bsc#1152472) Backporting changes: 	* context fixes in other patch 	* update config
- fbcon: Fix accelerated fbdev scrolling while logo is still shown (bsc#1152472)
- fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (git-fixes).
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (git-fixes).
- fbdev: cyber2000fb: fix missing pci_disable_device() (git-fixes).
- fbdev: da8xx-fb: Fix error handling in .remove() (git-fixes).
- fbdev: fb_pm2fb: Avoid potential divide by zero error (git-fixes).
- fbdev: fbcon: Properly revert changes when vc_resize() failed (git-fies).
- fbdev: smscufx: Fix several use-after-free bugs (git-fixes).
- fec: Fix timer capture timing in `fec_ptp_enable_pps()` (git-fixes).
- filemap: Handle sibling entries in filemap_get_read_batch() (bsc#1202774).
- firmware: arm_scmi: Add SCMI PM driver remove routine (git-fixes).
- firmware: arm_scmi: Fix the asynchronous reset requests (git-fixes).
- firmware: arm_scmi: Harden accesses to the reset domains (git-fixes).
- firmware: arm_scmi: Harden accesses to the sensor domains (git-fixes).
- firmware: arm_scmi: Improve checks in the info_get operations (git-fixes).
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors (git-fixes).
- firmware: arm_scmi: Suppress the driver's bind attributes (git-fixes).
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (git-fixes).
- firmware: coreboot: Register bus in module init (git-fixes).
- firmware: cs_dsp: Add lockdep asserts to interface functions (bsc#1203699).
- firmware: cs_dsp: Add memory chunk helpers (bsc#1203699).
- firmware: cs_dsp: Add offset to cs_dsp read/write (bsc#1203699).
- firmware: cs_dsp: Add pre_run callback (bsc#1203699).
- firmware: cs_dsp: Add pre_stop callback (bsc#1203699).
- firmware: cs_dsp: Add support for rev 2 coefficient files (bsc#1203699).
- firmware: cs_dsp: Add version checks on coefficient loading (bsc#1203699).
- firmware: cs_dsp: Allow creation of event controls (bsc#1203699).
- firmware: cs_dsp: Clarify some kernel doc comments (bsc#1203699).
- firmware: cs_dsp: Clear core reset for cache (bsc#1203699).
- firmware: cs_dsp: Fix overrun of unterminated control name string (bsc#1203699).
- firmware: cs_dsp: Move lockdep asserts to avoid potential null pointer (bsc#1203699).
- firmware: cs_dsp: Perform NULL check in cs_dsp_coeff_write/read_ctrl (bsc#1203699).
- firmware: cs_dsp: Print messages from bin files (bsc#1203699).
- firmware: cs_dsp: add driver to support firmware loading on Cirrus Logic DSPs (bsc#1203699).
- firmware: cs_dsp: tidy includes in cs_dsp.c and cs_dsp.h (bsc#1203699).
- firmware: google: Test spinlock on panic path to avoid lockups (git-fixes).
- firmware: tegra: Fix error check return value of debugfs_create_file() (git-fixes).
- firmware: tegra: bpmp: Do only aligned access to IPC memory area (git-fixes).
- fix race between exit_itimers() and /proc/pid/timers (git-fixes).
- fm10k: Fix error handling in fm10k_init_module() (git-fixes).
- fpga: altera-pr-ip: fix unsigned comparison with less than zero (git-fixes).
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (git-fixes).
- fs-writeback: writeback_sb_inodes: Recalculate 'wrote' according skipped pages (bsc#1200873).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- ftrace/x86: Add back ftrace_expected assignment (git-fixes).
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (git-fixes).
- ftrace: Fix char print issue in print_ip_ins() (git-fixes).
- ftrace: Fix null pointer dereference in ftrace_add_mod() (git-fixes).
- ftrace: Fix the possible incorrect kernel message (git-fixes).
- ftrace: Fix use-after-free for dynamic ftrace_ops (git-fixes).
- ftrace: Optimize the allocation for mcount entries (git-fixes).
- ftrace: Properly unset FTRACE_HASH_FL_MOD (git-fixes).
- fuse: Remove the control interface for virtio-fs (bsc#1203798).
- fuse: add file_modified() to fallocate (bsc#1205332).
- fuse: fix deadlock between atomic O_TRUNC and page invalidation (bsc#1204533).
- fuse: fix readdir cache race (bsc#1205331).
- fuse: ioctl: translate ENOSYS (bsc#1203139).
- fuse: limit nsec (bsc#1203138).
- fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206273).
- gadgetfs: ep_io - wait until IRQ finishes (git-fixes).
- gcov: support GCC 12.1 and newer compilers (git-fixes).
- geneve: do not use RT_TOS for IPv6 flowlabel (git-fixes).
- geneve: fix TOS inheriting for ipv4 (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (git-fixes).
- gpio: mockup: fix NULL pointer dereference when removing debugfs (git-fixes).
- gpio: mockup: remove gpio debugfs when remove device (git-fixes).
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (git-fixes).
- gpio: mvebu: Fix check for pwm support on non-A8K platforms (git-fixes).
- gpio: pca953x: Add mutex_lock for regcache sync in PM (git-fixes).
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (git-fixes).
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (git-fixes).
- gve: Fix GFP flags when allocing pages (git-fixes).
- habanalabs/gaudi: fix shift out of bounds (git-fixes).
- habanalabs/gaudi: mask constant value before cast (git-fixes).
- hamradio: fix issue of dev reference count leakage in bpq_device_event() (git-fixes).
- hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event (git-fixes).
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (git-fixes).
- hinic: Avoid some over memory allocation (git-fixes).
- hv_netvsc: Fix potential dereference of NULL pointer (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (git-fixes).
- hv_sock: Add validation for untrusted Hyper-V values (git-fixes).
- hv_sock: Check hv_pkt_iter_first_raw()'s return value (git-fixes).
- hv_sock: Copy packets sent by Hyper-V out of the ring buffer (git-fixes).
- hwmon/coretemp: Handle large core ID value (git-fixes).
- hwmon: (coretemp) Check for null before removing sysfs attrs (git-fixes).
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (git-fixes).
- hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist (git-fixes).
- hwmon: (drivetemp) Add module alias (git-fixes).
- hwmon: (gpio-fan) Fix array out of bounds access (git-fixes).
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API (git-fixes).
- hwmon: (i5500_temp) fix missing pci_disable_device() (git-fixes).
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (git-fixes).
- hwmon: (ina3221) Fix shunt sum critical calculation (git-fixes).
- hwmon: (ltc2947) fix temperature scaling (git-fixes).
- hwmon: (mr75203) enable polling for all VM channels (git-fixes).
- hwmon: (mr75203) fix VM sensor allocation when &quot;intel,vm-map&quot; not defined (git-fixes).
- hwmon: (mr75203) fix multi-channel voltage reading (git-fixes).
- hwmon: (mr75203) fix voltage equation for negative source input (git-fixes).
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors (git-fixes).
- hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller (git-fixes).
- hwmon: (sht15) Fix wrong assumptions in device remove callback (git-fixes).
- hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (git-fixes).
- hwmon: (tps23861) fix byte order in resistance register (git-fixes).
- i2c: Fix a potential use after free (git-fixes).
- i2c: acpi: Add an i2c_acpi_client_count() helper function (bsc#1203699).
- i2c: cadence: Support PEC for SMBus block read (git-fixes).
- i2c: designware: Fix handling of real but unexpected device interrupts (git-fixes).
- i2c: i801: Add support for Intel Ice Lake PCH-N (jsc#PED-634).
- i2c: i801: Add support for Intel Meteor Lake-P (jsc#PED-732).
- i2c: i801: Add support for Intel Raptor Lake PCH-S (jsc#PED-634).
- i2c: i801: Improve handling of chip-specific feature definitions (jsc#PED-634).
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (git-fixes).
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible (git-fixes).
- i2c: imx: Make sure to unregister adapter on remove() (git-fixes).
- i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (git-fixes).
- i2c: mlxbf: Fix frequency calculation (git-fixes).
- i2c: mlxbf: incorrect base address passed during io write (git-fixes).
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (git-fixes).
- i2c: mlxbf: support lock mechanism (git-fixes).
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop (git-fixes).
- i2c: mxs: Silence a clang warning (git-fixes).
- i2c: npcm7xx: Fix error handling in npcm_i2c_init() (git-fixes).
- i2c: npcm: Capitalize the one-line comment (git-fixes).
- i2c: npcm: Correct slave role behavior (git-fixes).
- i2c: npcm: Remove own slave addresses 2:10 (git-fixes).
- i2c: piix4: Fix adapter not be removed in piix4_remove() (git-fixes).
- i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (git-fixes).
- i2c: tegra: Allocate DMA memory for DMA engine (git-fixes).
- i2c: xiic: Add platform module alias (git-fixes).
- i40e: Fix call trace in setup_tx_descriptors (git-fixes).
- i40e: Fix dropped jumbo frames statistics (git-fixes).
- i40e: Fix to stop tx_timeout recovery if GLOBR fails (git-fixes).
- iavf: Fix adminq error handling (git-fixes).
- iavf: Fix handling of dummy receive descriptors (git-fixes).
- iavf: Fix reset error handling (git-fixes).
- ibmvnic: Free rwi on reset success (bsc#1184350 ltc#191533 git-fixes).
- ice: Allow operation with reduced device MSI-X (bsc#1201987).
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (git-fixes).
- ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (git-fixes).
- ice: Fix race during aux device (un)plugging (git-fixes).
- ice: Fix switchdev rules book keeping (git-fixes).
- ice: Match on all profiles in slow-path (git-fixes).
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (git-fixes).
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (git-fixes).
- ice: do not setup vlan for loopback VSI (git-fixes).
- ice: fix 'scheduling while atomic' on aux critical err interrupt (git-fixes).
- ice: fix crash when writing timestamp on RX rings (git-fixes).
- ice: fix possible under reporting of ethtool Tx and Rx statistics (git-fixes).
- ieee80211: add EHT 1K aggregation definitions (bsc#1202131).
- ieee80211: change HE nominal packet padding value defines (bsc#1202131).
- ieee802154/adf7242: defer destroy_workqueue call (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (git-fixes).
- ieee802154: cc2520: add rc code in cc2520_tx() (git-fixes).
- igb: Make DMA faster when CPU is active on the PCIe link (git-fixes).
- igb: fix a use-after-free issue in igb_clean_tx_ring (git-fixes).
- igb: skip phy status check where unavailable (git-fixes).
- iio: ABI: Fix wrong format of differential capacitance channel ABI (git-fixes).
- iio: accel: bma220: Fix alignment for DMA safety (git-fixes).
- iio: accel: bma400: Fix the scale min and max macro values (git-fixes).
- iio: accel: bma400: Reordering of header files (git-fixes).
- iio: accel: sca3000: Fix alignment for DMA safety (git-fixes).
- iio: accel: sca3300: Fix alignment for DMA safety (git-fixes).
- iio: ad7292: Prevent regulator double disable (git-fixes).
- iio: adc: ad7266: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7292: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7298: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7476: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7766: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7768-1: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7887: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7923: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7923: fix channel readings for some variants (git-fixes).
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch (git-fixes).
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (git-fixes).
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (git-fixes).
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (git-fixes).
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (git-fixes).
- iio: adc: hi8435: Fix alignment for DMA safety (git-fixes).
- iio: adc: ltc2496: Fix alignment for DMA safety (git-fixes).
- iio: adc: ltc2497: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1027: Fix alignment for DMA safety (git-fixes).
- iio: adc: max11100: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1118: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1241: Fix alignment for DMA safety (git-fixes).
- iio: adc: mcp320x: Fix alignment for DMA safety (git-fixes).
- iio: adc: mcp3911: make use of the sign bit (git-fixes).
- iio: adc: mcp3911: use correct formula for AD conversion (git-fixes).
- iio: adc: mcp3911: use correct id bits (git-fixes).
- iio: adc: mp2629: fix potential array out of bound access (git-fixes).
- iio: adc: mp2629: fix wrong comparison of channel (git-fixes).
- iio: adc: ti-adc0832: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc084s021: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc108s102: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc12138: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc128s052: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc161s626: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads124s08: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads131e08: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads7950: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8344: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8688: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-tlc4541: Fix alignment for DMA safety (git-fixes).
- iio: adxl372: Fix unsafe buffer attributes (git-fixes).
- iio: amplifiers: ad8366: Fix alignment for DMA safety (git-fixes).
- iio: bmc150-accel-core: Fix unsafe buffer attributes (git-fixes).
- iio: common: ssp: Fix alignment for DMA safety (git-fixes).
- iio: core: Fix IIO_ALIGN and rename as it was not sufficiently large (git-fixes).
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (git-fixes).
- iio: dac: ad5064: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5360: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5421: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5449: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5504: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5593r: Fix i2c read protocol requirements (git-fixes).
- iio: dac: ad5755: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5761: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5764: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5766: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5770r: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5791: Fix alignment for DMA saftey (git-fixes).
- iio: dac: ad7303: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad8801: Fix alignment for DMA safety (git-fixes).
- iio: dac: mcp4922: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac082s085: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac5571: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7311: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7612: Fix alignment for DMA safety (git-fixes).
- iio: fix iio_format_avail_range() printing for none IIO_VAL_INT (git-fixes).
- iio: frequency: ad9523: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4350: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4371: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16080: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16130: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adxrs450: Fix alignment for DMA safety (git-fixes).
- iio: gyro: fxas210002c: Fix alignment for DMA safety (git-fixes).
- iio: health: afe4403: Fix oob read in afe4403_read_raw (git-fixes).
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (git-fixes).
- iio: imu: fxos8700: Fix alignment for DMA safety (git-fixes).
- iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (git-fixes).
- iio: inkern: only release the device node when done with it (git-fixes).
- iio: light: apds9960: fix wrong register for gesture gain (git-fixes).
- iio: light: isl29028: Fix the warning in isl29028_remove() (git-fixes).
- iio: light: rpr0521: add missing Kconfig dependencies (git-fixes).
- iio: light: tsl2583: Fix module unloading (git-fixes).
- iio: ltc2497: Fix reading conversion results (git-fixes).
- iio: magnetometer: yas530: Change data type of hard_offsets to signed (git-fixes).
- iio: ms5611: Simplify IO callback parameters (git-fixes).
- iio: potentiometer: ad5272: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: max5481: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp41010: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp4131: Fix alignment for DMA safety (git-fixes).
- iio: pressure: dps310: Refactor startup procedure (git-fixes).
- iio: pressure: dps310: Reset chip after timeout (git-fixes).
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (git-fixes).
- iio: pressure: ms5611: fixed value compensation bug (git-fixes).
- iio: proximity: as3935: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s1200: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s90: Fix alignment for DMA safety (git-fixes).
- iio: temp: ltc2983: Fix alignment for DMA safety (git-fixes).
- iio: temp: maxim_thermocouple: Fix alignment for DMA safety (git-fixes).
- iio: temperature: ltc2983: allocate iio channels once (git-fixes).
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (git-fixes).
- ima: fix blocking of security.ima xattrs of unsupported algorithms (git-fixes).
- inet_diag: fix kernel-infoleak for UDP sockets (git-fixes).
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (git-fixes).
- intel_idle: Add AlderLake support (jsc#PED-824).
- intel_idle: Fix SPR C6 optimization (jsc#PED-824 jsc#PED-1936).
- intel_idle: Fix the 'preferred_cstates' module parameter (jsc#PED-824 jsc#PED-1936).
- intel_idle: make SPR C1 and C1E be independent (jsc#PED-1936).
- intel_th: Fix a resource leak in an error handling path (git-fixes).
- intel_th: msu-sink: Potential dereference of null pointer (git-fixes).
- intel_th: msu: Fix vmalloced buffers (git-fixes).
- intel_th: pci: Add Meteor Lake-P support (git-fixes).
- intel_th: pci: Add Raptor Lake-S CPU support (git-fixes).
- intel_th: pci: Add Raptor Lake-S PCH support (git-fixes).
- interconnect: imx: fix max_node_id (git-fixes).
- io-wq: Remove duplicate code in io_workqueue_create() (bnc#1205113).
- io-wq: do not retry task_work creation failure on fatal conditions (bnc#1205113).
- io-wq: ensure we exit if thread group is exiting (git-fixes).
- io-wq: exclusively gate signal based exit on get_signal() return (git-fixes).
- io-wq: fix cancellation on create-worker failure (bnc#1205113).
- io-wq: fix silly logic error in io_task_work_match() (bnc#1205113).
- io_uring: add a schedule point in io_add_buffers() (git-fixes).
- io_uring: correct __must_hold annotation (git-fixes).
- io_uring: drop ctx-&gt;uring_lock before acquiring sqd-&gt;lock (git-fixes).
- io_uring: ensure IORING_REGISTER_IOWQ_MAX_WORKERS works with SQPOLL (git-fixes).
- io_uring: fix io_timeout_remove locking (git-fixes).
- io_uring: fix missing mb() before waitqueue_active (git-fixes).
- io_uring: fix missing sigmask restore in io_cqring_wait() (git-fixes).
- io_uring: fix possible poll event lost in multi shot mode (git-fixes).
- io_uring: pin SQPOLL data before unlocking ring lock (git-fixes).
- io_uring: terminate manual loop iterator loop correctly for non-vecs (git-fixes).
- iommu/amd: Clarify AMD IOMMUv2 initialization messages (git-fixes).
- iommu/amd: Enable swiotlb in all cases (git-fixes).
- iommu/amd: Fix I/O page table memory leak (git-fixes).
- iommu/amd: Recover from event log overflow (git-fixes).
- iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement (git-fixes).
- iommu/arm-smmu-v3-sva: Fix mm use-after-free (git-fixes).
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() (git-fixes).
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (git-fixes).
- iommu/dart: Add missing module owner to ops structure (git-fixes).
- iommu/dart: check return value after calling platform_get_resource() (git-fixes).
- iommu/exynos: Handle failed IOMMU device registration properly (git-fixes).
- iommu/iova: Improve 32-bit free space estimate (git-fixes).
- iommu/ipmmu-vmsa: Check for error num after setting mask (git-fixes).
- iommu/mediatek: Add list_del in mtk_iommu_remove (git-fixes).
- iommu/mediatek: Add mutex for m4u_group and m4u_dom in data (git-fixes).
- iommu/mediatek: Fix 2 HW sharing pgtable issue (git-fixes).
- iommu/mediatek: Fix NULL pointer dereference when printing dev_name (git-fixes).
- iommu/mediatek: Remove clk_disable in mtk_iommu_remove (git-fixes).
- iommu/msm: Fix an incorrect NULL check on list iterator (git-fixes).
- iommu/omap: Fix regression in probe for NULL pointer dereference (git-fixes).
- iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find (git-fixes).
- iommu/vt-d: Acquiring lock in domain ID allocation helpers (bsc#1200301).
- iommu/vt-d: Calculate mask for non-aligned flushes (git-fixes).
- iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option (bsc#1204947).
- iommu/vt-d: Drop stop marker messages (git-fixes).
- iommu/vt-d: Fix PCI bus rescan device hot add (git-fixes).
- iommu/vt-d: Fix RID2PASID setup/teardown failure (git-fixes).
- iommu/vt-d: Make DMAR_UNITS_SUPPORTED default 1024 (bsc#1200301).
- iommu/vt-d: Refactor iommu information of each domain (bsc#1200301).
- iommu/vt-d: Remove global g_iommus array (bsc#1200301).
- iommu/vt-d: Remove intel_iommu::domains (bsc#1200301).
- iommu/vt-d: Remove unnecessary check in intel_iommu_add() (bsc#1200301).
- iommu/vt-d: Use IDA interface to manage iommu sequence id (bsc#1200301).
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (git-fixes).
- iommu: Fix potential use-after-free during probe (git-fixes).
- iov_iter: Fix iter_xarray_get_pages{,_alloc}() (git-fixes).
- iov_iter: fix build issue due to possible type mis-match (git-fixes).
- ip: Fix data-races around sysctl_ip_fwd_update_priority (git-fixes).
- ipmi: fix initialization when workqueue allocation fails (git-fixes).
- ipv4: Fix data-races around sysctl_fib_multipath_hash_policy (git-fixes).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- irqchip/ls-extirq: Fix invalid wait context by avoiding to use regmap (git-fixes).
- irqchip/sifive-plic: Add missing thead,c900-plic match string (git-fixes).
- irqchip/tegra: Fix overflow implicit truncation warnings (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration (git-fixes).
- iwlwifi/fw: use struct_size over open coded arithmetic (bsc#1202131).
- iwlwifi: ACPI: support revision 3 WGDS tables (bsc#1202131).
- iwlwifi: Add support for getting rf id with blank otp (bsc#1202131).
- iwlwifi: Add support for more BZ HWs (bsc#1202131).
- iwlwifi: BZ Family BUS_MASTER_DISABLE_REQ code duplication (bsc#1202131).
- iwlwifi: BZ Family SW reset support (bsc#1202131).
- iwlwifi: Configure FW debug preset via module param (bsc#1202131).
- iwlwifi: Fix FW name for gl (bsc#1202131).
- iwlwifi: Fix missing error code in iwl_pci_probe() (bsc#1202131).
- iwlwifi: Fix syntax errors in comments (bsc#1202131).
- iwlwifi: Make use of the helper macro LIST_HEAD() (bsc#1202131).
- iwlwifi: Read the correct addresses when getting the crf id (bsc#1202131).
- iwlwifi: Start scratch debug register for Bz family (bsc#1202131).
- iwlwifi: acpi: fix wgds rev 3 size (bsc#1202131).
- iwlwifi: acpi: move ppag code from mvm to fw/acpi (bsc#1202131).
- iwlwifi: add missing entries for Gf4 with So and SoF (bsc#1202131).
- iwlwifi: add new Qu-Hr device (bsc#1202131).
- iwlwifi: add new ax1650 killer device (bsc#1202131).
- iwlwifi: add new device id 7F70 (bsc#1202131).
- iwlwifi: add new pci SoF with JF (bsc#1202131).
- iwlwifi: add some missing kernel-doc in struct iwl_fw (bsc#1202131).
- iwlwifi: add support for BNJ HW (bsc#1202131).
- iwlwifi: add support for BZ-U and BZ-L HW (bsc#1202131).
- iwlwifi: add support for Bz-Z HW (bsc#1202131).
- iwlwifi: add vendor specific capabilities for some RFs (bsc#1202131).
- iwlwifi: advertise support for HE - DCM BPSK RX/TX (bsc#1202131).
- iwlwifi: allow rate-limited error messages (bsc#1202131).
- iwlwifi: api: fix struct iwl_wowlan_status_v7 kernel-doc (bsc#1202131).
- iwlwifi: api: remove ttl field from TX command (bsc#1202131).
- iwlwifi: api: remove unused RX status bits (bsc#1202131).
- iwlwifi: avoid variable shadowing (bsc#1202131).
- iwlwifi: avoid void pointer arithmetic (bsc#1202131).
- iwlwifi: bump FW API to 67 for AX devices (bsc#1202131).
- iwlwifi: bump FW API to 68 for AX devices (bsc#1202131).
- iwlwifi: bump FW API to 69 for AX devices (bsc#1202131).
- iwlwifi: bump FW API to 70 for AX devices (bsc#1202131).
- iwlwifi: bump FW API to 71 for AX devices (bsc#1202131).
- iwlwifi: bump FW API to 72 for AX devices (bsc#1202131).
- iwlwifi: cfg: add support for 1K BA queue (bsc#1202131).
- iwlwifi: dbg-tlv: clean up iwl_dbg_tlv_update_drams() (bsc#1202131).
- iwlwifi: dbg: add infra for tracking free buffer size (bsc#1202131).
- iwlwifi: dbg: check trigger data before access (bsc#1202131).
- iwlwifi: dbg: disable ini debug in 8000 family and below (bsc#1202131).
- iwlwifi: dbg: in sync mode do not call schedule (bsc#1202131).
- iwlwifi: dbg: treat dbgc allocation failure when tlv is missing (bsc#1202131).
- iwlwifi: dbg: treat non active regions as unsupported regions (bsc#1202131).
- iwlwifi: dbg_ini: Split memcpy() to avoid multi-field write (bsc#1202131).
- iwlwifi: de-const properly where needed (bsc#1202131).
- iwlwifi: debugfs: remove useless double condition (bsc#1202131).
- iwlwifi: do not dump_stack() when we get an unexpected interrupt (bsc#1202131).
- iwlwifi: do not use __unused as variable name (bsc#1202131).
- iwlwifi: drv: load tlv debug data earlier (bsc#1202131).
- iwlwifi: dump CSR scratch from outer function (bsc#1202131).
- iwlwifi: dump RCM error tables (bsc#1202131).
- iwlwifi: dump both TCM error tables if present (bsc#1202131).
- iwlwifi: dump host monitor data when NIC does not init (bsc#1202131).
- iwlwifi: dvm: use struct_size over open coded arithmetic (bsc#1202131).
- iwlwifi: eeprom: clean up macros (bsc#1202131).
- iwlwifi: fix LED dependencies (bsc#1202131).
- iwlwifi: fix debug TLV parsing (bsc#1202131).
- iwlwifi: fix fw/img.c license statement (bsc#1202131).
- iwlwifi: fix iwl_legacy_rate_to_fw_idx (bsc#1202131).
- iwlwifi: fix small doc mistake for iwl_fw_ini_addr_val (bsc#1202131).
- iwlwifi: fix various more -Wcast-qual warnings (bsc#1202131).
- iwlwifi: fw dump: add infrastructure for dump scrubbing (bsc#1202131).
- iwlwifi: fw: add support for splitting region type bits (bsc#1202131).
- iwlwifi: fw: api: add link to PHY context command struct v1 (bsc#1202131).
- iwlwifi: fw: correctly detect HW-SMEM region subtype (bsc#1202131).
- iwlwifi: fw: fix some scan kernel-doc (bsc#1202131).
- iwlwifi: fw: init SAR GEO table only if data is present (bsc#1202131).
- iwlwifi: fw: make dump_start callback void (bsc#1202131).
- iwlwifi: fw: remove dead error log code (bsc#1202131).
- iwlwifi: implement reset flow for Bz devices (bsc#1202131).
- iwlwifi: iwl-eeprom-parse: mostly dvm only (bsc#1202131).
- iwlwifi: make iwl_fw_lookup_cmd_ver() take a cmd_id (bsc#1202131).
- iwlwifi: make iwl_txq_dyn_alloc_dma() return the txq (bsc#1202131).
- iwlwifi: make some functions friendly to sparse (bsc#1202131).
- iwlwifi: move symbols into a separate namespace (bsc#1202131).
- iwlwifi: mvm/api: define system control command (bsc#1202131).
- iwlwifi: mvm: Add RTS and CTS flags to iwl_tx_cmd_flags (bsc#1202131).
- iwlwifi: mvm: Add list of OEMs allowed to use TAS (bsc#1202131).
- iwlwifi: mvm: Add support for a new version of scan request command (bsc#1202131).
- iwlwifi: mvm: Add support for new rate_n_flags in tx_cmd (bsc#1202131).
- iwlwifi: mvm: Consider P2P GO operation during scan (bsc#1202131).
- iwlwifi: mvm: Disable WiFi bands selectively with BIOS (bsc#1202131).
- iwlwifi: mvm: Do not fail if PPAG isn't supported (bsc#1202131).
- iwlwifi: mvm: Fix wrong documentation for scan request command (bsc#1202131).
- iwlwifi: mvm: Passively scan non PSC channels only when requested so (bsc#1202131).
- iwlwifi: mvm: Read acpi dsm to get channel activation bitmap (bsc#1202131).
- iwlwifi: mvm: Remove antenna c references (bsc#1202131).
- iwlwifi: mvm: Support new TX_RSP and COMPRESSED_BA_RES versions (bsc#1202131).
- iwlwifi: mvm: Support new rate_n_flags for REPLY_RX_MPDU_CMD and RX_NO_DATA_NOTIF (bsc#1202131).
- iwlwifi: mvm: Support new version of BEACON_TEMPLATE_CMD (bsc#1202131).
- iwlwifi: mvm: Support new version of ranging response notification (bsc#1202131).
- iwlwifi: mvm: Support version 3 of tlc_update_notif (bsc#1202131).
- iwlwifi: mvm: Unify the scan iteration functions (bsc#1202131).
- iwlwifi: mvm: Use all Rx chains for roaming scan (bsc#1202131).
- iwlwifi: mvm: add US/CA to TAS block list if OEM isn't allowed (bsc#1202131).
- iwlwifi: mvm: add a flag to reduce power command (bsc#1202131).
- iwlwifi: mvm: add additional info for boot info failures (bsc#1202131).
- iwlwifi: mvm: add dbg_time_point to debugfs (bsc#1202131).
- iwlwifi: mvm: add definitions for new rate &amp; flags (bsc#1202131).
- iwlwifi: mvm: add lmac/umac PC info in case of error (bsc#1202131).
- iwlwifi: mvm: add missing min_size to kernel-doc (bsc#1202131).
- iwlwifi: mvm: add some missing command strings (bsc#1202131).
- iwlwifi: mvm: add support for 160Mhz in ranging measurements (bsc#1202131).
- iwlwifi: mvm: add support for CT-KILL notification version 2 (bsc#1202131).
- iwlwifi: mvm: add support for IMR based on platform (bsc#1202131).
- iwlwifi: mvm: add support for OCE scan (bsc#1202131).
- iwlwifi: mvm: add support for PHY context command v4 (bsc#1202131).
- iwlwifi: mvm: add support for statistics update version 15 (bsc#1202131).
- iwlwifi: mvm: allow enabling UHB TAS in the USA via ACPI setting (bsc#1202131).
- iwlwifi: mvm: always remove the session protection after association (bsc#1202131).
- iwlwifi: mvm: always store the PPAG table as the latest version (bsc#1202131).
- iwlwifi: mvm: always use 4K RB size by default (bsc#1202131).
- iwlwifi: mvm: change old-SN drop threshold (bsc#1202131).
- iwlwifi: mvm: clean up indenting in iwl_mvm_tlc_update_notif() (bsc#1202131).
- iwlwifi: mvm: convert old rate &amp; flags to the new format (bsc#1202131).
- iwlwifi: mvm: correct sta-state logic for TDLS (bsc#1202131).
- iwlwifi: mvm: correctly set channel flags (bsc#1202131).
- iwlwifi: mvm: correctly set schedule scan profiles (bsc#1202131).
- iwlwifi: mvm: d3: move GTK rekeys condition (bsc#1202131).
- iwlwifi: mvm: d3: support v12 wowlan status (bsc#1202131).
- iwlwifi: mvm: d3: use internal data representation (bsc#1202131).
- iwlwifi: mvm: demote non-compliant kernel-doc header (bsc#1202131).
- iwlwifi: mvm: do not get address of mvm-&gt;fwrt just to dereference as a pointer (bsc#1202131).
- iwlwifi: mvm: do not send BAID removal to the FW during hw_restart (bsc#1202131).
- iwlwifi: mvm: do not trust hardware queue number (bsc#1202131).
- iwlwifi: mvm: drop too short packets silently (bsc#1202131).
- iwlwifi: mvm: extend session protection on association (bsc#1202131).
- iwlwifi: mvm: fix WGDS table print in iwl_mvm_chub_update_mcc() (bsc#1202131).
- iwlwifi: mvm: fix a stray tab (bsc#1202131).
- iwlwifi: mvm: fix condition which checks the version of rate_n_flags (bsc#1202131).
- iwlwifi: mvm: fix delBA vs. NSSN queue sync race (bsc#1202131).
- iwlwifi: mvm: fix ieee80211_get_he_iftype_cap() iftype (bsc#1202131).
- iwlwifi: mvm: fix off by one in iwl_mvm_stat_iterator_all_macs() (bsc#1202131).
- iwlwifi: mvm: fw: clean up hcmd struct creation (bsc#1202131).
- iwlwifi: mvm: handle RX checksum on Bz devices (bsc#1202131).
- iwlwifi: mvm: improve log when processing CSA (bsc#1202131).
- iwlwifi: mvm: isolate offload assist (checksum) calculation (bsc#1202131).
- iwlwifi: mvm: make iwl_mvm_reconfig_scd() static (bsc#1202131).
- iwlwifi: mvm: offload channel switch timing to FW (bsc#1202131).
- iwlwifi: mvm: only enable HE DCM if we also support TX (bsc#1202131).
- iwlwifi: mvm: optionally suppress assert log (bsc#1202131).
- iwlwifi: mvm: parse firmware alive message version 6 (bsc#1202131).
- iwlwifi: mvm: read 6E enablement flags from DSM and pass to FW (bsc#1202131).
- iwlwifi: mvm: reduce WARN_ON() in TX status path (bsc#1202131).
- iwlwifi: mvm: refactor iwl_mvm_sta_rx_agg() (bsc#1202131).
- iwlwifi: mvm: refactor setting PPE thresholds in STA_HE_CTXT_CMD (bsc#1202131).
- iwlwifi: mvm: remove card state notification code (bsc#1202131).
- iwlwifi: mvm: remove cipher scheme support (bsc#1202131).
- iwlwifi: mvm: remove csi from iwl_mvm_pass_packet_to_mac80211() (bsc#1202131).
- iwlwifi: mvm: remove iwl_mvm_disable_txq() flags argument (bsc#1202131).
- iwlwifi: mvm: remove session protection after auth/assoc (bsc#1202131).
- iwlwifi: mvm: remove session protection on disassoc (bsc#1202131).
- iwlwifi: mvm: remove session protection upon station removal (bsc#1202131).
- iwlwifi: mvm: rfi: handle deactivation notification (bsc#1202131).
- iwlwifi: mvm: rfi: update rfi table (bsc#1202131).
- iwlwifi: mvm: rfi: use kmemdup() to replace kzalloc + memcpy (bsc#1202131).
- iwlwifi: mvm: scrub key material in firmware dumps (bsc#1202131).
- iwlwifi: mvm: set BT-coex high priority for 802.1X/4-way-HS (bsc#1202131).
- iwlwifi: mvm: set inactivity timeouts also for PS-poll (bsc#1202131).
- iwlwifi: mvm: starting from 22000 we have 32 Rx AMPDU sessions (bsc#1202131).
- iwlwifi: mvm: support Bz TX checksum offload (bsc#1202131).
- iwlwifi: mvm: support RLC configuration command (bsc#1202131).
- iwlwifi: mvm: support new BAID allocation command (bsc#1202131).
- iwlwifi: mvm: support revision 1 of WTAS table (bsc#1202131).
- iwlwifi: mvm: support v3 of station HE context command (bsc#1202131).
- iwlwifi: mvm: update BAID allocation command again (bsc#1202131).
- iwlwifi: mvm: update RFI TLV (bsc#1202131).
- iwlwifi: mvm: update definitions due to new rate &amp; flags (bsc#1202131).
- iwlwifi: mvm: update rate scale in moving back to assoc state (bsc#1202131).
- iwlwifi: mvm: use a define for checksum flags mask (bsc#1202131).
- iwlwifi: mvm: use debug print instead of WARN_ON() (bsc#1202131).
- iwlwifi: nvm: Correct HE capability (bsc#1202131).
- iwlwifi: parse debug exclude data from firmware file (bsc#1202131).
- iwlwifi: parse error tables from debug TLVs (bsc#1202131).
- iwlwifi: pcie: Adapt rx queue write pointer for Bz family (bsc#1202131).
- iwlwifi: pcie: add jacket bit to device configuration parsing (bsc#1202131).
- iwlwifi: pcie: add support for MS devices (bsc#1202131).
- iwlwifi: pcie: adjust to Bz completion descriptor (bsc#1202131).
- iwlwifi: pcie: fix SW error MSI-X mapping (bsc#1202131).
- iwlwifi: pcie: fix constant-conversion warning (bsc#1202131).
- iwlwifi: pcie: fix killer name matching for AX200 (bsc#1202131).
- iwlwifi: pcie: iwlwifi: fix device id 7F70 struct (bsc#1202131).
- iwlwifi: pcie: make sure iwl_rx_packet_payload_len() will not underflow (bsc#1202131).
- iwlwifi: pcie: refactor dev_info lookup (bsc#1202131).
- iwlwifi: pcie: remove duplicate entry (bsc#1202131).
- iwlwifi: pcie: remove two duplicate PNJ device entries (bsc#1202131).
- iwlwifi: pcie: retake ownership after reset (bsc#1202131).
- iwlwifi: pcie: simplify iwl_pci_find_dev_info() (bsc#1202131).
- iwlwifi: pcie: support Bz suspend/resume trigger (bsc#1202131).
- iwlwifi: pcie: try to grab NIC access early (bsc#1202131).
- iwlwifi: pcie: update sw error interrupt for BZ family (bsc#1202131).
- iwlwifi: pnvm: print out the version properly (bsc#1202131).
- iwlwifi: prefer WIDE_ID() over iwl_cmd_id() (bsc#1202131).
- iwlwifi: propagate (const) type qualifier (bsc#1202131).
- iwlwifi: recognize missing PNVM data and then log filename (bsc#1202131).
- iwlwifi: remove MODULE_AUTHOR() statements (bsc#1202131).
- iwlwifi: remove command ID argument from queue allocation (bsc#1202131).
- iwlwifi: remove contact information (bsc#1202131).
- iwlwifi: remove deprecated broadcast filtering feature (bsc#1202131).
- iwlwifi: remove redundant iwl_finish_nic_init() argument (bsc#1202131).
- iwlwifi: remove unused DC2DC_CONFIG_CMD definitions (bsc#1202131).
- iwlwifi: remove unused iwlax210_2ax_cfg_so_hr_a0 structure (bsc#1202131).
- iwlwifi: remove unused macros (bsc#1202131).
- iwlwifi: rename CHANNEL_SWITCH_NOA_NOTIF to CHANNEL_SWITCH_START_NOTIF (bsc#1202131).
- iwlwifi: rename GEO_TX_POWER_LIMIT to PER_CHAIN_LIMIT_OFFSET_CMD (bsc#1202131).
- iwlwifi: rs: add support for TLC config command ver 4 (bsc#1202131).
- iwlwifi: scan: Modify return value of a function (bsc#1202131).
- iwlwifi: support 4-bits in MAC step value (bsc#1202131).
- iwlwifi: support SAR GEO Offset Mapping override via BIOS (bsc#1202131).
- iwlwifi: support new queue allocation command (bsc#1202131).
- iwlwifi: swap 1650i and 1650s killer struct names (bsc#1202131).
- iwlwifi: tlc: Add logs in rs_fw_rate_init func to print TLC configuration (bsc#1202131).
- iwlwifi: use 4k queue size for Bz A-step (bsc#1202131).
- iwlwifi: yoyo: Avoid using dram data if allocation failed (bsc#1202131).
- iwlwifi: yoyo: add IMR DRAM dump support (bsc#1202131).
- iwlwifi: yoyo: disable IMR DRAM region if IMR is disabled (bsc#1202131).
- iwlwifi: yoyo: dump IMR DRAM only for HW and FW error (bsc#1202131).
- iwlwifi: yoyo: fix DBGC allocation flow (bsc#1202131).
- iwlwifi: yoyo: fix DBGI_SRAM ini dump header (bsc#1202131).
- iwlwifi: yoyo: fix issue with new DBGI_SRAM region read (bsc#1202131).
- iwlwifi: yoyo: fw debug config from context info and preset (bsc#1202131).
- iwlwifi: yoyo: send hcmd to fw after dump collection completes (bsc#1202131).
- iwlwifi: yoyo: support TLV-based firmware reset (bsc#1202131).
- iwlwifi: yoyo: support dump policy for the dump size (bsc#1202131).
- iwlwifi: yoyo: support for DBGC4 for dram (bsc#1202131).
- iwlwifi: yoyo: support for ROM usniffer (bsc#1202131).
- ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (git-fixes).
- ixgbe: fix bcast packets Rx on VF after promisc removal (git-fixes).
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF (git-fixes).
- jbd2: export jbd2_journal_[grab|put]_journal_head (bsc#1202775).
- jbd2: fix assertion 'jh-&gt;b_frozen_data == NULL' failure when journal aborted (bsc#1202716).
- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (bsc#1202715).
- kABI workaround for spi changes (bsc#1203699).
- kABI: Add back removed struct paca member (bsc#1203664 ltc#199236).
- kABI: Fix after adding trace_iterator.wait_index (git-fixes).
- kABI: Fix kABI after &quot;KVM: x86/pmu: Use different raw event masks for AMD and Intel&quot; (git-fixes).
- kABI: Fix kABI after SNP-Guest backport (jsc#SLE-19924, jsc#SLE-24814).
- kABI: Fix kABI after backport Add pmc-&gt;intr to refactor  kvm_perf_overflow{_intr}() (git-fixes).
- kABI: Fix kABI after backport Always set kvm_run-&gt;if_flag (git-fixes).
- kABI: Fix kABI after backport Forcibly leave nested virt when SMM state  is toggled (git-fixes).
- kABI: Fix kABI after backport Refactoring find_arch_event() to  pmc_perf_hw_id() (git-fixes).
- kABI: fix adding another field to scsi_device (bsc#1203039).
- kABI: reintroduce a non-inline usleep_range (git-fixes).
- kABI: scsi: libiscsi: fix removal of iscsi_create_conn (bsc#1198410).
- kabi/severities: Exclude ppc kvm
- kabi/severities: add Qlogic qed symbols
- kabi/severities: add drivers/scsi/hisi_sas for bsc#1202471
- kabi/severities: add hisilicon hns3 symbols
- kabi/severities: add microchip dsa drivers
- kabi/severities: ignore CS35L41-specific exports (bsc#1203699)
- kabi/severities: ignore kABI changes in mwifiex drivers Those symbols are used only locally in mwifiex (sub-)modules.
- kabi/severities: octeontx2 driver (jsc#SLE-24682)
- kbuild: Add skip_encoding_btf_enum64 option to pahole (git-fixes).
- kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693).
- kbuild: disable header exports for UML in a straightforward way (git-fixes).
- kbuild: dummy-tools: avoid tmpdir leak in dummy gcc (git-fixes).
- kbuild: fix the modules order between drivers and libs (git-fixes).
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) (git-fixes).
- kbuild: remove the target in signal traps when interrupted (git-fixes).
- kbuild: rpm-pkg: fix breakage when V=1 is used (git-fixes).
- kcm: fix strp_init() order and cleanup (git-fies).
- kernel-binary: move @NOSOURCE@ to @SOURCES@ as in other packages
- kernel-source: include the kernel signature file We assume that the upstream tarball is used for released kernels. Then we can also include the signature file and keyring in the kernel-source src.rpm. Because of mkspec code limitation exclude the signature and keyring from binary packages always - mkspec does not parse spec conditionals.
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification (bsc#1196444).
- kexec, KEYS: make the code in bzImage64_verify_sig generic (bsc#1196444).
- kexec: clean up arch_kexec_kernel_verify_sig (bsc#1196444).
- kexec: drop weak attribute from functions (bsc#1196444).
- kexec: turn all kexec_mutex acquisitions into trylocks (git-fixes).
- kexec_file: drop weak attribute from functions (bsc#1196444).
- kfifo: fix kfifo_to_user() return type (git-fixes).
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (git-fixes).
- kselftest/cgroup: fix test_stress.sh to use OUTPUT dir (git-fixes).
- kselftest/vm: fix tests build with old libc (git-fixes).
- kselftest: Fix vdso_test_abi return status (git-fixes).
- kselftest: signal all child processes (git-fixes).
- kvm: selftests: do not use bitfields larger than 32-bits for PTEs (git-fixes).
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (git-fixes).
- landlock: Add clang-format exceptions (git-fixes).
- landlock: Change landlock_add_rule(2) argument check ordering (git-fixes).
- landlock: Change landlock_restrict_self(2) check ordering (git-fixes).
- landlock: Create find_rule() from unmask_layers() (git-fixes).
- landlock: Define access_mask_t to enforce a consistent access mask size (git-fixes).
- landlock: Fix landlock_add_rule(2) documentation (git-fixes).
- landlock: Fix same-layer rule unions (git-fixes).
- landlock: Format with clang-format (git-fixes).
- landlock: Reduce the maximum number of layers to 16 (git-fixes).
- landlock: Use square brackets around &quot;landlock-ruleset&quot; (git-fixes).
- lib/list_debug.c: Detect uninitialized lists (git-fixes).
- lib/raid6/test: fix multiple definition linking error (git-fixes).
- lib/sg_pool: change module_init(sg_pool_init) to subsys_initcall (git-fixes).
- lib/smp_processor_id: fix imbalanced instrumentation_end() call (git-fixes).
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (git-fixes).
- livepatch: Add a missing newline character in klp_module_coming() (bsc#1071995).
- livepatch: fix race between fork and KLP transition (bsc#1071995).
- lkdtm: Disable return thunks in rodata.c (bsc#1190497).
- lockd: detect and reject lock arguments that overflow (git-fixes).
- lockdep: Correct lock_classes index mapping (git-fixes).
- locking/lockdep: Avoid potential access of invalid memory in lock_class (git-fixes).
- locking/lockdep: Fix lockdep_init_map_*() confusion (git-fixes).
- locking/lockdep: Iterate lock_classes directly when reading lockdep files (git-fixes).
- loop: Check for overflow while configuring loop (git-fies).
- loop: Use pr_warn_once() for loop_control_remove() warning (git-fixes).
- loop: use sysfs_emit() in the sysfs xxx show() (git-fixes).
- mISDN: fix misuse of put_device() in mISDN_register_device() (git-fixes).
- mISDN: fix possible memory leak in mISDN_dsp_element_register() (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device() (git-fixes).
- mISDN: fix use-after-free bugs in l1oip timer handlers (git-fixes).
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (git-fixes).
- mac80211: fix a memory leak where sta_info is not freed (git-fixes).
- mac80211: introduce channel switch disconnect function (bsc#1202131).
- mac80211: radiotap: Use BIT() instead of shifts (git-fixes).
- mac802154: Fix LQI recording (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (git-fixes).
- macsec: Fix invalid error code set (git-fixes).
- macsec: add missing attribute validation for offload (git-fixes).
- macsec: always read MACSEC_SA_ATTR_PN as a u64 (git-fixes).
- macsec: clear encryption keys from the stack after setting up offload (git-fixes).
- macsec: delete new rxsc when offload fails (git-fixes).
- macsec: fix NULL deref in macsec_add_rxsa (git-fixes).
- macsec: fix detection of RXSCs when toggling offloading (git-fixes).
- macsec: fix error message in macsec_add_rxsa and _txsa (git-fixes).
- macsec: fix secy-&gt;n_rx_sc accounting (git-fixes).
- macsec: limit replay window size with XPN (git-fixes).
- macvlan: enforce a consistent minimal mtu (git-fixes).
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (git-fixes).
- mailbox: mpfs: account for mbox offsets while sending (git-fixes).
- mailbox: mpfs: fix handling of the reg property (git-fixes).
- marvell: octeontx2: build error: unknown type name 'u64' (jsc#SLE-24682).
- mbcache: add functions to delete entry if unused (bsc#1198971).
- mbcache: do not reclaim used entries (bsc#1198971).
- md-raid10: fix KASAN warning (git-fixes).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- md/raid0: Ignore RAID0 layout if the second zone has only one device (git-fixes).
- md/raid1: fix missing bitmap update w/o WriteMostly devices (bsc#1203036).
- md/raid5: Ensure stripe_fill happens on non-read IO with journal (git-fixes).
- md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (git-fixes).
- md: Replace snprintf with scnprintf (git-fixes, bsc#1164051).
- md: call __md_stop_writes in md_stop (git-fixes).
- md: unlock mddev before reap sync_thread in action_store (bsc#1197659).
- media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator (git-fixes).
- media: aspeed: Fix an error handling path in aspeed_video_probe() (git-fixes).
- media: atmel: atmel-sama7g5-isc: fix warning in configs without OF (git-fixes).
- media: atomisp: prevent integer overflow in sh_css_set_black_frame() (git-fixes).
- media: cedrus: Fix endless loop in cedrus_h265_skip_bits() (git-fixes).
- media: cedrus: Set the platform driver data earlier (git-fixes).
- media: cedrus: h265: Fix flag name (git-fixes).
- media: cedrus: hevc: Add check for invalid timestamp (git-fixes).
- media: coda: Add more H264 levels for CODA960 (git-fixes).
- media: coda: Fix reported H264 profile (git-fixes).
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes).
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (git-fixes).
- media: driver/nxp/imx-jpeg: fix a unexpected return value problem (git-fixes).
- media: dvb-frontends/drxk: initialize err to 0 (git-fixes).
- media: dvb_vb2: fix possible out of bound access (git-fixes).
- media: exynos4-is: Change clk_disable to clk_disable_unprepare (git-fixes).
- media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe (git-fixes).
- media: flexcop-usb: fix endpoint type check (git-fixes).
- media: hantro: postproc: Fix motion vector space size (git-fixes).
- media: hdpvr: fix error value returns in hdpvr_read (git-fixes).
- media: hevc: Embedded indexes in RPS (git-fixes).
- media: imx-jpeg: Add pm-runtime support for imx-jpeg (git-fixes).
- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- media: imx-jpeg: Correct some definition according specification (git-fixes).
- media: imx-jpeg: Disable slot interrupt when frame done (git-fixes).
- media: imx-jpeg: Fix potential array out of bounds in queue_setup (git-fixes).
- media: imx-jpeg: Leave a blank space before the configuration data (git-fixes).
- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- media: imx-jpeg: use NV12M to represent non contiguous NV12 (git-fixes).
- media: ipu3-imgu: Fix NULL pointer dereference in active selection access (git-fixes).
- media: mceusb: Use new usb_control_msg_*() routines (git-fixes).
- media: mceusb: set timeout to at least timeout provided (git-fixes).
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (git-fixes).
- media: meson: vdec: fix possible refcount leak in vdec_probe() (git-fixes).
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- media: pvrusb2: fix memory leak in pvr_probe (git-fixes).
- media: rkisp1: Do not pass the quantization to rkisp1_csm_config() (git-fixes).
- media: rkisp1: Initialize color space on resizer sink and source pads (git-fixes).
- media: rkisp1: Use correct macro for gradient registers (git-fixes).
- media: rkisp1: Zero v4l2_subdev_format fields in when validating links (git-fixes).
- media: rkvdec: Disable H.264 error detection (git-fixes).
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes).
- media: st-delta: Fix PM disable depth imbalance in delta_probe (git-fixes).
- media: tw686x: Fix memory leak in tw686x_video_init (git-fixes).
- media: tw686x: Register the irq at the end of probe (git-fixes).
- media: uvcvideo: Fix memory leak in uvc_gpio_parse (git-fixes).
- media: uvcvideo: Use entity get_cur in uvc_ctrl_set (git-fixes).
- media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (git-fixes).
- media: v4l2-dv-timings: add sanity checks for blanking values (git-fixes).
- media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set (git-fixes).
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (git-fixes).
- media: v4l: subdev: Fail graciously when getting try data for NULL state (git-fixes).
- media: venus: dec: Handle the case where find_format fails (git-fixes).
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (git-fixes).
- media: vivid: dev-&gt;bitmap_cap wasn't freed in all cases (git-fixes).
- media: vivid: s_fbuf: add more sanity checks (git-fixes).
- media: vivid: set num_in/outputs to 0 if not supported (git-fixes).
- media: vsp1: Fix offset calculation for plane cropping.
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (git-fixes).
- mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() (git-fixes).
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (git-fixes).
- memory: of: Fix refcount leak bug in of_get_ddr_timings() (git-fixes).
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (git-fixes).
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (git-fixes).
- memstick/ms_block: Fix a memory leak (git-fixes).
- memstick/ms_block: Fix some incorrect memory allocation (git-fixes).
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (git-fixes).
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (git-fixes).
- mfd: fsl-imx25: Fix check for platform_get_irq() errors (git-fixes).
- mfd: intel-lpss: Add Intel Raptor Lake PCH-S PCI IDs (jsc#PED-634).
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (git-fixes).
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (git-fixes).
- mfd: lp8788: Fix an error handling path in lp8788_probe() (git-fixes).
- mfd: max77620: Fix refcount leak in max77620_initialise_fps (git-fixes).
- mfd: sm501: Add check for platform_driver_register() (git-fixes).
- mfd: t7l66xb: Drop platform disable callback (git-fixes).
- minix: fix bug when opening a file with O_DIRECT (git-fixes).
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (git-fixes).
- misc: cs35l41: Remove unused pdn variable (bsc#1203699).
- misc: fastrpc: fix memory corruption on open (git-fixes).
- misc: fastrpc: fix memory corruption on probe (git-fixes).
- misc: ocxl: fix possible refcount leak in afu_ioctl() (git-fixes).
- misc: pci_endpoint_test: Aggregate params checking for xfer (git-fixes).
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (git-fixes).
- misc: rtsx: Fix an error handling path in rtsx_pci_probe() (git-fixes).
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- mlxsw: i2c: Fix initialization error flow (git-fixes).
- mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice (git-fixes).
- mlxsw: spectrum_cnt: Reorder counter pools (git-fixes).
- mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (git-fixes).
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (bsc#1204575).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes). kABI: Fix kABI after &quot;mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse&quot; (git-fixes).
- mm: Fix PASID use-after-free issue (bsc#1203908).
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered (bsc#1197763).
- mm: memcontrol: fix potential oom_lock recursion deadlock (bsc#1202447).
- mm: pagewalk: Fix race between unmap and page walker (git-fixes, bsc#1203159).
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (git-fixes).
- mmc: block: Add single read for 4k sector cards (git-fixes).
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop (git-fixes).
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (git-fixes).
- mmc: core: Fix UHS-I SD 1.8V workaround branch (git-fixes).
- mmc: core: Fix ambiguous TRIM and DISCARD arg (git-fixes).
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (git-fixes).
- mmc: core: Fix kernel panic when remove non-standard SDIO card (git-fixes).
- mmc: core: Replace with already defined values for readability (git-fixes).
- mmc: core: Terminate infinite loop in SD-UHS voltage switch (git-fixes).
- mmc: core: properly select voltage range without power cycle (git-fixes).
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (git-fixes).
- mmc: hsq: Fix data stomping during mmc recovery (git-fixes).
- mmc: meson-gx: Fix an error handling path in meson_mmc_probe() (git-fixes).
- mmc: mmc_test: Fix removal of debugfs file (git-fixes).
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (git-fixes).
- mmc: mxcmmc: Silence a clang warning (git-fixes).
- mmc: pxamci: Fix an error handling path in pxamci_probe() (git-fixes).
- mmc: pxamci: Fix another error handling path in pxamci_probe() (git-fixes).
- mmc: renesas_sdhi: Get the reset handle early in the probe (git-fixes).
- mmc: sdhci-brcmstb: Enable Clock Gating to save power (git-fixes).
- mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci-brcmstb: Re-organize flags (git-fixes).
- mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (git-fixes).
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (git-fixes).
- mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (git-fixes).
- mmc: sdhci-msm: add compatible string check for sdm670 (git-fixes).
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (git-fixes).
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (git-fixes).
- mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (git-fixes).
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (git-fixes).
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (git-fixes).
- mmc: sdhci-sprd: Fix minimum clock limit (git-fixes).
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch (git-fixes).
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (git-fixes).
- mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: tmio: avoid glitches when resetting (git-fixes).
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (git-fixes).
- mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- module: change to print useful messages from elf_validity_check() (git-fixes).
- module: fix [e_shstrndx].sh_size=0 OOB access (git-fixes).
- msft-hv-2570-hv_netvsc-Add-support-for-XDP_REDIRECT.patch: (bsc#1199364).
- mt76: mt7615: do not update pm stats in case of error (git-fixes).
- mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (git-fixes).
- mt76: mt7921: enlarge maximum VHT MPDU length to 11454 (git-fixes).
- mt76: mt7921: fix aggregation subframes setting to HE max (git-fixes).
- mtd: dataflash: Add SPI ID table (git-fixes).
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe (git-fixes).
- mtd: maps: Fix refcount leak in ap_flash_init (git-fixes).
- mtd: maps: Fix refcount leak in of_flash_probe_versatile (git-fixes).
- mtd: parsers: bcm47xxpart: Fix halfblock reads (git-fixes).
- mtd: parsers: bcm47xxpart: print correct offset on read error (git-fixes).
- mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset (git-fixes).
- mtd: partitions: Fix refcount leak in parse_redboot_of (git-fixes).
- mtd: rawnand: arasan: Fix clock rate in NV-DDR (git-fixes).
- mtd: rawnand: arasan: Update NAND bus clock instead of system clock (git-fixes).
- mtd: rawnand: atmel: Unmap streaming DMA mappings (git-fixes).
- mtd: rawnand: fsl_elbc: Fix none ECC mode (git-fixes).
- mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (git-fixes).
- mtd: rawnand: gpmi: validate controller clock rate (git-fixes).
- mtd: rawnand: intel: Do not re-define NAND_DATA_IFACE_CHECK_ONLY (git-fixes).
- mtd: rawnand: intel: Read the chip-select line from the correct OF node (git-fixes).
- mtd: rawnand: intel: Remove undocumented compatible string (git-fixes).
- mtd: rawnand: marvell: Use correct logic for nand-keep-config (git-fixes).
- mtd: rawnand: meson: Fix a potential double free issue (git-fixes).
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (git-fixes).
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (git-fixes).
- mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() (git-fixes).
- mtd: spi-nor: intel-spi: Disable write protection only if asked (git-fixes).
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (git-fixes).
- musb: fix USB_MUSB_TUSB6010 dependency (git-fixes).
- mwifiex: Ignore BTCOEX events from the 88W8897 firmware (git-fixes).
- mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv (git-fixes).
- n_gsm: remove unused parameters from gsm_error() (git-fixes).
- nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (git-fixes).
- net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() (git-fixes).
- net/ice: fix initializing the bitmap in the switch code (git-fixes).
- net/ieee802154: fix uninit value bug in dgram_sendmsg (git-fixes).
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure (git-fixes).
- net/mlx5: CT: Fix header-rewrite re-use for tupels (git-fixes).
- net/mlx5: Drain fw_reset when removing device (git-fixes).
- net/mlx5e: Block rx-gro-hw feature in switchdev mode (git-fixes).
- net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition (git-fixes).
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (git-fixes).
- net/mlx5e: Properly block HW GRO when XDP is enabled (git-fixes).
- net/mlx5e: Properly block LRO when XDP is enabled (git-fixes).
- net/mlx5e: Properly disable vlan strip on non-UL reps (git-fixes).
- net/mlx5e: Remove HW-GRO from reported features (git-fixes).
- net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (git-fixes).
- net/mlx5e: Ring the TX doorbell on DMA errors (git-fixes).
- net/mlx5e: TC NIC mode, fix tc chains miss table (git-fixes).
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (git-fixes).
- net/mlx5e: Update netdev features after changing XDP state (git-fixes).
- net/mlx5e: xsk: Account for XSK RQ UMRs when calculating ICOSQ size (git-fixes).
- net/qla3xxx: Fix a test in ql_reset_work() (git-fixes).
- net/smc: Avoid overwriting the copies of clcsock callback functions (git-fixes).
- net/smc: Fix an error code in smc_lgr_create() (git-fixes).
- net/smc: Fix possible access to freed memory in link clear (git-fixes).
- net/smc: Fix possible leaked pernet namespace in smc_init() (git-fixes).
- net/smc: Fix slab-out-of-bounds issue in fallback (git-fixes).
- net/smc: Fix sock leak when release after smc_shutdown() (git-fixes).
- net/smc: Forward wakeup to smc socket waitqueue after fallback (git-fixes).
- net/smc: Only save the original clcsock callback functions (git-fixes).
- net/smc: Send directly when TCP_CORK is cleared (git-fixes).
- net/smc: kABI workarounds for struct smc_link (git-fixes).
- net/smc: kABI workarounds for struct smc_sock (git-fixes).
- net/smc: send directly on setting TCP_NODELAY (git-fixes).
- net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (git-fixes).
- net/x25: Fix skb leak in x25_lapb_receive_frame() (git-fixes).
- net: altera: Fix refcount leak in altera_tse_mdio_create (git-fixes).
- net: asix: fix &quot;can't send until first packet is send&quot; issue (git-fixes).
- net: atlantic: fix aq_vec index out of range error (git-fixes).
- net: axienet: fix RX ring refill allocation failure handling (git-fixes).
- net: axienet: reset core on initialization prior to MDIO access (git-fixes).
- net: bcmgenet: Indicate MAC is in charge of PHY PM (git-fixes).
- net: bcmgenet: Revert &quot;Use stronger register read/writes to assure ordering&quot; (git-fixes).
- net: bcmgenet: Use stronger register read/writes to assure ordering (git-fixes).
- net: bcmgenet: hide status block before TX timestamping (git-fixes).
- net: bgmac: Fix a BUG triggered by wrong bytes_compl (git-fixes).
- net: bgmac: Fix an erroneous kfree() in bgmac_remove() (git-fixes).
- net: bgmac: support MDIO described in DT (git-fixes).
- net: bonding: fix possible NULL deref in rlb code (git-fixes).
- net: bonding: fix use-after-free after 802.3ad slave unbind (git-fixes).
- net: chelsio: cxgb4: Avoid potential negative array offset (git-fixes).
- net: cpsw: add missing of_node_put() in cpsw_probe_dt() (git-fixes).
- net: dp83822: disable false carrier interrupt (git-fixes).
- net: dp83822: disable rx error interrupt (git-fixes).
- net: dsa: b53: Add SPI ID table (git-fixes).
- net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() (git-fixes).
- net: dsa: bcm_sf2: force pause link settings (git-fixes).
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator (git-fixes).
- net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering (git-fixes).
- net: dsa: felix: fix tagging protocol changes with multiple CPU ports (git-fixes).
- net: dsa: felix: purge skb from TX timestamping queue if it cannot be sent (git-fies).
- net: dsa: felix: suppress -EPROBE_DEFER errors (git-fixes).
- net: dsa: hellcreek: Add STP forwarding rule (git-fixes).
- net: dsa: hellcreek: Add missing PTP via UDP rules (git-fixes).
- net: dsa: hellcreek: Allow PTP P2P measurements on blocked ports (git-fixes).
- net: dsa: hellcreek: Fix insertion of static FDB entries (git-fixes).
- net: dsa: introduce helpers for iterating through ports using dp (git-fixes).
- net: dsa: ksz9477: port mirror sniffing limited to one port (git-fixes).
- net: dsa: lantiq_gswip: Do not set GSWIP_MII_CFG_RMII_CLK (git-fixes).
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list (git-fixes).
- net: dsa: lantiq_gswip: fix use after free in gswip_remove() (git-fixes).
- net: dsa: microchip: fix bridging with more than two member ports (git-fixes).
- net: dsa: microchip: implement multi-bridge support (git-fixes).
- net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (git-fixes).
- net: dsa: microchip: ksz_common: Fix refcount leak bug (git-fixes).
- net: dsa: mt7530: 1G can also support 1000BASE-X link mode (git-fixes).
- net: dsa: mt7530: add missing of_node_put() in mt7530_setup() (git-fixes).
- net: dsa: mv88e6060: prevent crash on an unused port (git-fixes).
- net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family (git-fixes).
- net: dsa: mv88e6xxx: Drop unnecessary check in mv88e6393x_serdes_erratum_4_6() (git-fixes).
- net: dsa: mv88e6xxx: Enable port policy support on 6097 (git-fixes).
- net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X (git-fixes).
- net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family (git-fixes).
- net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr (git-fixes).
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register (git-fixes).
- net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed (git-fixes).
- net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver (git-fixes).
- net: dsa: mv88e6xxx: Unforce speed &amp; duplex in mac_link_down() (git-fixes).
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports (git-fixes).
- net: dsa: mv88e6xxx: error handling for serdes_power functions (git-fixes).
- net: dsa: mv88e6xxx: fix &quot;do not use PHY_DETECT on internal PHY's&quot; (git-fixes).
- net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete (git-fixes).
- net: dsa: ocelot: seville: utilize of_mdiobus_register (git-fixes).
- net: dsa: qca8k: fix MTU calculation (git-fixes).
- net: dsa: restrict SMSC_LAN9303_I2C kconfig (git-fixes).
- net: dsa: seville: register the mdiobus under devres (git-fixes).
- net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() (git-fixes).
- net: dsa: sja1105: silent spi_device_id warnings (git-fixes).
- net: dsa: tag_ocelot_8021q: break circular dependency with ocelot switch lib (git-fies).
- net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (git-fixes).
- net: emaclite: Add error handling for of_address_to_resource() (git-fixes).
- net: enetc: Use pci_release_region() to release some resources (git-fixes).
- net: enetc: report software timestamping via SO_TIMESTAMPING (git-fixes).
- net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register (git-fixes).
- net: ethernet: mediatek: ppe: fix wrong size passed to memset() (git-fixes).
- net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() (git-fixes).
- net: ethernet: nixge: fix NULL dereference (git-fixes).
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (git-fixes).
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (git-fixes).
- net: ethernet: stmmac: fix write to sgmii_adapter_base (git-fixes).
- net: ethernet: ti: am65-cpsw: Fix devlink port register sequence (git-fixes).
- net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (git-fixes).
- net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (git-fixes).
- net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (git-fixes).
- net: fec: add missing of_node_put() in fec_enet_init_stop_mode() (git-fixes).
- net: fix IFF_TX_SKB_NO_LINEAR definition (git-fixes).
- net: ftgmac100: Hold reference returned by of_get_child_by_name() (git-fixes).
- net: ftgmac100: access hardware register after clock ready (git-fixes).
- net: hns3: add netdev reset check for hns3_set_tunable() (git-fixes).
- net: hns3: clean residual vf config after disable sriov (git-fixes).
- net: hns3: do not push link state to VF if unalive (git-fixes).
- net: hns3: fix the concurrency between functions reading debugfs (git-fixes).
- net: hns3: set port base vlan tbl_sta to false before removing old vlan (git-fixes).
- net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() (git-fixes).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: ieee802154: return -EINVAL for unknown addr type (git-fixes).
- net: ipa: do not assume SMEM is page-aligned (git-fixes).
- net: ipa: get rid of a duplicate initialization (git-fixes).
- net: ipa: kill ipa_cmd_pipeline_clear() (git-fixes).
- net: ipa: record proper RX transaction count (git-fixes).
- net: ipvtap - add __init/__exit annotations to module init/exit funcs (git-fixes).
- net: macb: Fix PTP one step sync support (git-fixes).
- net: macb: Increment rx bd head after allocating skb and buffer (git-fixes).
- net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() (git-fixes).
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add support of XDP_REDIRECT action (bug#1201310, jsc#PED-529).
- net: mana: Add the Linux MANA PF driver (bug#1201309, jsc#PED-529).
- net: mana: Fix race on per-CQ variable napi work_done (git-fixes).
- net: marvell: prestera: fix incorrect structure access (git-fixes).
- net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (git-fixes).
- net: mdiobus: fix unbalanced node reference count (git-fixes).
- net: moxa: get rid of asymmetry in DMA mapping/unmapping (git-fixes).
- net: moxa: pass pdev instead of ndev to DMA functions (git-fixes).
- net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters (git-fixes).
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool (git-fixes).
- net: mscc: ocelot: create a function that replaces an existing VCAP filter (git-fixes).
- net: mscc: ocelot: do not dereference NULL pointers with shared tc filters (git-fixes).
- net: mscc: ocelot: do not downgrade timestamping RX filters in SIOCSHWTSTAMP (git-fixes).
- net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups (git-fixes).
- net: mscc: ocelot: fix address of SYS_COUNT_TX_AGING counter (git-fixes).
- net: mscc: ocelot: fix all IP traffic getting trapped to CPU with PTP over IP (git-fixes).
- net: mscc: ocelot: fix broken IP multicast flooding (git-fixes).
- net: mscc: ocelot: fix incorrect balancing with down LAG ports (git-fixes).
- net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted (git-fixes).
- net: mscc: ocelot: fix missing unlock on error in ocelot_hwstamp_set() (git-fixes).
- net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 (git-fixes).
- net: mscc: ocelot: set up traps for PTP packets (git-fixes).
- net: openvswitch: do not send internal clone attribute to the userspace (git-fixes).
- net: openvswitch: fix leak of nested actions (git-fixes).
- net: openvswitch: fix misuse of the cached connection on tuple changes (git-fixes).
- net: openvswitch: fix parsing of nw_proto for IPv6 fragments (git-fixes).
- net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii (git-fixes).
- net: phy: Do not WARN for PHY_READY state in mdio_bus_phy_resume() (git-fixes).
- net: phy: Do not WARN for PHY_UP state in mdio_bus_phy_resume() (git-fixes).
- net: phy: Warn about incorrect mdio_bus_phy_resume() state (git-fixes).
- net: phy: aquantia: wait for the suspend/resume operations to finish (git-fixes).
- net: phy: at803x: move page selection fix to config_init (git-fixes).
- net: phy: dp83822: disable MDI crossover status change interrupt (git-fixes).
- net: phy: dp83867: Extend RX strap quirk for SGMII mode (git-fixes).
- net: phy: fix null-ptr-deref while probe() failed (git-fixes).
- net: phy: marvell: add sleep time after enabling the loopback bit (git-fixes).
- net: phy: mscc: macsec: clear encryption keys when freeing a flow (git-fixes).
- net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode (git-fixes).
- net: ptp: add a definition for the UDP port for IEEE 1588 general messages (git-fixes).
- net: rose: fix netdev reference changes (git-fixes).
- net: smsc95xx: add support for Microchip EVB-LAN8670-USB (git-fixes).
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (git-fixes).
- net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL (git-fixes).
- net: sparx5: uses, depends on BRIDGE or !BRIDGE (git-fixes).
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (git-fixes).
- net: stmmac: Use readl_poll_timeout_atomic() in atomic state (git-fixes).
- net: stmmac: clean up impossible condition (git-fixes).
- net: stmmac: disable Split Header (SPH) for Intel platforms (bsc#1194904).
- net: stmmac: dwc-qos: Disable split header for Tegra194 (bsc#1194904).
- net: stmmac: dwmac-qcom-ethqos: Enable RGMII functional clock on resume (git-fixes).
- net: stmmac: dwmac-qcom-ethqos: add platform level clocks management (git-fixes).
- net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (git-fixes).
- net: stmmac: enhance XDP ZC driver level switching performance (git-fixes).
- net: stmmac: fix dma queue left shift overflow issue (git-fixes).
- net: stmmac: fix leaks in probe (git-fixes).
- net: stmmac: fix off-by-one error in sanity check (git-fixes).
- net: stmmac: fix out-of-bounds access in a selftest (git-fixes).
- net: stmmac: fix pm runtime issue in stmmac_dvr_remove() (git-fixes).
- net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow (git-fixes).
- net: stmmac: only enable DMA interrupts when ready (git-fixes).
- net: stmmac: perserve TX and RX coalesce value during XDP setup (git-fixes).
- net: stmmac: remove redunctant disable xPCS EEE call (git-fixes).
- net: stmmac: remove unused get_addr() callback (git-fixes).
- net: stmmac: work around sporadic tx issue on link-up (git-fixes).
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (git-fixes).
- net: systemport: Fix an error handling path in bcm_sysport_probe() (git-fixes).
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb-&gt;dev is null (git-fixes).
- net: thunderbolt: Enable DMA paths only after rings are enabled (git-fixes).
- net: thunderbolt: Fix error handling in tbnet_init() (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- net: thunderx: Fix the ACPI memory leak (git-fixes).
- net: usb: Correct PHY handling of smsc95xx (git-fixes).
- net: usb: Correct reset handling of smsc95xx (git-fixes).
- net: usb: ax88179_178a needs FLAG_SEND_ZLP (git-fixes).
- net: usb: ax88179_178a: add Allied Telesis AT-UMCs (git-fixes).
- net: usb: make USB_RTL8153_ECM non user configurable (git-fixes).
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).
- net: usb: qmi_wwan: add Quectel RM520N (git-fixes).
- net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes).
- net: usb: r8152: Add in new Devices that are supported for Mac-Passthru (git-fixes).
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (bsc#1200431).
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (bsc#1200431).
- net: vmxnet3: remove multiple false checks in vmxnet3_ethtool.c (bsc#1200431).
- net: wwan: iosm: Call mutex_init before locking it (git-fixes).
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (git-fixes).
- net: wwan: iosm: fix kernel test robot reported error (git-fixes).
- net: wwan: iosm: remove pointless null check (git-fixes).
- net:enetc: allocate CBD ring data memory using DMA coherent methods (git-fixes).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- netdevsim: fib: Fix reference count leak on route deletion failure (git-fixes).
- nfc/nci: fix race with opening and closing (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send() (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (git-fixes).
- nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (git-fixes).
- nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION (git-fixes).
- nfp: ethtool: fix the display error of `ethtool -m DEVNAME` (git-fixes).
- nfsd: eliminate the NFSD_FILE_BREAK_* flags (git-fixes).
- nfsd: fix use-after-free due to delegation race (git-fixes).
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (git-fixes).
- nilfs2: fix deadlock in nilfs_count_free_blocks() (git-fixes).
- nilfs2: fix incorrect masking of permission flags for symlinks (git-fixes).
- nilfs2: fix lockdep warnings during disk space reclamation (git-fixes).
- nilfs2: fix lockdep warnings in page operations for btree nodes (git-fixes).
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (git-fixes).
- nilfs2: fix use-after-free bug of ns_writer on remount (git-fixes).
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (git-fixes).
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() (bnc#1189999 (Scheduler functional and performance backports)).
- nouveau/svm: Fix to migrate all requested pages (git-fixes).
- nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf (git-fies).
- ntb_hw_amd: Add NTB PCI ID for new gen CPU (bsc#1202113).
- nvme-auth: align to pre-upstream FFDHE implementation (bsc#1202265).
- nvme-auth: retry command if DNR bit is not set (bsc#1201675).
- nvme-fabrics: parse nvme connect Linux error codes (bsc#1201865).
- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313 bsc#1201489).
- nvme: consider also host_iface when checking ip options (bsc#1199670).
- nvme: do not print verbose errors for internal passthrough requests (bsc#1202187).
- nvme: fix RCU hole that allowed for endless looping in multipath round robin (bsc#1202636).
- nvme: implement In-Band authentication (jsc#SLE-20183).
- nvme: kabi fixes for in-band authentication (bsc#1199086).
- nvmem: core: Check input parameter for NULL in nvmem_unregister() (bsc#1204241).
- nvmet-auth: expire authentication sessions (jsc#SLE-20183).
- nvmet: Expose max queues to configfs (bsc#1201865).
- nvmet: implement basic In-Band Authentication (jsc#SLE-20183).
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (bsc#1202778).
- ocfs2: fix a deadlock when commit trans (bsc#1202776).
- octeontx2-af: Add KPU changes to parse NGIO as separate layer (jsc#SLE-24682).
- octeontx2-af: Add PTP device id for CN10K and 95O silcons (jsc#SLE-24682).
- octeontx2-af: Add SDP interface support (jsc#SLE-24682).
- octeontx2-af: Add debug messages for failures (jsc#SLE-24682).
- octeontx2-af: Add external ptp input clock (jsc#SLE-24682).
- octeontx2-af: Add free rsrc count mbox msg (jsc#SLE-24682).
- octeontx2-af: Add mbox to retrieve bandwidth profile free count (jsc#SLE-24682).
- octeontx2-af: Add support to flush full CPT CTX cache (jsc#SLE-24682).
- octeontx2-af: Adjust LA pointer for cpt parse header (jsc#SLE-24682).
- octeontx2-af: Allocate low priority entries for PF (jsc#SLE-24682).
- octeontx2-af: Allow to configure flow tag LSB byte as RSS adder (jsc#SLE-24682).
- octeontx2-af: Apply tx nibble fixup always (git-fixes).
- octeontx2-af: Change the order of queue work and interrupt disable (jsc#SLE-24682).
- octeontx2-af: Do not enable Pause frames by default (jsc#SLE-24682).
- octeontx2-af: Enable CPT HW interrupts (jsc#SLE-24682).
- octeontx2-af: Enhance mailbox trace entry (jsc#SLE-24682).
- octeontx2-af: Fix LBK backpressure id count (jsc#SLE-24682).
- octeontx2-af: Fix inconsistent license text (jsc#SLE-24682).
- octeontx2-af: Fix interrupt name strings (jsc#SLE-24682).
- octeontx2-af: Fix key checking for source mac (git-fixes).
- octeontx2-af: Fix mcam entry resource leak (git-fixes).
- octeontx2-af: Fix spelling mistake &quot;Makesure&quot; -&gt; &quot;Make sure&quot; (jsc#SLE-24682).
- octeontx2-af: Fix uninitialized variable val (jsc#SLE-24682).
- octeontx2-af: Flow control resource management (jsc#SLE-24682).
- octeontx2-af: Handle return value in block reset (jsc#SLE-24682).
- octeontx2-af: Hardware configuration for inline IPsec (jsc#SLE-24682).
- octeontx2-af: Increase link credit restore polling timeout (jsc#SLE-24682).
- octeontx2-af: Increase number of reserved entries in KPU (jsc#SLE-24682).
- octeontx2-af: Increment ptp refcount before use (jsc#SLE-24682).
- octeontx2-af: Limit KPU parsing for GTPU packets (jsc#SLE-24682).
- octeontx2-af: Modify install flow error codes (jsc#SLE-24682).
- octeontx2-af: Optimize KPU1 processing for variable-length headers (jsc#SLE-24682).
- octeontx2-af: Perform cpt lf teardown in non FLR path (jsc#SLE-24682).
- octeontx2-af: Priority flow control configuration support (jsc#SLE-24682).
- octeontx2-af: Remove channel verification while installing MCAM rules (jsc#SLE-24682).
- octeontx2-af: Remove redundant initialization of variable blkaddr (jsc#SLE-24682).
- octeontx2-af: Remove redundant initialization of variable pin (jsc#SLE-24682).
- octeontx2-af: Reset PTP config in FLR handler (jsc#SLE-24682).
- octeontx2-af: Retry until RVU block reset complete (jsc#SLE-24682).
- octeontx2-af: Use DMA_ATTR_FORCE_CONTIGUOUS attribute in DMA alloc (jsc#SLE-24682).
- octeontx2-af: Use NDC TX for transmit packet data (jsc#SLE-24682).
- octeontx2-af: Use ptp input clock info from firmware data (jsc#SLE-24682).
- octeontx2-af: Wait for TX link idle for credits change (jsc#SLE-24682).
- octeontx2-af: add proper return codes for AF mailbox handlers (jsc#SLE-24682).
- octeontx2-af: cn10K: Get NPC counters value (jsc#SLE-24682).
- octeontx2-af: cn10K: support for sched lmtst and other features (jsc#SLE-24682).
- octeontx2-af: cn10k: DWRR MTU configuration (jsc#SLE-24682).
- octeontx2-af: cn10k: RPM hardware timestamp configuration (jsc#SLE-24682).
- octeontx2-af: cn10k: Set cache lines for NPA batch alloc (jsc#SLE-24682).
- octeontx2-af: cn10k: Use appropriate register for LMAC enable (jsc#SLE-24682).
- octeontx2-af: cn10k: add workaround for ptp errata (jsc#SLE-24682).
- octeontx2-af: cn10k: debugfs for dumping LMTST map table (jsc#SLE-24682).
- octeontx2-af: configure npc for cn10k to allow packets from cpt (jsc#SLE-24682).
- octeontx2-af: debugfs: Add channel and channel mask (jsc#SLE-24682).
- octeontx2-af: debugfs: Minor changes (jsc#SLE-24682).
- octeontx2-af: debugfs: do not corrupt user memory (jsc#SLE-24682).
- octeontx2-af: debugfs: fix error return of allocations (jsc#SLE-24682).
- octeontx2-af: enable tx shaping feature for 96xx C0 (jsc#SLE-24682).
- octeontx2-af: fix array bound error (jsc#SLE-24682).
- octeontx2-af: fix error code in is_valid_offset() (jsc#SLE-24682).
- octeontx2-af: initialize action variable (jsc#SLE-24682).
- octeontx2-af: nix and lbk in loop mode in 98xx (jsc#SLE-24682).
- octeontx2-af: remove redudant second error check on variable err (jsc#SLE-24682).
- octeontx2-af: suppress external profile loading warning (git-fixes).
- octeontx2-af: use swap() to make code cleaner (jsc#SLE-24682).
- octeontx2-af: verify CQ context updates (jsc#SLE-24682).
- octeontx2-nic: fix mixed module build (jsc#SLE-24682).
- octeontx2-nicvf: Add PTP hardware clock support to NIX VF (jsc#SLE-24682).
- octeontx2-nicvf: Free VF PTP resources (jsc#SLE-24682).
- octeontx2-pf: Add TC feature for VFs (jsc#SLE-24682).
- octeontx2-pf: Add XDP support to netdev PF (jsc#SLE-24682).
- octeontx2-pf: Add check for non zero mcam flows (jsc#SLE-24682).
- octeontx2-pf: Add support for adaptive interrupt coalescing (jsc#SLE-24682).
- octeontx2-pf: Add vlan-etype to ntuple filters (jsc#SLE-24682).
- octeontx2-pf: Allow VLAN priority also in ntuple filters (jsc#SLE-24682).
- octeontx2-pf: CN10K: Hide RPM stats over ethtool (jsc#SLE-24682).
- octeontx2-pf: Do not mask out supported link modes (jsc#SLE-24682).
- octeontx2-pf: Enable NETIF_F_RXALL support for VF driver (jsc#SLE-24682).
- octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (git-fixes).
- octeontx2-pf: Fix UDP/TCP src and dst port tc filters (git-fixes).
- octeontx2-pf: Fix inconsistent license text (jsc#SLE-24682).
- octeontx2-pf: Ntuple filters support for VF netdev (jsc#SLE-24682).
- octeontx2-pf: PFC config support with DCBx (jsc#SLE-24682).
- octeontx2-pf: Remove unnecessary synchronize_irq() before free_irq() (jsc#SLE-24682).
- octeontx2-pf: Simplify the receive buffer size calculation (jsc#SLE-24682).
- octeontx2-pf: Sort the allocated MCAM entry indices (jsc#SLE-24682).
- octeontx2-pf: Unify flow management variables (jsc#SLE-24682).
- octeontx2-pf: Use hardware register for CQE count (jsc#SLE-24682).
- octeontx2-pf: cn10K: Reserve LMTST lines per core (jsc#SLE-24682).
- octeontx2-pf: cn10k: Config DWRR weight based on MTU (jsc#SLE-24682).
- octeontx2-pf: cn10k: Ensure valid pointers are freed to aura (jsc#SLE-24682).
- octeontx2-pf: cn10k: Fix egress ratelimit configuration (git-fixes).
- octeontx2-pf: cn10k: add support for new ptp timestamp format (jsc#SLE-24682).
- octeontx2-pf: devlink params support to set mcam entry count (jsc#SLE-24682).
- octeontx2-pf: replace bitmap_weight with bitmap_empty where appropriate (jsc#SLE-24682).
- octeontx2-pf: select CONFIG_NET_DEVLINK (jsc#SLE-24682).
- octeontx2-vf: Add support for adaptive interrupt coalescing (jsc#SLE-24682).
- octeontx2: Move devlink registration to be last devlink command (jsc#SLE-24682).
- of/device: Fix up of_dma_configure_id() stub (git-fixes).
- of: fdt: fix off-by-one error in unflatten_dt_nodes() (git-fixes).
- openvswitch: Fix double reporting of drops in dropwatch (git-fixes).
- openvswitch: Fix overreporting of drops in dropwatch (git-fixes).
- openvswitch: Fix setting ipv6 fields causing hw csum failure (git-fixes).
- openvswitch: Fixed nd target mask field in the flow dump (git-fixes).
- openvswitch: add nf_ct_is_confirmed check before assigning the helper (git-fixes).
- openvswitch: always update flow key after nat (git-fixes).
- openvswitch: switch from WARN to pr_warn (git-fixes).
- optee: add error checks in optee_ffa_do_call_with_arg() (git-fixes).
- overflow.h: restore __ab_c_size (git-fixes).
- overflow: Implement size_t saturating arithmetic helpers (jsc#PED-1211).
- pNFS/flexfiles: Report RDMA connection errors to the server (git-fixes).
- padata: Fix list iterator in padata_do_serial() (git-fixes).
- panic, kexec: make __crash_kexec() NMI safe (git-fixes).
- parisc/sticon: fix reverse colors (bsc#1152489)
- parisc/stifb: Fix fb_is_primary_device() only available with (bsc#1152489)
- parisc/stifb: Implement fb_is_primary_device() (bsc#1152489)
- parisc/stifb: Keep track of hardware path of graphics card (bsc#1152489)
- parport_pc: Avoid FIFO port location truncation (git-fixes).
- perf bench futex: Fix memory leak of perf_cpu_map__new() (git-fixes).
- phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (git-fixes).
- phy: qualcomm: call clk_disable_unprepare in the error handling (git-fixes).
- phy: ralink: mt7621-pci: add sentinel to quirks table (git-fixes).
- phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks (git-fixes).
- phy: stm32: fix an error code in probe (git-fixes).
- phy: stm32: fix error return in stm32_usbphyc_phy_init (git-fixes).
- pinctrl: Ingenic: JZ4755 bug fixes (git-fixes).
- pinctrl: alderlake: Add Intel Alder Lake-N pin controller support (jsc#PED-676).
- pinctrl: alderlake: Add Raptor Lake-S ACPI ID (jsc#PED-634).
- pinctrl: alderlake: Fix register offsets for ADL-N variant (jsc#PED-676).
- pinctrl: amd: Do not save/restore interrupt status and wake status bits (git-fixes).
- pinctrl: armada-37xx: Add missing GPIO-only pins (git-fixes).
- pinctrl: armada-37xx: Checks for errors in gpio_request_enable callback (git-fixes).
- pinctrl: armada-37xx: Convert to use dev_err_probe() (git-fixes).
- pinctrl: armada-37xx: Fix definitions for MPP pins 20-22 (git-fixes).
- pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() (git-fixes).
- pinctrl: armada-37xx: Use temporary variable for struct device (git-fixes).
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (git-fixes).
- pinctrl: intel: Check against matching data instead of ACPI companion (git-fixes).
- pinctrl: intel: Save and restore pins in &quot;direct IRQ&quot; mode (git-fixes).
- pinctrl: microchip-sgpio: Correct the fwnode_irq_get() return value check (git-fixes).
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (git-fixes).
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (git-fixes).
- pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (git-fixes).
- pinctrl: qcom: sc8180x: Fix wrong pin numbers (git-fixes).
- pinctrl: qcom: sm8250: Fix PDC map (git-fixes).
- pinctrl: rockchip: list all pins in a possible mux route for PX30 (git-fixes).
- pinctrl: single: Fix potential division by zero (git-fixes).
- pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (git-fixes).
- pinctrl: sunxi: Fix name for A100 R_PIO (git-fixes).
- platform/chrome: cros_ec: Always expose last resume result (git-fixes).
- platform/chrome: cros_ec: Notify the PM of wake events during resume (git-fixes).
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (git-fixes).
- platform/chrome: cros_ec_proto: do not show MKBP version if unsupported (git-fixes).
- platform/chrome: cros_ec_typec: Correct alt mode index (git-fixes).
- platform/chrome: fix double-free in chromeos_laptop_prepare() (git-fixes).
- platform/chrome: fix memory corruption in ioctl (git-fixes).
- platform/olpc: Fix uninitialized data in debugfs write (git-fixes).
- platform/surface: aggregator: Do not check for repeated unsequenced packets (git-fixes).
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (git-fixes).
- platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (jsc#PED-2684 bsc#1205683).
- platform/x86/intel: hid: add quirk to support Surface Go 3 (git-fixes).
- platform/x86/intel: pmc: Do not unconditionally attach Intel PMC when virtualized (git-fixes).
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (git-fixes).
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (git-fixes).
- platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute (git-fixes).
- platform/x86: asus-wmi: Document the egpu_enable sysfs attribute (git-fixes).
- platform/x86: asus-wmi: Document the panel_od sysfs attribute (git-fixes).
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (git-fixes).
- platform/x86: hp-wmi: Ignore Smart Experience App event (git-fixes).
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (git-fixes).
- platform/x86: i2c-multi-instantiate: Rename it for a generic serial driver name (bsc#1203699).
- platform/x86: ideapad-laptop: Disable touchpad_switch (git-fixes).
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (git-fixes).
- platform/x86: msi-laptop: Fix old-ec check for backlight registering (git-fixes).
- platform/x86: msi-laptop: Fix resource cleanup (git-fixes).
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (git-fixes).
- platform/x86: pmc_atom: Match all Lex BayTrail boards with critclk_systems DMI table (git-fixes).
- platform/x86: serial-multi-instantiate: Add CLSA0101 Laptop (bsc#1203699).
- platform/x86: serial-multi-instantiate: Add SPI support (bsc#1203699).
- platform/x86: serial-multi-instantiate: Reorganize I2C functions (bsc#1203699).
- platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (git-fixes).
- plip: avoid rcu debug splat (git-fixes).
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (git-fixes).
- powerpc-pseries-mobility-set-NMI-watchdog-factor-dur.patch.
- powerpc-watchdog-introduce-a-NMI-watchdog-s-factor.patch.
- powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (bsc#1194869).
- powerpc/64: Remove unused SYS_CALL_TABLE symbol (jsc#SLE-9246 git-fixes).
- powerpc/64: pcpu setup avoid reading mmu_linear_psize on 64e or radix (bsc#1204413 ltc#200176).
- powerpc/64s: Fix build failure when CONFIG_PPC_64S_HASH_MMU is not set (bsc#1204413 ltc#200176).
- powerpc/64s: Make flush_and_reload_slb a no-op when radix is enabled (bsc#1204413 ltc#200176).
- powerpc/64s: Make hash MMU support configurable (bsc#1204413 ltc#200176).
- powerpc/64s: Move and rename do_bad_slb_fault as it is not hash specific (bsc#1204413 ltc#200176).
- powerpc/64s: Move hash MMU support code under CONFIG_PPC_64S_HASH_MMU (bsc#1204413 ltc#200176).
- powerpc/64s: Rename hash_hugetlbpage.c to hugetlbpage.c (bsc#1204413 ltc#200176).
- powerpc/boot: Explicitly disable usage of SPE instructions (bsc#1156395).
- powerpc/fadump: align destination address to pagesize (bsc#1204728 ltc#200074).
- powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (jsc#SLE-13847 git-fixes).
- powerpc/kvm: Fix kvm_use_magic_page (bsc#1156395).
- powerpc/mm/64s: Drop pgd_huge() (bsc#1065729).
- powerpc/pci_dn: Add missing of_node_put() (bsc#1065729).
- powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable (bsc#1156395).
- powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 (bsc#1065729).
- powerpc/powernv: Avoid crashing if rng is NULL (bsc#1065729).
- powerpc/powernv: add missing of_node_put() in opal_export_attrs() (bsc#1065729).
- powerpc/powernv: delay rng platform device creation until later in boot (bsc#1065729).
- powerpc/powernv: rename remaining rng powernv_ functions to pnv_ (bsc#1065729).
- powerpc/powernv: wire up rng during setup_arch (bsc#1065729).
- powerpc/pseries/vas: Add VAS IRQ primary handler (bsc#1204413 ltc#200176).
- powerpc/pseries/vas: Declare pseries_vas_fault_thread_fn() as static (bsc#1194869).
- powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL (bsc#1194869).
- powerpc/pseries: Interface to represent PAPR firmware attributes (bsc#1200465 ltc#197256 jsc#SLE-18130).
- powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY (bsc#1200465 ltc#197256 jsc#SLE-18130).
- powerpc/pseries: Stop selecting PPC_HASH_MMU_NATIVE (bsc#1204413 ltc#200176).
- powerpc/pseries: lparcfg do not include slb_size line in radix mode (bsc#1204413 ltc#200176).
- powerpc/pseries: rename min_common_depth to primary_domain_index (bsc#1200465 ltc#197256 jsc#SLE-18130).
- powerpc/pseries: wire up rng during setup_arch() (bsc#1065729).
- powerpc/xive: Fix refcount leak in xive_get_max_prio (git-fixess).
- powerpc: Avoid discarding flags in system_call_exception() (bsc#1194869).
- powerpc: Enable execve syscall exit tracepoint (bsc#1065729).
- powerpc: Ignore DSI error caused by the copy/paste instruction (bsc#1204413 ltc#200176).
- powerpc: Rename PPC_NATIVE to PPC_HASH_MMU_NATIVE (bsc#1204413 ltc#200176). Update config files.
- powerpc: make memremap_compat_align 64s-only (bsc#1204413 ltc#200176).
- powerpc: powernv: kABI: add back powernv_get_random_long (bsc#1065729).
- ppc64/kdump: Limit kdump base to 512MB (bsc#1203410 ltc#199904).
- printk: add missing memory barrier to wake_up_klogd() (bsc#1204934).
- printk: use atomic updates for klogd work (bsc#1204934).
- printk: wake waiters for safe and NMI contexts (bsc#1204934).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- proc: fix a dentry lock race between release_task and lookup (git-fixes).
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C strings (git-fixes).
- profiling: fix shift too large makes kernel panic (git-fixes).
- pwm: lpc18xx-sct: Reduce number of devm memory allocations (git-fixes).
- pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() (git-fixes).
- pwm: lpc18xx: Fix period handling (git-fixes).
- qed: validate and restrict untrusted VFs vlan promisc mode (git-fixes).
- r8152: add PID for the Lenovo OneLink+ Dock (git-fixes).
- r8152: fix the RX FIFO settings when suspending (git-fixes).
- r8152: fix the units of some registers for RTL8156A (git-fixes).
- random: remove useless header comment (git-fixes).
- ratelimit: Fix data-races in ___ratelimit() (git-fixes).
- rbd: fix possible memory leak in rbd_sysfs_init() (git-fixes).
- regulator: core: Clean up on enable failure (git-fixes).
- regulator: core: Prevent integer underflow (git-fixes).
- regulator: core: fix UAF in destroy_regulator() (git-fixes).
- regulator: core: fix kobject release warning and memory leak in regulator_register() (git-fixes).
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (git-fixes).
- regulator: pca9450: Remove restrictions for regulator-name (git-fixes).
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (git-fixes).
- regulator: qcom_rpm: Fix circular deferral regression (git-fixes).
- regulator: qcom_smd: Fix pm8916_pldo range (git-fixes).
- regulator: twl6030: re-add TWL6032_SUBCLASS (git-fixes).
- remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init (git-fixes).
- remoteproc: imx_rproc: Simplify some error message (git-fixes).
- remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init (git-fixes).
- remoteproc: qcom: pas: Check if coredump is enabled (git-fixes).
- remoteproc: qcom: pas: Mark devices as wakeup capable (git-fixes).
- remoteproc: qcom: q6v5-mss: add powerdomains to MSM8996 config (git-fixes).
- remoteproc: qcom: wcnss: Fix handling of IRQs (git-fixes).
- remoteproc: sysmon: Wait for SSCTL service to come up (git-fixes).
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support (git-fixes).
- restore m_can_lec_type (git-fixes).
- ring-buffer: Add ring_buffer_wake_waiters() (git-fixes).
- ring-buffer: Allow splice to read previous partially read pages (git-fixes).
- ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (bsc#1204705).
- ring-buffer: Check pending waiters when doing wake ups as well (git-fixes).
- ring-buffer: Fix race between reset page and reading page (git-fixes).
- ring-buffer: Have the shortest_full queue be the shortest not longest (git-fixes).
- ring-buffer: Include dropped pages in counting dirty patches (git-fixes).
- ring_buffer: Do not deactivate non-existant pages (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame() (git-fixes).
- rose: check NULL rose_loopback_neigh-&gt;loopback (git-fixes).
- rpm/check-for-config-changes: add TOOLCHAIN_HAS_* to IGNORED_CONFIGS_RE This new form was added in commit b8c86872d1dc (riscv: fix detection of toolchain Zicbom support).
- rpm/check-for-config-changes: loosen pattern for AS_HAS_* This is needed to handle CONFIG_AS_HAS_NON_CONST_LEB128.
- rpm/kernel-binary.spec.in: move vdso to a separate package (bsc#1202385) We do the move only on 15.5+.
- rpm/kernel-binary.spec.in: simplify find for usrmerged The type test and print line are the same for both cases. The usrmerged case only ignores more, so refactor it to make it more obvious.
- rpm/kernel-source.spec.in: simplify finding of broken symlinks &quot;find -xtype l&quot; will report them, so use that to make the search a bit faster (without using shell).
- rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (git-fixes).
- rpmsg: mtk_rpmsg: Fix circular locking dependency (git-fixes).
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (git-fixes).
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (git-fixes).
- rtc: stmp3xxx: Add failure handling for stmp3xxx_wdt_register() (git-fixes).
- rtmutex: Add acquire semantics for rtmutex lock acquisition slow path (bnc#1203829).
- s390/boot: add secure boot trailer (bsc#1205257 LTC#200451).
- s390/boot: fix absolute zero lowcore corruption on boot (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes copied (git-fixes).
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (git-fixes).
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (bsc#1205427 LTC#200502).
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (git-fixes).
- s390/hypfs: avoid error message under KVM (bsc#1032323).
- s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add() (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest (git-fixes).
- s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (bsc#1205427 LTC#200502).
- s390/qeth: cache link_info for ethtool (bsc#1202262 LTC#199322).
- s390/smp: enforce lowcore protection on CPU restart (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/uaccess: add missing EX_TABLE entries to __clear_user(), copy_in_user_mvcos(), copy_in_user_mvc(), clear_user_xc() and __strnlen_user() (bsc#1205428 LTC#200501).
- s390/zcore: fix race when reading from hardware system area (git-fixes).
- s390: fix double free of GS and RI CBs on fork() failure (bsc#1203197 LTC#199895).
- s390: fix nospec table alignments (git-fixes).
- samples/landlock: Add clang-format exceptions (git-fixes).
- samples/landlock: Fix path_list memory leak (git-fixes).
- samples/landlock: Format with clang-format (git-fixes).
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up() (git-fixes).
- sbitmap: fix possible io hung due to lost wakeup (git-fixes).
- sched-core-Do-not-requeue-task-on-CPU-excluded-from-cpus_mask.patch
- sched/core: Always flush pending blk_plug (bnc#1189999 (Scheduler functional and performance backports)).
- sched/deadline: Fix BUG_ON condition for deboosted tasks (git-fixes)
- sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq (bnc#1189999 (Scheduler functional and performance backports)).
- sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq -kabi (git fixes (sched/fair)).
- sched/fair: Remove redundant word &quot; *&quot; (bnc#1189999 (Scheduler functional and performance backports)).
- sched/uclamp: Fix iowait boost escaping uclamp restriction (git-fixes)
- sched/uclamp: Fix rq-&gt;uclamp_max not set on first enqueue (git-fixes)
- sched: Allow newidle balancing to bail out of load_balance (bnc#1189999 (Scheduler functional and performance backports)).
- sched: Clear ttwu_pending after enqueue_task() (git fixes (sched/core)).
- sched: Disable sched domain debugfs creation on ppc64 unless sched_verbose is specified (bnc#1205653).
- sched: Fix the check of nr_running at queue wakelist (bnc#1189999 (Scheduler functional and performance backports)).
- sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle (bnc#1189999 (Scheduler functional and performance backports)). Refresh
- sched: Remove unused function group_first_cpu() (bnc#1189999 (Scheduler functional and performance backports)).
- scripts/dtc: Call pkg-config POSIXly correct (git-fixes).
- scripts/faddr2line: Fix regression in name resolution on ppc64le (git-fixes).
- scripts/faddr2line: Fix vmlinux detection on arm64 (git-fixes).
- scripts/gdb: change kernel config dumping method (git-fixes).
- scripts: sphinx-pre-install: Fix ctex support on Debian (git-fixes).
- scripts: sphinx-pre-install: add required ctex dependency (git-fixes).
- scsi: Revert &quot;scsi: qla2xxx: Fix disk failure to rediscover&quot; (git-fixes).
- scsi: core: Add BLIST_NO_ASK_VPD_SIZE for some VDASD (bsc#1203039).
- scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed (bsc#1202471).
- scsi: hisi_sas: Use autosuspend for the host controller (bsc#1202471).
- scsi: ibmvfc: Avoid path failures during live migration (bsc#1065729).
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (bsc#1156395).
- scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization (bsc#1198410).
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (git-fixes).
- scsi: lpfc: Add missing destroy_workqueue() in error path (bsc#1203939).
- scsi: lpfc: Add missing free iocb and nlp kref put for early return VMID cases (bsc#1203939).
- scsi: lpfc: Add reporting capability for Link Degrade Signaling (bsc#1203939).
- scsi: lpfc: Add warning notification period to CMF_SYNC_WQE (bsc#1203063).
- scsi: lpfc: Check the return value of alloc_workqueue() (bsc#1203063).
- scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956).
- scsi: lpfc: Copyright updates for 14.2.0.6 patches (bsc#1203063).
- scsi: lpfc: Create a sysfs entry called lpfc_xcvr_data for transceiver info (bsc#1204957).
- scsi: lpfc: Fix FLOGI ACC with wrong SID in PT2PT topology (bsc#1203939).
- scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (bsc#1201956).
- scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (bsc#1204957).
- scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (bsc#1201956).
- scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload (bsc#1203939).
- scsi: lpfc: Fix memory leak in lpfc_create_port() (bsc#1204957).
- scsi: lpfc: Fix multiple NVMe remoteport registration calls for the same NPort ID (bsc#1203939).
- scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID (bsc#1203063).
- scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1201956).
- scsi: lpfc: Fix prli_fc4_req checks in PRLI handling (bsc#1203939).
- scsi: lpfc: Fix spelling mistake &quot;unsolicted&quot; -&gt; &quot;unsolicited&quot; (bsc#1204957).
- scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (bsc#1201956).
- scsi: lpfc: Fix unsolicited FLOGI receive handling during PT2PT discovery (bsc#1203063).
- scsi: lpfc: Fix various issues reported by tools (bsc#1203939).
- scsi: lpfc: Log when congestion management limits are in effect (bsc#1204957).
- scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (bsc#1185032 bsc#1203939). Dropped: patches.suse/lpfc-decouple-port_template-and-vport_template.patch
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1201956).
- scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (bsc#1201956).
- scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956).
- scsi: lpfc: Remove SANDiags related code (bsc#1203063).
- scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (bsc#1201956).
- scsi: lpfc: Remove the unneeded result variable (bsc#1203939).
- scsi: lpfc: Remove unneeded result variable (bsc#1203939).
- scsi: lpfc: Rename mp/bmp dma buffers to rq/rsp in lpfc_fdmi_cmd (bsc#1203939).
- scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (bsc#1203939).
- scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (bsc#1201956).
- scsi: lpfc: Rework FDMI attribute registration for unintential padding (bsc#1203939).
- scsi: lpfc: Rework MIB Rx Monitor debug info logic (bsc#1203063).
- scsi: lpfc: Rework lpfc_fdmi_cmd() routine for cleanup and consistency (bsc#1203939).
- scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (bsc#1201956).
- scsi: lpfc: Set sli4_param's cmf option to zero when CMF is turned off (bsc#1204957).
- scsi: lpfc: Update congestion mode logging for Emulex SAN Manager application (bsc#1203939).
- scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956).
- scsi: lpfc: Update lpfc version to 14.2.0.6 (bsc#1203063).
- scsi: lpfc: Update lpfc version to 14.2.0.7 (bsc#1203939).
- scsi: lpfc: Update lpfc version to 14.2.0.8 (bsc#1204957).
- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- scsi: megaraid: Clear READ queue map's nr_queues (git-fixes).
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (git-fixes).
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (bnc#1204498).
- scsi: mpt3sas: Fix return value check of dma_get_required_mask() (git-fixes).
- scsi: mpt3sas: Fix use-after-free warning (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (git-fixes).
- scsi: qedf: Populate sysfs attributes for vport (git-fixes).
- scsi: qla2xxx: Add NVMe parameters support in Auxiliary Image Status (bsc#1203935).
- scsi: qla2xxx: Add debugfs create/delete helpers (bsc#1203935).
- scsi: qla2xxx: Always wait for qlt_sess_work_fn() from qlt_stop_phase1() (bsc#1203935).
- scsi: qla2xxx: Avoid flush_scheduled_work() usage (bsc#1203935).
- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (bsc#1201958).
- scsi: qla2xxx: Define static symbols (bsc#1203935).
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (bsc#1203935).
- scsi: qla2xxx: Drop DID_TARGET_FAILURE use (bsc#1203935).
- scsi: qla2xxx: Enhance driver tracing with separate tunable and more (bsc#1203935).
- scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958).
- scsi: qla2xxx: Fix disk failure to rediscover (git-fixes).
- scsi: qla2xxx: Fix imbalance vha-&gt;vref_count (bsc#1201958).
- scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958).
- scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (bsc#1203935).
- scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1201958).
- scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1203935).
- scsi: qla2xxx: Fix serialization of DCBX TLV data request (bsc#1204963).
- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).
- scsi: qla2xxx: Fix spelling mistake &quot;definiton&quot; -&gt; &quot;definition&quot; (bsc#1203935).
- scsi: qla2xxx: Log message &quot;skipping scsi_scan_host()&quot; as informational (bsc#1203935).
- scsi: qla2xxx: Remove unused declarations for qla2xxx (bsc#1203935).
- scsi: qla2xxx: Remove unused del_sess_list field (bsc#1203935).
- scsi: qla2xxx: Remove unused qlt_tmr_work() (bsc#1203935).
- scsi: qla2xxx: Revert &quot;scsi: qla2xxx: Fix response queue handler reading stale packets&quot; (bsc#1203935).
- scsi: qla2xxx: Update manufacturer details (bsc#1201958).
- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).
- scsi: qla2xxx: Update version to 10.02.07.900-k (bsc#1203935).
- scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (bsc#1204963).
- scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958).
- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).
- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (git-fixes).
- scsi: sg: Allow waiting for commands to complete on removed device (git-fixes).
- scsi: smartpqi: Add module param to disable managed ints (bsc#1203893).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: smartpqi: Shorten drive visibility after removal (bsc#1200622).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix handling of srb_status and capacity change events (git-fixes).
- scsi: storvsc: Fix typo in comment (git-fixes).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: remove an extraneous &quot;to&quot; in a comment (git-fixes).
- scsi: ufs: core: Fix another task management completion race (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race (git-fixes).
- scsi: ufs: ufs-pci: Add support for Intel ADL (jsc#PED-707).
- scsi: ufs: ufs-pci: Add support for Intel MTL (jsc#PED-732).
- scsi: zfcp: Fix double free of FSF request when qdio send fails (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (git-fixes).
- seccomp: Invalidate seccomp mode to catch death failures (git-fixes).
- selftest/net/forwarding: declare NETIFS p9 p10 (git-fixes).
- selftest/powerpc: Add PAPR sysfs attributes sniff test (bsc#1200465 ltc#197256 jsc#SLE-18130).
- selftest/vm: fix map_fixed_noreplace test failure (git-fixes).
- selftest/vm: verify mmap addr in mremap_test (git-fixes).
- selftest/vm: verify remap destination address in mremap_test (git-fixes).
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle (git-fixes).
- selftests, x86: fix how check_cc.sh is being invoked (git-fixes).
- selftests/exec: Add non-regular to TEST_GEN_PROGS (git-fixes).
- selftests/exec: Remove pipe from TEST_GEN_FILES (git-fixes).
- selftests/fib_tests: Rework fib_rp_filter_test() (git-fixes).
- selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT (git-fixes).
- selftests/ftrace: make kprobe profile testcase description unique (git-fixes).
- selftests/intel_pstate: fix build for ARCH=x86_64 (git-fixes).
- selftests/landlock: Add clang-format exceptions (git-fixes).
- selftests/landlock: Add tests for O_PATH (git-fixes).
- selftests/landlock: Add tests for unknown access rights (git-fixes).
- selftests/landlock: Extend access right tests to directories (git-fixes).
- selftests/landlock: Extend tests for minimal valid attribute size (git-fixes).
- selftests/landlock: Format with clang-format (git-fixes).
- selftests/landlock: Fully test file rename with &quot;remove&quot; access (git-fixes).
- selftests/landlock: Make tests build with old libc (git-fixes).
- selftests/landlock: Normalize array assignment (git-fixes).
- selftests/landlock: Test landlock_create_ruleset(2) argument check ordering (git-fixes).
- selftests/livepatch: better synchronize test_klp_callbacks_busy (bsc#1071995).
- selftests/memfd: clean up mapping in mfd_fail_write (git-fixes).
- selftests/memfd: remove unused variable (git-fixes).
- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (git-fixes).
- selftests/net: so_txtime: fix parsing of start time stamp on 32 bit systems (git-fixes).
- selftests/net: so_txtime: usage(): fix documentation of default clock (git-fixes).
- selftests/net: timestamping: Fix bind_phc check (git-fixes).
- selftests/net: udpgso_bench_tx: fix dst ip argument (git-fixes).
- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- selftests/powerpc/spectre_v2: Return skip code when miss_percent is high (git-fixes).
- selftests/powerpc: Add a test of sigreturning to the kernel (git-fixes).
- selftests/powerpc: Skip energy_scale_info test on older firmware (git-fixes).
- selftests/resctrl: Fix null pointer dereference on open failed (git-fixes).
- selftests/rseq: Change type of rseq_offset to ptrdiff_t (git-fixes).
- selftests/rseq: Fix ppc32 missing instruction selection &quot;u&quot; and &quot;x&quot; for load/store (git-fixes).
- selftests/rseq: Fix ppc32 offsets by using long rather than off_t (git-fixes).
- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (git-fixes).
- selftests/rseq: Fix warnings about #if checks of undefined tokens (git-fixes).
- selftests/rseq: Fix: work-around asm goto compiler bugs (git-fixes).
- selftests/rseq: Introduce rseq_get_abi() helper (git-fixes).
- selftests/rseq: Introduce thread pointer getters (git-fixes).
- selftests/rseq: Remove arm/mips asm goto compiler work-around (git-fixes).
- selftests/rseq: Remove useless assignment to cpu variable (git-fixes).
- selftests/rseq: Remove volatile from __rseq_abi (git-fixes).
- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (git-fixes).
- selftests/rseq: introduce own copy of rseq uapi header (git-fixes).
- selftests/rseq: remove ARRAY_SIZE define from individual tests (git-fixes).
- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (git-fixes).
- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (git-fixes).
- selftests/seccomp: Do not call read() on TTY from background pgrp (git-fixes).
- selftests/seccomp: Fix compile warning when CC=clang (git-fixes).
- selftests/seccomp: Fix seccomp failure by adding missing headers (git-fixes).
- selftests/sgx: Treat CC as one argument (git-fixes).
- selftests/vm/transhuge-stress: fix ram size thinko (git-fixes).
- selftests/vm: make charge_reserved_hugetlb.sh work with existing cgroup setting (git-fixes).
- selftests/x86: Add validity check and allow field splitting (git-fixes).
- selftests/zram01.sh: Fix compression ratio calculation (git-fixes).
- selftests/zram: Adapt the situation that /dev/zram0 is being used (git-fixes).
- selftests/zram: Skip max_comp_streams interface on newer kernel (git-fixes).
- selftests: Add duplicate config only for MD5 VRF tests (git-fixes).
- selftests: Fix IPv6 address bind tests (git-fixes).
- selftests: Fix raw socket bind tests with VRF (git-fixes).
- selftests: Fix the if conditions of in test_extra_filter() (git-fixes).
- selftests: add ping test with ping_group_range tuned (git-fixes).
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (git-fixes).
- selftests: cgroup: Test open-time cgroup namespace usage for migration checks (git-fixes).
- selftests: cgroup: Test open-time credential usage for migration checks (git-fixes).
- selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST (git-fixes).
- selftests: fixup build warnings in pidfd / clone3 tests (git-fixes).
- selftests: forwarding: Fix failing tests with old libnet (git-fixes).
- selftests: forwarding: add shebang for sch_red.sh (git-fixes).
- selftests: forwarding: fix error message in learning_test (git-fixes).
- selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (git-fixes).
- selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (git-fixes).
- selftests: futex: Use variable MAKE instead of make (git-fixes).
- selftests: gpio: fix gpio compiling error (git-fixes).
- selftests: harness: avoid false negatives if test has no ASSERTs (git-fixes).
- selftests: icmp_redirect: pass xfail=0 to log_test() (git-fixes).
- selftests: kvm: set rax before vmcall (git-fixes).
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (git-fixes).
- selftests: mlxsw: resource_scale: Fix return value (git-fixes).
- selftests: mlxsw: tc_police_scale: Make test more robust (git-fixes).
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (git-fixes).
- selftests: mptcp: add csum mib check for mptcp_connect (git-fixes).
- selftests: mptcp: fix diag instability (git-fixes).
- selftests: mptcp: fix ipv6 routing setup (git-fixes).
- selftests: mptcp: fix mibit vs mbit mix up (git-fixes).
- selftests: mptcp: make sendfile selftest work (git-fixes).
- selftests: mptcp: more stable diag tests (git-fixes).
- selftests: mptcp: more stable simult_flows tests (git-fixes).
- selftests: net: Correct case name (git-fixes).
- selftests: net: Correct ping6 expected rc from 2 to 1 (git-fixes).
- selftests: net: Fix a typo in udpgro_fwd.sh (git-fixes).
- selftests: net: tls: remove unused variable and code (git-fixes).
- selftests: net: udpgro_fwd.sh: explicitly checking the available ping feature (git-fixes).
- selftests: net: using ping6 for IPv6 in udpgro_fwd.sh (git-fixes).
- selftests: netfilter: Fix nft_fib.sh for all.rp_filter=1 (git-fixes).
- selftests: netfilter: add a vrf+conntrack testcase (git-fixes).
- selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh (git-fixes).
- selftests: netfilter: disable rp_filter on router (git-fixes).
- selftests: netfilter: fix exit value for nft_concat_range (git-fixes).
- selftests: nft_concat_range: add test for reload with no element add/del (git-fixes).
- selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer (git-fixes).
- selftests: openat2: Add missing dependency in Makefile (git-fixes).
- selftests: openat2: Print also errno in failure messages (git-fixes).
- selftests: openat2: Skip testcases that fail with EOPNOTSUPP (git-fixes).
- selftests: pmtu.sh: Kill nettest processes launched in subshell (git-fixes).
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell (git-fixes).
- selftests: rtc: Increase test timeout so that all tests run (git-fixes).
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (git-fixes).
- selftests: skip mincore.check_file_mmap when fs lacks needed support (git-fixes).
- selftests: test_vxlan_under_vrf: Fix broken test case (git-fixes).
- selftests: timers: clocksource-switch: fix passing errors from child (git-fixes).
- selftests: timers: valid-adjtimex: build fix for newer toolchains (git-fixes).
- selftests: vm: Makefile: rename TARGETS to VMTARGETS (git-fixes).
- selftests: vm: fix clang build error multiple output files (git-fixes).
- selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() (git-fixes).
- selinux: Add boundary check in put_entry() (git-fixes).
- selinux: access superblock_security_struct in LSM blob way (git-fixes).
- selinux: allow FIOCLEX and FIONCLEX with policy capability (git-fixes).
- selinux: check return value of sel_make_avc_files (git-fixes).
- selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (git-fixes).
- selinux: fix bad cleanup on error in hashtab_duplicate() (git-fixes).
- selinux: fix double free of cond_list on error paths (git-fixes).
- selinux: fix memleak in security_read_state_kernel() (git-fixes).
- selinux: fix misuse of mutex_is_locked() (git-fixes).
- selinux: use &quot;grep -E&quot; instead of &quot;egrep&quot; (git-fixes).
- selinux: use correct type for context length (git-fixes).
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -&gt;set_termios() (git-fixes).
- serial: 8250: Add proper clock handling for OxSemi PCIe devices (git-fixes).
- serial: 8250: Export ICR access helpers for internal use (git-fixes).
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (git-fixes).
- serial: 8250: Fix restoring termios speed after suspend (git-fixes).
- serial: 8250: Flush DMA Rx on RLSI (git-fixes).
- serial: 8250: Fold EndRun device support into OxSemi Tornado code (git-fixes).
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (git-fixes).
- serial: 8250: omap: Flush PM QOS work on remove (git-fixes).
- serial: 8250_bcm7271: Save/restore RTS in suspend/resume (git-fixes).
- serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (git-fixes).
- serial: 8250_fsl: Do not report FE, PE and OE twice (git-fixes).
- serial: 8250_lpss: Configure DMA also w/o DMA filter (git-fixes).
- serial: 8250_omap: remove wait loop from Errata i202 workaround (git-fixes).
- serial: 8250_pci: Refactor the loop in pci_ite887x_init() (git-fixes).
- serial: 8250_pci: Replace dev_*() by pci_*() macros (git-fixes).
- serial: Create uart_xmit_advance() (git-fixes).
- serial: atmel: remove redundant assignment in rs485_config (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into core (git-fixes).
- serial: fsl_lpuart: RS485 RTS polariy is inverse (git-fixes).
- serial: fsl_lpuart: Reset prior to registration (git-fixes).
- serial: imx: Add missing .thaw_noirq hook (git-fixes).
- serial: mvebu-uart: uart2 error bits clearing (git-fixes).
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (git-fixes).
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (git-fixes).
- sfc: disable softirqs for ptp TX (git-fixes).
- sfc: fix kernel panic when creating VF (git-fixes).
- sfc: fix use after free when disabling sriov (git-fixes).
- signal: break out of wait loops on kthread_stop() (bsc#1204926).
- siox: fix possible memory leak in siox_device_add() (git-fixes).
- slimbus: qcom-ngd: cleanup in probe error path (git-fixes).
- slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure (git-fixes).
- slimbus: stream: correct presence rate frequencies (git-fixes).
- smb2: small refactor in smb2_check_message() (bsc#1193629).
- smb3: Move the flush out of smb2_copychunk_range() into its callers (bsc#1193629).
- smb3: add dynamic trace points for tree disconnect (bsc#1193629).
- smb3: add trace point for SMB2_set_eof (bsc#1193629).
- smb3: allow deferred close timeout to be configurable (bsc#1193629).
- smb3: check xattr value length earlier (bsc#1193629).
- smb3: clarify multichannel warning (bsc#1193629).
- smb3: do not log confusing message when server returns no network interfaces (bsc#1193629).
- smb3: fix empty netname context on secondary channels (bsc#1193629).
- smb3: fix oops in calculating shash_setkey (bsc#1193629).
- smb3: fix temporary data corruption in collapse range (bsc#1193629).
- smb3: fix temporary data corruption in insert range (bsc#1193629).
- smb3: improve SMB3 change notification support (bsc#1193629).
- smb3: interface count displayed incorrectly (bsc#1193629).
- smb3: missing inode locks in punch hole (bsc#1193629).
- smb3: missing inode locks in zero range (bsc#1193629).
- smb3: must initialize two ACL struct fields to zero (bsc#1193629).
- smb3: remove unneeded null check in cifs_readdir (bsc#1193629).
- smb3: rename encryption/decryption TFMs (bsc#1193629).
- smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait (bsc#1193629).
- smb3: use netname when available on secondary channels (bsc#1193629).
- smb3: workaround negprot bug in some Samba servers (bsc#1193629).
- smsc95xx: Ignore -ENODEV errors when device is unplugged (git-fixes).
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (git-fixes).
- soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (git-fixes).
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (git-fixes).
- soc: fsl: guts: machine variable might be unset (git-fixes).
- soc: fsl: select FSL_GUTS driver for DPIO (git-fixes).
- soc: imx8m: Enable OCOTP clock before reading the register (git-fixes).
- soc: imx: gpcv2: Assert reset before ungating clock (git-fixes).
- soc: qcom: Make QCOM_RPMPD depend on PM (git-fixes).
- soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (git-fixes).
- soc: qcom: ocmem: Fix refcount leak in of_get_ocmem (git-fixes).
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node' (git-fixes).
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (git-fixes).
- soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values (git-fixes).
- soc: sunxi: sram: Actually claim SRAM regions (git-fixes).
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C (git-fixes).
- soc: sunxi: sram: Fix probe function ordering issues (git-fixes).
- soc: sunxi: sram: Prevent the driver from being unbound (git-fixes).
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- soundwire: bus_type: fix remove and shutdown support (git-fixes).
- soundwire: cadence: Do not overwrite msg-&gt;buf during write commands (git-fixes).
- soundwire: intel: Initialize clock stop timeout (bsc#1205507).
- soundwire: intel: fix error handling on dai registration issues (git-fixes).
- soundwire: qcom: Check device status before reading devid (git-fixes).
- soundwire: qcom: check for outanding writes before doing a read (git-fixes).
- soundwire: qcom: fix device status array range (git-fixes).
- soundwire: qcom: reinit broadcast completion (git-fixes).
- speakup: fix a segfault caused by switching consoles (git-fixes).
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (git-fixes).
- spi: Add API to count spi acpi resources (bsc#1203699).
- spi: Create helper API to lookup ACPI info for spi device (bsc#1203699).
- spi: Ensure that sg_table won't be used after being freed (git-fixes).
- spi: Fix incorrect cs_setup delay handling (git-fixes).
- spi: Fix simplification of devm_spi_register_controller (git-fixes).
- spi: Return deferred probe error when controller isn't yet available (bsc#1203699).
- spi: Support selection of the index of the ACPI Spi Resource before alloc (bsc#1203699).
- spi: dt-bindings: cadence: add missing 'required' (git-fixes).
- spi: dt-bindings: zynqmp-qspi: add missing 'required' (git-fixes).
- spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (git-fixes).
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe (git-fixes).
- spi: meson-spicc: add local pow2 clock ops to preserve rate between messages (git-fixes).
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops (git-fixes).
- spi: mt7621: Fix an error message in mt7621_spi_probe() (git-fixes).
- spi: propagate error code to the caller of acpi_spi_device_alloc() (bsc#1203699).
- spi: pxa2xx: Add support for Intel Meteor Lake-P (jsc#PED-732).
- spi: pxa2xx: Add support for Intel Raptor Lake PCH-S (jsc#PED-634).
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (git-fixes).
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (git-fixes).
- spi: s3c64xx: Fix large transfers with DMA (git-fixes).
- spi: spi-altera-dfl: Fix an error handling path (git-fixes).
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (git-fixes).
- spi: spi-rspi: Fix PIO fallback on RZ platforms (git-fixes).
- spi: stm32: Print summary 'callbacks suppressed' message (git-fixes).
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (git-fixes).
- spi: synquacer: Add missing clk_disable_unprepare() (git-fixes).
- spi: tegra20-slink: fix UAF in tegra_slink_remove() (git-fixes).
- spi: tegra210-quad: Fix duplicate resource error (git-fixes).
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic (git-fixes).
- spmi: pmic-arb: do not ack and clear peripheral interrupts in cleanup_irq (git-fixes).
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (git-fixes).
- staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (git-fixes).
- staging: rtl8712: fix use after free bugs (git-fixes).
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (git-fixes).
- staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (git-fixes).
- staging: vt6655: fix potential memory leak (git-fixes).
- staging: vt6655: fix some erroneous memory clean-up loops (git-fixes).
- stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() (git-fixes).
- stmmac: intel: Fix an error handling path in intel_eth_pci_probe() (git-fixes).
- struct ehci_hcd: hide new element going into a hole (git-fixes).
- struct xhci_hcd: restore member now dynamically allocated (git-fixes).
- sunrpc: fix expiry of auth creds (git-fixes).
- supported.conf: Add cs_dsp firmware module (bsc#1203699)
- supported.conf: Add drivers/virt/coco/sevguest/sevguest
- supported.conf: added drivers/net/ethernet/marvell/octeontx2/nic/otx2_ptp and 		changed all octeontx2 modules as supported (jsc#SLE-24682)
- supported.conf: mark drivers/nvme/common as supported (jsc#SLE-20183)
- supported.conf: mark lib/objagg supported as dependency of mlxsw
- supported.conf: mark mlxsw modules supported (jsc#SLE-23766)
- supported.conf: mark spi-pxa2xx-platform as supported (bsc#1203699) It's required for the sound on recent Intel machines
- tee: optee: do not check memref size on return from Secure World (git-fixes).
- tee: tee_get_drvdata(): fix description of return value (git-fixes).
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (git-fixes).
- testing: nvdimm: asm/mce.h is not needed in nfit.c (git-fixes).
- testing: nvdimm: iomap: make __nfit_test_ioremap a macro (git-fixes).
- tests: fix idmapped mount_setattr test (git-fixes).
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (git-fixes).
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR (bsc#1201308).
- thermal/tools/tmon: Include pthread and time headers in tmon.h (git-fixes).
- thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() (git-fixes).
- thermal: int340x: Mode setting with new OS handshake (jsc#PED-678).
- thermal: int340x: Update OS policy capability handshake (jsc#PED-678).
- thermal: intel_powerclamp: Use first online CPU as control_cpu (git-fixes).
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (git-fixes).
- thermal: sysfs: Fix cooling_device_stats_setup() error code path (git-fixes).
- thunderbolt: Add DP OUT resource when DP tunnel is discovered (git-fixes).
- thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (git-fixes).
- thunderbolt: Add missing device ID to tb_switch_is_alpine_ridge() (git-fixes).
- thunderbolt: Add support for Intel Maple Ridge single port controller (git-fixes).
- thunderbolt: Add support for Intel Raptor Lake (jsc#PED-634).
- thunderbolt: Disable LTTPR on Intel Titan Ridge (git-fixes).
- thunderbolt: Explicitly enable lane adapter hotplug events at startup (git-fixes).
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value (git-fixes).
- thunderbolt: Fix buffer allocation of devices with no DisplayPort adapters (git-fixes).
- thunderbolt: Use the actual buffer in tb_async_error() (git-fixes).
- timers: implement usleep_idle_range() (git-fixes).
- tools include UAPI: Sync sound/asound.h copy with the kernel sources (git-fixes).
- tools/nolibc: fix incorrect truncation of exit code (git-fixes).
- tools/nolibc: i386: fix initial stack alignment (git-fixes).
- tools/nolibc: x86-64: Fix startup code bug (git-fixes).
- tools/testing/scatterlist: add missing defines (git-fixes).
- tools/thermal: Fix possible path truncations (git-fixes).
- tools: hv: Remove an extraneous &quot;the&quot; (git-fixes).
- tools: hv: kvp: remove unnecessary (void*) conversions (git-fixes).
- tools: iio: iio_generic_buffer: Fix read size (git-fixes).
- tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH (git-fixes).
- trace/osnoise: Add migrate-disabled field to the osnoise header (git-fixes).
- trace/timerlat: Add migrate-disabled field to the timerlat header (git-fixes).
- tracing/histograms: Fix memory leak problem (git-fixes).
- tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() (git-fixes).
- tracing/osnoise: Fix duration type (git-fixes).
- tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (git-fixes).
- tracing/probes: Have kprobes and uprobes use $COMM too (git-fixes).
- tracing/ring-buffer: Have polling block on watermark (git-fixes).
- tracing: Add &quot;(fault)&quot; name injection to kernel probes (git-fixes).
- tracing: Add ioctl() to force ring buffer waiters to wake up (git-fixes).
- tracing: Add tracing_reset_all_online_cpus_unlocked() function (git-fixes).
- tracing: Add ustring operation to filtering string pointers (git-fixes).
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (git-fixes).
- tracing: Do not free snapshot if tracer is on cmdline (git-fixes).
- tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (git-fixes).
- tracing: Fix memory leak in tracing_read_pipe() (git-fixes).
- tracing: Fix reading strings from synthetic events (git-fixes).
- tracing: Fix sleeping while atomic in kdb ftdump (git-fixes).
- tracing: Fix wild-memory-access in register_synth_event() (git-fixes).
- tracing: Free buffers when a used dynamic event is removed (git-fixes).
- tracing: Have filter accept &quot;common_cpu&quot; to be consistent (git-fixes).
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header (git-fixes).
- tracing: Replace deprecated CPU-hotplug functions (git-fixes).
- tracing: Simplify conditional compilation code in tracing_set_tracer() (git-fixes).
- tracing: Use a struct alignof to determine trace event field alignment (git-fixes).
- tracing: Wake up ring buffer waiters on closing of the file (git-fixes).
- tracing: Wake up waiters when tracing is disabled (git-fixes).
- tracing: hold caller_addr to hardirq_{enable,disable}_ip (git-fixes).
- tracing: kprobe: Fix kprobe event gen test module on exit (git-fixes).
- tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (git-fixes).
- tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (git-fixes).
- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (git-fixes).
- tracing: kprobe: Make gen test module work in arm and riscv (git-fixes).
- tty: 8250: Add support for Brainboxes PX cards (git-fixes).
- tty: n_gsm: Delete gsm_disconnect when config requester (git-fixes).
- tty: n_gsm: Delete gsmtty open SABM frame when config requester (git-fixes).
- tty: n_gsm: Modify CR,PF bit printk info when config requester (git-fixes).
- tty: n_gsm: Modify CR,PF bit when config requester (git-fixes).
- tty: n_gsm: Modify cr bit value when config requester (git-fixes).
- tty: n_gsm: Modify gsmtty driver register method when config requester (git-fixes).
- tty: n_gsm: Save dlci address open status when config requester (git-fixes).
- tty: n_gsm: add sanity check for gsm-&gt;receive in gsm_receive_buf() (git-fixes).
- tty: n_gsm: avoid call of sleeping functions from atomic context (git-fixes).
- tty: n_gsm: clean up dead code in gsm_queue() (git-fixes).
- tty: n_gsm: clean up implicit CR bit encoding in address field (git-fixes).
- tty: n_gsm: clean up indenting in gsm_queue() (git-fixes).
- tty: n_gsm: fix DM command (git-fixes).
- tty: n_gsm: fix broken virtual tty handling (git-fixes).
- tty: n_gsm: fix buffer over-read in gsm_dlci_data() (git-fixes).
- tty: n_gsm: fix deadlock and link starvation in outgoing data path (git-fixes).
- tty: n_gsm: fix decoupled mux resource (git-fixes).
- tty: n_gsm: fix encoding of command/response bit (git-fixes).
- tty: n_gsm: fix flow control handling in tx path (git-fixes).
- tty: n_gsm: fix frame reception handling (git-fixes).
- tty: n_gsm: fix incorrect UA handling (git-fixes).
- tty: n_gsm: fix insufficient txframe size (git-fixes).
- tty: n_gsm: fix invalid gsmtty_write_room() result (git-fixes).
- tty: n_gsm: fix invalid use of MSC in advanced option (git-fixes).
- tty: n_gsm: fix malformed counter for out of frame data (git-fixes).
- tty: n_gsm: fix missing corner cases in gsmld_poll() (git-fixes).
- tty: n_gsm: fix missing explicit ldisc flush (git-fixes).
- tty: n_gsm: fix missing mux reset on config change at responder (git-fixes).
- tty: n_gsm: fix missing timer to handle stalled links (git-fixes).
- tty: n_gsm: fix missing tty wakeup in convergence layer type 2 (git-fixes).
- tty: n_gsm: fix missing update of modem controls after DLCI open (git-fixes).
- tty: n_gsm: fix mux activation issues in gsm_config() (git-fixes).
- tty: n_gsm: fix mux cleanup after unregister tty device (git-fixes).
- tty: n_gsm: fix non flow control frames during mux flow off (git-fixes).
- tty: n_gsm: fix packet re-transmission without open control channel (git-fixes).
- tty: n_gsm: fix race condition in gsmld_write() (git-fixes).
- tty: n_gsm: fix reset fifo race condition (git-fixes).
- tty: n_gsm: fix resource allocation order in gsm_activate_mux() (git-fixes).
- tty: n_gsm: fix restart handling via CLD command (git-fixes).
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (git-fixes).
- tty: n_gsm: fix software flow control handling (git-fixes).
- tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() (git-fixes).
- tty: n_gsm: fix tty registration before control channel open (git-fixes).
- tty: n_gsm: fix user open not possible at responder until initiator open (git-fixes).
- tty: n_gsm: fix wrong DLCI release order (git-fixes).
- tty: n_gsm: fix wrong T1 retry count handling (git-fixes).
- tty: n_gsm: fix wrong command frame length field encoding (git-fixes).
- tty: n_gsm: fix wrong command retry handling (git-fixes).
- tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() (git-fixes).
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (git-fixes).
- tty: n_gsm: fix wrong signal octets encoding in MSC (git-fixes).
- tty: n_gsm: initialize more members at gsm_alloc_mux() (git-fixes).
- tty: n_gsm: replace kicktimer with delayed_work (git-fixes).
- tty: serial: Fix refcount leak bug in ucc_uart.c (git-fixes).
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled (git-fixes).
- tty: serial: fsl_lpuart: correct the count of break characters (git-fixes).
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (git-fixes).
- tty: serial: fsl_lpuart: do not break the on-going transfer when global reset (git-fixes).
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (git-fixes).
- tty: vt: initialize unicode screen buffer (git-fixes).
- tty: xilinx_uartps: Fix the ignore_status (git-fixes).
- tun: avoid double free in tun_free_netdev (git-fixes).
- tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() (git-fixes).
- tuntap: add sanity checks about msg_controllen in sendmsg (git-fixes).
- uaccess: fix type mismatch warnings from access_ok() (git-fixes).
- uas: add no-uas quirk for Hiksemi usb_disk (git-fixes).
- uas: ignore UAS for Thinkplus chips (git-fixes).
- ucounts: Base set_cred_ucounts changes on the real user (git-fixes).
- ucounts: Fix rlimit max values check (git-fixes).
- ucounts: Fix systemd LimitNPROC with private users regression (git-fixes).
- ucounts: Handle wrapping in is_ucounts_overlimit (git-fixes).
- ucounts: In set_cred_ucounts assume new-&gt;ucounts is non-NULL (git-fixes).
- udf: Fix crash after seekdir (bsc#1194592).
- udmabuf: Set the DMA mask for the udmabuf device (v2) (git-fixes).
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails (git-fixes).
- udmabuf: add back sanity check (git-fixes).
- units: Add SI metric prefix definitions (git-fixes).
- units: add the HZ macros (git-fixes).
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (git-fixes).
- usb-storage: Add ignore-residue quirk for NXP PN7462AU (git-fixes).
- usb.h: struct usb_device: hide new member (git-fixes).
- usb/hcd: Fix dma_map_sg error check (git-fixes).
- usb: Drop commas after SoC match table sentinels (git-fixes).
- usb: add NO_LPM quirk for Realforce 87U Keyboard (git-fixes).
- usb: add quirks for Lenovo OneLink+ Dock (git-fixes).
- usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() (git-fixes).
- usb: bdc: change state when port disconnected (git-fixes).
- usb: cdc-wdm: Use skb_put_data() instead of skb_put/memcpy pair (git-fixes).
- usb: cdns3 fix use-after-free at workaround 2 (git-fixes).
- usb: cdns3: Do not use priv_dev uninitialized in cdns3_gadget_ep_enable() (git-fixes).
- usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() (git-fixes).
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (git-fixes).
- usb: cdns3: fix issue with rearming ISO OUT endpoint (git-fixes).
- usb: cdns3: fix random warning message when driver load (git-fixes).
- usb: cdns3: host: fix endless superspeed hub port reset (git-fixes).
- usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (git-fixes).
- usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (git-fixes).
- usb: chipidea: fix deadlock in ci_otg_del_timer (git-fixes).
- usb: common: debug: Check non-standard control requests (git-fixes).
- usb: dwc2: fix wrong order of phy_power_on and phy_init (git-fixes).
- usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch (git-fixes).
- usb: dwc3: core: Deprecate GCTL.CORESOFTRESET (git-fixes).
- usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup (git-fixes).
- usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (git-fixes).
- usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA (git-fixes).
- usb: dwc3: disable USB core PHY management (git-fixes).
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- usb: dwc3: exynos: Fix remove() function (git-fixes).
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (git-fixes).
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (git-fixes).
- usb: dwc3: gadget: Clear ep descriptor last (git-fixes).
- usb: dwc3: gadget: Do not modify GEVNTCOUNT in pullup() (git-fixes).
- usb: dwc3: gadget: Do not set IMI for no_interrupt (git-fixes).
- usb: dwc3: gadget: Refactor pullup() (git-fixes).
- usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (git-fixes).
- usb: dwc3: gadget: Stop processing more requests on IMI (git-fixes).
- usb: dwc3: gadget: conditionally remove requests (git-fixes).
- usb: dwc3: gadget: fix high speed multiplier setting (git-fixes).
- usb: dwc3: gadget: refactor dwc3_repare_one_trb (git-fixes).
- usb: dwc3: pci: Add support for Intel Raptor Lake (git-fixes).
- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- usb: dwc3: qcom: fix missing optional irq warnings (git-fixes).
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (git-fixes).
- usb: ehci: Fix a function name in comments (git-fixes).
- usb: gadget: bdc: fix typo in comment (git-fixes).
- usb: gadget: f_fs: stricter integer overflow checks (git-fixes).
- usb: gadget: f_uac2: clean up some inconsistent indenting (git-fixes).
- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- usb: gadget: function: fix dangling pnp_string in f_printer.c (git-fixes).
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (git-fixes).
- usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() (git-fixes).
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes).
- usb: gadget: udc: amd5536 depends on HAS_DMA (git-fixes).
- usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (git-fixes).
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (git-fixes).
- usb: host: ohci-ppc-of: Fix refcount leak bug (git-fixes).
- usb: host: xhci-plat: suspend and resume clocks (git-fixes).
- usb: host: xhci-plat: suspend/resume clks for brcm (git-fixes).
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (git-fixes).
- usb: host: xhci: fix a comment typo in xhci_mem_init() (git-fixes).
- usb: host: xhci: use ffs() in xhci_mem_init() (git-fixes).
- usb: host: xhci: use snprintf() in xhci_decode_trb() (git-fixes).
- usb: hub: avoid warm port reset during USB3 disconnect (git-fixes).
- usb: idmouse: fix an uninit-value in idmouse_open (git-fixes).
- usb: mon: make mmapped memory read only (git-fixes).
- usb: mtu3: fix failed runtime suspend in host only mode (git-fixes).
- usb: musb: Fix musb_gadget.c rxstate overflow bug (git-fixes).
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (git-fixes).
- usb: renesas: Fix refcount leak bug (git-fixes).
- usb: smsc: use eth_hw_addr_set() (git-fixes).
- usb: storage: Add ASUS &amp;lt;0x0b05:0x1932&gt; to IGNORE_UAS (git-fixes).
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (git-fixes).
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (git-fixes).
- usb: typec: mux: Enter safe mode only when pins need to be reconfigured (git-fixes).
- usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (git-fixes).
- usb: typec: tcpm: fix typo in comment (git-fixes).
- usb: typec: tipd: Add an additional overflow check (git-fixes).
- usb: typec: tipd: Do not read/write more bytes than required (git-fixes).
- usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion (git-fixes).
- usb: typec: ucsi: Remove incorrect warning (git-fixes).
- usb: xhci-mtk: check boundary before check tt (git-fixes).
- usb: xhci-mtk: relax TT periodic bandwidth allocation (git-fixes).
- usb: xhci-mtk: update fs bus bandwidth by bw_budget_table (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (git-fixes).
- usb: xhci: tegra: Fix error check (git-fixes).
- usbnet: Fix linkwatch use-after-free on disconnect (git-fixes).
- usbnet: Fix memory leak in usbnet_disconnect() (git-fixes).
- usbnet: Run unregister_netdev() before unbind() again (git-fixes).
- usbnet: smsc95xx: Avoid link settings race on interrupt reception (git-fixes).
- usbnet: smsc95xx: Do not clear read-only PHY interrupt (git-fixes).
- usbnet: smsc95xx: Do not reset PHY behind PHY driver's back (git-fixes).
- usbnet: smsc95xx: Fix deadlock on runtime resume (git-fixes).
- usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling (git-fixes).
- userfaultfd/selftests: fix hugetlb area allocations (git-fixes).
- v3 of &quot;PCI: hv: Only reuse existing IRTE allocation for Multi-MSI&quot;
- vboxguest: Do not use devm for irq (git-fixes).
- vdpa_sim: avoid putting an uninitialized iova_domain (git-fixes).
- venus: pm_helpers: Fix warning in OPP during probe (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- vfio/type1: Unpin zero pages (git-fixes).
- vfio: Clear the caps-&gt;buf to NULL after free (git-fixes).
- vhost/vsock: Use kvmalloc/kvfree for larger packets (git-fixes).
- video/fbdev/stifb: Implement the stifb_fillrect() function (git-fixes).
- video: fbdev: amba-clcd: Fix refcount leak bugs (git-fixes).
- video: fbdev: arkfb: Check the size of screen before memset_io() (git-fixes).
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (git-fixes).
- video: fbdev: i740fb: Check the argument of i740_calc_vclk() (git-fixes).
- video: fbdev: i740fb: Error out if 'pixclock' equals zero (git-fixes).
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (git-fixes).
- video: fbdev: s3fb: Check the size of screen before memset_io() (git-fixes).
- video: fbdev: sis: fix typos in SiS_GetModeID() (git-fixes).
- video: fbdev: vt8623fb: Check the size of screen before memset_io() (git-fixes).
- virt: Add SEV-SNP guest driver (jsc#SLE-19924, jsc#SLE-24814).
- virt: sevguest: Add documentation for SEV-SNP CPUID Enforcement (jsc#SLE-19924, jsc#SLE-24814).
- virt: sevguest: Add support to derive key (jsc#SLE-19924, jsc#SLE-24814).
- virt: sevguest: Add support to get extended report (jsc#SLE-19924, jsc#SLE-24814).
- virt: sevguest: Fix bool function returning negative value (jsc#SLE-19924, jsc#SLE-24814).
- virt: sevguest: Fix return value check in alloc_shared_pages() (jsc#SLE-19924, jsc#SLE-24814).
- virt: vbox: convert to use dev_groups (git-fixes).
- virtio-blk: Use blk_validate_block_size() to validate block size (git-fixes).
- virtio-gpu: fix a missing check to avoid NULL dereference (git-fixes).
- virtio-net: fix the race between refill work and close (git-fixes).
- virtio_net: fix memory leak inside XPD_TX with mergeable (git-fixes).
- vmxnet3: Implement ethtool's get_channels command (bsc#1200431).
- vmxnet3: Record queue number to incoming packets (bsc#1200431).
- vmxnet3: Remove useless DMA-32 fallback configuration (bsc#1200431).
- vmxnet3: add command to set ring buffer sizes (bsc#1200431).
- vmxnet3: add support for capability registers (bsc#1200431).
- vmxnet3: add support for large passthrough BAR register (bsc#1200431).
- vmxnet3: add support for out of order rx completion (bsc#1200431).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- vmxnet3: disable overlay offloads if UPT device does not support (bsc#1200431).
- vmxnet3: do not reschedule napi for rx processing (bsc#1200431).
- vmxnet3: limit number of TXDs used for TSO packet (bsc#1200431).
- vmxnet3: prepare for version 7 changes (bsc#1200431).
- vmxnet3: switch from 'pci_' to 'dma_' API (bsc#1200431).
- vmxnet3: update to version 7 (bsc#1200431).
- vmxnet3: use correct intrConf reference when using extended queues (git-fixes).
- vmxnet3: use ext1 field to indicate encapsulated packet (bsc#1200431).
- vrf: do not run conntrack on vrf with !dflt qdisc (git-fixes).
- vrf: fix packet sniffing for traffic originating from ip tunnels (git-fixes).
- vsock/virtio: enable VQs early on probe (git-fixes).
- vsock/virtio: initialize vdev-&gt;priv before using VQs (git-fixes).
- vsock/virtio: read the negotiated features before using VQs (git-fixes).
- vsock: Fix memory leak in vsock_connect() (git-fixes).
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (git-fixes).
- vsock: fix possible infinite sleep in vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg() (git-fixes).
- vsock: remove vsock from connected table when connect is interrupted by a signal (git-fixes).
- vt: Clear selection before changing the font (git-fixes).
- watch-queue: remove spurious double semicolon (git-fixes).
- watch_queue: Fix missing locking in add_watch_to_object() (git-fixes).
- watch_queue: Fix missing rcu annotation (git-fixes).
- watchdog-export-lockup_detector_reconfigure.patch.
- watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (git-fixes).
- watchdog: armada_37xx_wdt: Fix .set_timeout callback (git-fixes).
- watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (git-fixes).
- watchdog: ftwdt010_wdt: fix test for platform_get_irq() failure (git-fixes).
- watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource (git-fixes).
- watchdog: wdat_wdt: Set the min and max timeout values properly (bsc#1194023).
- watchqueue: make sure to serialize 'wqueue-&gt;defunct' properly (git-fixes).
- wifi: airo: do not assign -1 to unsigned char (git-fixes).
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (git-fixes).
- wifi: ath11k: Fix QCN9074 firmware boot on x86 (git-fixes).
- wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (git-fixes).
- wifi: ath11k: fix number of VHT beamformee spatial streams (git-fixes).
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (git-fixes).
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level (git-fixes).
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (git-fixes).
- wifi: cfg80211/mac80211: reject bad MBSSID elements (git-fixes).
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (git-fixes).
- wifi: cfg80211: do not allow multi-BSSID in S1G (git-fixes).
- wifi: cfg80211: fix buffer overflow in elem comparison (git-fixes).
- wifi: cfg80211: fix ieee80211_data_to_8023_exthdr handling of small packets (git-fixes).
- wifi: cfg80211: fix memory leak in query_regdb_file() (git-fixes).
- wifi: cfg80211: silence a sparse RCU warning (git-fixes).
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON (git-fixes).
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (git-fixes).
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (git-fixes).
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (git-fixes).
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (other cases) (git-fixes).
- wifi: libertas: Fix possible refcount leak in if_usb_probe() (git-fixes).
- wifi: mac80211: Do not finalize CSA in IBSS mode if state is disconnected (git-fixes).
- wifi: mac80211: Fix UAF in ieee80211_scan_rx() (git-fixes).
- wifi: mac80211: Fix ack frame idr leak when mesh has no route (git-fixes).
- wifi: mac80211: allow bw change during channel switch in mesh (git-fixes).
- wifi: mac80211: do not drop packets smaller than the LLC-SNAP header on fast-rx (git-fixes).
- wifi: mac80211: fix decap offload for stations on AP_VLAN interfaces (git-fixes).
- wifi: mac80211: fix memory free error when registering wiphy fail (git-fixes).
- wifi: mac80211: fix probe req HE capabilities access (git-fixes).
- wifi: mac80211: fix regression with non-QoS drivers (git-fixes).
- wifi: mac80211: limit A-MSDU subframes for client too (git-fixes).
- wifi: mac80211_hwsim: add back erroneously removed cast (git-fixes).
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (git-fixes).
- wifi: mac80211_hwsim: check length for virtio packets (git-fixes).
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (git-fixes).
- wifi: mac80211_hwsim: fix race condition in pending packet (git-fixes).
- wifi: mac80211_hwsim: use 32-bit skb cookie (git-fixes).
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (git-fixes).
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation (git-fixes).
- wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload (git-fixes).
- wifi: mt76: mt7915: do not check state before configuring implicit beamform (git-fixes).
- wifi: mt76: mt7921: reset msta-&gt;airtime_ac while clearing up hw value (git-fixes).
- wifi: mt76: sdio: fix transmitting packet hangs (git-fixes).
- wifi: p54: Fix an error handling path in p54spi_probe() (git-fixes).
- wifi: p54: add missing parentheses in p54_flush() (git-fixes).
- wifi: rt2x00: correctly set BBP register 86 for MT7620 (git-fixes).
- wifi: rt2x00: do not run Rt5592 IQ calibration on MT7620 (git-fixes).
- wifi: rt2x00: set SoC wmac clock register (git-fixes).
- wifi: rt2x00: set VGC gain for both chains of MT7620 (git-fixes).
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (git-fixes).
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM (git-fixes).
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection (git-fixes).
- wifi: rtl8xxxu: Improve rtl8xxxu_queue_select (git-fixes).
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask (git-fixes).
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (git-fixes).
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (git-fixes).
- wifi: rtlwifi: 8192de: correct checking of IQK reload (git-fixes).
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (git-fixes).
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (git-fies).
- wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() (git-fixes).
- wifi: rtw88: check the return value of alloc_workqueue() (git-fixes).
- wifi: rtw89: 8852a: rfk: fix div 0 exception (git-fixes).
- wifi: wext: use flex array destination for memcpy() (git-fixes).
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (git-fixes).
- wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (git-fixes).
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (git-fixes).
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (git-fixes).
- wifi: wilc1000: validate number of channels (git-fixes).
- wifi: wilc1000: validate pairwise and authentication suite offsets (git-fixes).
- wireguard: device: check for metadata_dst with skb_valid_dst() (git-fixes).
- wireless: Remove redundant 'flush_workqueue()' calls (bsc#1202131).
- workqueue: do not skip lockdep work dependency in cancel_work_sync() (git-fixes).
- wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (git-fixes).
- x86/Hyper-V: Add SEV negotiate protocol support in Isolation VM (bsc#1190497).
- x86/Xen: streamline (and fix) PV CPU enumeration (git-fixes).
- x86/boot: Add Confidential Computing type to setup_data (jsc#SLE-19924, jsc#SLE-24814).
- x86/boot: Add a pointer to Confidential Computing blob in bootparams (jsc#SLE-19924, jsc#SLE-24814).
- x86/boot: Do not propagate uninitialized boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/boot: Introduce helpers for MSR reads/writes (jsc#SLE-19924, jsc#SLE-24814).
- x86/boot: Put globals that are accessed early into the .data section (jsc#SLE-19924, jsc#SLE-24814).
- x86/boot: Use MSR read/write helpers instead of inline assembly (jsc#SLE-19924, jsc#SLE-24814).
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (bsc#1206037).
- x86/compressed/64: Add identity mapping for Confidential Computing blob (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/64: Add identity mappings for setup_data entries (bsc#1204970).
- x86/compressed/64: Add support for SEV-SNP CPUID table in #VC handlers (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/64: Detect/setup SEV/SME features earlier during boot (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/acpi: Move EFI config table lookup to helper (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/acpi: Move EFI detection to helper (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/acpi: Move EFI kexec handling into common code (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/acpi: Move EFI system table lookup to helper (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed/acpi: Move EFI vendor table lookup to helper (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed: Add SEV-SNP feature detection/setup (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed: Add helper for validating pages in the decompression stage (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed: Export and rename add_identity_map() (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed: Register GHCB memory when SEV-SNP is active (jsc#SLE-19924, jsc#SLE-24814).
- x86/compressed: Use firmware-validated CPUID leaves for SEV-SNP guests (jsc#SLE-19924, jsc#SLE-24814).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/entry: Work around Clang __bdos() bug (git-fixes).
- x86/extable: Extend extable functionality (git-fixes).
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (bnc#1205282).
- x86/futex: Remove .fixup usage (git-fixes).
- x86/head/64: Re-enable stack protection (jsc#SLE-19924, jsc#SLE-24814).
- x86/hyperv: Disable hardlockup detector by default in Hyper-V guests (git-fixes).
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (git-fixes).
- x86/hyperv: Update 'struct hv_enlightened_vmcs' definition (git-fixes).
- x86/hyperv: fix invalid writes to MSRs during root partition kexec (git-fixes).
- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- x86/kernel: Mark the .bss..decrypted section as shared in the RMP table (jsc#SLE-19924, jsc#SLE-24814).
- x86/kernel: Validate ROM memory before accessing when SEV-SNP is active (jsc#SLE-19924, jsc#SLE-24814).
- x86/kexec: Fix double-free of elf header buffer (bsc#1205567).
- x86/kexec: fix memory leak of elf header buffer (bsc#1196444).
- x86/microcode/AMD: Apply the patch early on every logical thread (bsc#1205264).
- x86/mm: Extend cc_attr to include AMD SEV-SNP (jsc#SLE-19924, jsc#SLE-24814).
- x86/mm: Validate memory when changing the C-bit (jsc#SLE-19924, jsc#SLE-24814).
- x86/olpc: fix 'logical not is only applied to the left hand side' (git-fixes).
- x86/retbleed: Add fine grained Kconfig knobs (bsc#1190497).
- x86/sev: Add SEV-SNP feature detection/setup (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Add a helper for the PVALIDATE instruction (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Add a sev= cmdline option (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Add helper for validating pages in early enc attribute changes (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Add missing __init annotations to SEV init routines (jsc#SLE-19924 jsc#SLE-24814).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Check SEV-SNP features support (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Check the VMPL level (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Define the Linux-specific guest termination reasons (bsc#1190497).
- x86/sev: Detect/setup SEV/SME features earlier in boot (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Do not use cc_platform_has() for early SEV-SNP calls (bsc#1204970).
- x86/sev: Get the AP jump table address from secrets page (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Move MSR-based VMGEXITs for CPUID to helper (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Provide support for SNP guest request NAEs (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Register GHCB memory when SEV-SNP is active (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Register SEV-SNP guest request platform device (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Remove duplicated assignment to variable info (bsc#1204970).
- x86/sev: Save the negotiated GHCB version (bsc#1190497).
- x86/sev: Use SEV-SNP AP creation to start secondary CPUs (jsc#SLE-19924, jsc#SLE-24814).
- x86/sev: Use firmware-validated CPUID for SEV-SNP guests (jsc#SLE-19924, jsc#SLE-24814).
- x86/uaccess: Implement macros for CMPXCHG on user addresses (git-fixes).
- x86/xen: Remove undefined behavior in setup_features() (git-fixes).
- xen-blkback: Advertise feature-persistent as user requested (git-fixes).
- xen-blkback: Apply 'feature_persistent' parameter when connect (git-fixes).
- xen-blkback: fix persistent grants negotiation (git-fixes).
- xen-blkfront: Advertise feature-persistent as user requested (git-fixes).
- xen-blkfront: Apply 'feature_persistent' parameter when connect (git-fixes).
- xen-blkfront: Cache feature_persistent value before advertisement (git-fixes).
- xen-blkfront: Handle NULL gendisk (git-fixes).
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (git-fixes).
- xen/gntdev: Accommodate VMA splitting (git-fixes).
- xen/gntdev: Avoid blocking in unmap_grant_pages() (git-fixes).
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (git-fixes).
- xen/gntdev: Prevent leaking grants (git-fixes).
- xen/gntdev: fix unmap notification order (git-fixes).
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (git-fixes).
- xen/pcpu: fix possible memory leak in register_pcpu() (git-fixes).
- xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (git-fixes).
- xen/usb: do not use arbitrary_virt_to_machine() (git-fixes).
- xen/xenbus: fix return type in xenbus_file_read() (git-fixes).
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (git-fixes).
- xen: detect uninitialized xenbus in xenbus_init (git-fixes).
- xen: do not continue xenstore initialization in case of errors (git-fixes).
- xfs: Fix the free logic of state in xfs_attr_node_hasname (git-fixes).
- xfs: check sb_meta_uuid for dabuf buffer recovery (git-fixes).
- xfs: convert XLOG_FORCED_SHUTDOWN() to xlog_is_shutdown() (git-fixes).
- xfs: fix perag reference leak on iteration race with growfs (git-fixes).
- xfs: fix soft lockup via spinning in filestream ag selection loop (git-fixes).
- xfs: fix use-after-free in xattr node block inactivation (git-fixes).
- xfs: fix xfs_ifree() error handling to not leak perag ref (git-fixes).
- xfs: fold perag loop iteration logic into helper function (git-fixes).
- xfs: make xfs_rtalloc_query_range input parameters const (git-fixes).
- xfs: only bother with sync_filesystem during readonly remount (git-fixes).
- xfs: prevent UAF in xfs_log_item_in_current_chkpt (git-fixes).
- xfs: prevent a UAF when log IO errors race with unmount (git-fixes).
- xfs: remove incorrect ASSERT in xfs_rename (git-fixes).
- xfs: rename the next_agno perag iteration variable (git-fixes).
- xfs: reorder iunlink remove operation in xfs_ifree (git-fixes).
- xfs: reserve quota for dir expansion when linking/unlinking files (bsc#1205616).
- xfs: reserve quota for target dir expansion when renaming files (bsc#1205679).
- xfs: revert &quot;xfs: actually bump warning counts when we send warnings&quot; (git-fixes).
- xfs: terminate perag iteration reliably on agcount (git-fixes).
- xfs: use invalidate_lock to check the state of mmap_lock (git-fixes).
- xfs: use kmem_cache_free() for kmem_cache objects (git-fixes).
- xfs: use setattr_copy to set vfs inode attributes (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown (git-fixes).
- xhci: Allocate separate command structures for each LPM command (git-fixes).
- xhci: Do not show warning for reinit on known broken suspend (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing the device (git-fixes).
- xhci: Set HCD flag to defer primary roothub registration (git-fixes).
- xhci: dbc: Fix memory leak in xhci_alloc_dbc() (git-fixes).
- xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (git-fixes).
- xhci: dbc: create and remove dbc structure in dbgtty driver (git-fixes).
- xhci: dbc: refactor xhci_dbc_init() (git-fixes).
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (git-fixes).
- xprtrdma: treat all calls not a bcall when bc_serv is NULL (git-fixes).
- zonefs: Clear inode information flags on inode creation (git-fixes).
- zonefs: Fix management of open zones (git-fixes).
- zonefs: add MODULE_ALIAS_FS (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.5.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.5.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.5.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.5.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.5.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.5.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4584</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671536571"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206428" id="1206428" title="cloud-regionsrv-client removing too many entries from hosts file ref:_00D1igLOd._5005qHpurr:ref" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified such that there is
    no empty line at the end of the file the content after removing the registration data does
    not match the content prior to registration.
    The update fixes the issue triggered by an index logic error.
  </description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.8" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.0.8-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.0.8-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.8" release="150000.6.86.1" arch="src" src="src/cloud-regionsrv-client-10.0.8-150000.6.86.1.src.rpm">
          <filename>cloud-regionsrv-client-10.0.8-150000.6.86.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.86.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-50</id>
    <title>Recommended update for shadow</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673257353"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205502" id="1205502" title="L3: useradd audit event user id field cannot be interpreted" type="bugzilla"/>
    </references>
    <description>This update for shadow fixes the following issues:

- Fix issue with user id field that cannot be interpreted (bsc#1205502)
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150400.10.3.1" arch="noarch" src="noarch/login_defs-4.8.1-150400.10.3.1.noarch.rpm">
          <filename>login_defs-4.8.1-150400.10.3.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.10.3.1" arch="src" src="src/shadow-4.8.1-150400.10.3.1.src.rpm">
          <filename>shadow-4.8.1-150400.10.3.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.10.3.1" arch="x86_64" src="x86_64/shadow-4.8.1-150400.10.3.1.x86_64.rpm">
          <filename>shadow-4.8.1-150400.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.10.3.1" arch="aarch64" src="aarch64/shadow-4.8.1-150400.10.3.1.aarch64.rpm">
          <filename>shadow-4.8.1-150400.10.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-384</id>
    <title>Recommended update for irqbalance</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676254264"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204962" id="1204962" title="irqbalance: --banmod option is not working as expected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206661" id="1206661" title="openQA test fails in check_logs" type="bugzilla"/>
    </references>
    <description>This update for irqbalance fixes the following issues:

- Fix `--banmod` option not working as expected (bsc#1206661, bsc#1204962)
</description>
    <pkglist>
      <collection>
        <package name="irqbalance" epoch="0" version="1.8.0.18.git+2435e8d" release="150400.3.5.1" arch="src" src="src/irqbalance-1.8.0.18.git+2435e8d-150400.3.5.1.src.rpm">
          <filename>irqbalance-1.8.0.18.git+2435e8d-150400.3.5.1.src.rpm</filename>
        </package>
        <package name="irqbalance" epoch="0" version="1.8.0.18.git+2435e8d" release="150400.3.5.1" arch="x86_64" src="x86_64/irqbalance-1.8.0.18.git+2435e8d-150400.3.5.1.x86_64.rpm">
          <filename>irqbalance-1.8.0.18.git+2435e8d-150400.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="irqbalance" epoch="0" version="1.8.0.18.git+2435e8d" release="150400.3.5.1" arch="aarch64" src="aarch64/irqbalance-1.8.0.18.git+2435e8d-150400.3.5.1.aarch64.rpm">
          <filename>irqbalance-1.8.0.18.git+2435e8d-150400.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-41</id>
    <title>Recommended update for kdump</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673256195"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204743" id="1204743" title="L3: network does not work in kdump in s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191410" id="1191410" title="Call trace is seen with kdump kernel boot messages post migration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204000" id="1204000" title="kdump fails to collect vmcore over NFS with HNV interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1144337" id="1144337" title="kdump: Dump is not saved via network using ssh" type="bugzilla"/>
    </references>
    <description>This update for kdump fixes the following issues:

- Make the kdump-save.service reboot after kdump-save is finished (bsc#1204000)
- Fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- Rebuild initrd image after migration on ppc64 architecture (bsc#1191410)
</description>
    <pkglist>
      <collection>
        <package name="kdump" epoch="0" version="1.0.2+git18.g615d6ab" release="150400.3.8.1" arch="src" src="src/kdump-1.0.2+git18.g615d6ab-150400.3.8.1.src.rpm">
          <filename>kdump-1.0.2+git18.g615d6ab-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git18.g615d6ab" release="150400.3.8.1" arch="x86_64" src="x86_64/kdump-1.0.2+git18.g615d6ab-150400.3.8.1.x86_64.rpm">
          <filename>kdump-1.0.2+git18.g615d6ab-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git18.g615d6ab" release="150400.3.8.1" arch="aarch64" src="aarch64/kdump-1.0.2+git18.g615d6ab-150400.3.8.1.aarch64.rpm">
          <filename>kdump-1.0.2+git18.g615d6ab-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4631</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672216194"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204779" id="1204779" title="VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206028" id="1206028" title="VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206075" id="1206075" title="VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205797" id="1205797" title="VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206077" id="1206077" title="VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206071" id="1206071" title="VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206072" id="1206072" title="VUL-0: CVE-2022-3591: vim: Use After Free" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3520" id="CVE-2022-3520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4293" id="CVE-2022-4293" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4293" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4141" id="CVE-2022-4141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" id="CVE-2022-3705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3591" id="CVE-2022-3591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3491" id="CVE-2022-3491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3491" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4292" id="CVE-2022-4292" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4292" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0.1040:

- CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 (bsc#1206028).
- CVE-2022-3520: vim: Heap-based Buffer Overflow (bsc#1206071).
- CVE-2022-3591: vim: Use After Free (bsc#1206072).
- CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882 (bsc#1206075).
- CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 (bsc#1206077).
- CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11 (bsc#1205797).
- CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1040" release="150000.5.31.1" arch="src" src="src/vim-9.0.1040-150000.5.31.1.src.rpm">
          <filename>vim-9.0.1040-150000.5.31.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1040" release="150000.5.31.1" arch="noarch" src="noarch/vim-data-common-9.0.1040-150000.5.31.1.noarch.rpm">
          <filename>vim-data-common-9.0.1040-150000.5.31.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1040" release="150000.5.31.1" arch="x86_64" src="x86_64/vim-small-9.0.1040-150000.5.31.1.x86_64.rpm">
          <filename>vim-small-9.0.1040-150000.5.31.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1040" release="150000.5.31.1" arch="aarch64" src="aarch64/vim-small-9.0.1040-150000.5.31.1.aarch64.rpm">
          <filename>vim-small-9.0.1040-150000.5.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4628</id>
    <title>Security update for sqlite3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672215816"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206337" id="1206337" title="VUL-0: CVE-2022-46908: sqlite3: relying on --safe for execution of an untrusted CLI script" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46908" id="CVE-2022-46908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46908" type="cve"/>
    </references>
    <description>This update for sqlite3 fixes the following issues:

- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, 
  when relying on --safe for execution of an untrusted CLI script (bsc#1206337).
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.39.3" release="150000.3.20.1" arch="x86_64" src="x86_64/libsqlite3-0-3.39.3-150000.3.20.1.x86_64.rpm">
          <filename>libsqlite3-0-3.39.3-150000.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.39.3" release="150000.3.20.1" arch="src" src="src/sqlite3-3.39.3-150000.3.20.1.src.rpm">
          <filename>sqlite3-3.39.3-150000.3.20.1.src.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.39.3" release="150000.3.20.1" arch="x86_64" src="x86_64/sqlite3-tcl-3.39.3-150000.3.20.1.x86_64.rpm">
          <filename>sqlite3-tcl-3.39.3-150000.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0" epoch="0" version="3.39.3" release="150000.3.20.1" arch="aarch64" src="aarch64/libsqlite3-0-3.39.3-150000.3.20.1.aarch64.rpm">
          <filename>libsqlite3-0-3.39.3-150000.3.20.1.aarch64.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.39.3" release="150000.3.20.1" arch="aarch64" src="aarch64/sqlite3-tcl-3.39.3-150000.3.20.1.aarch64.rpm">
          <filename>sqlite3-tcl-3.39.3-150000.3.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4635</id>
    <title>Security update for conmon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1672313486"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1708" id="CVE-2022-1708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1708" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200285" id="1200285" title="VUL-0: CVE-2022-1708: cri-o: memory exhaustion on the node when access to the kube API" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

conmon was updated to version 2.1.5:

* don't leak syslog_identifier
* logging: do not read more that the buf size
* logging: fix error handling
* Makefile: Fix install for FreeBSD
* signal: Track changes to get_signal_descriptor in the FreeBSD version
* Packit: initial enablement

Update to version 2.1.4:

* Fix a bug where conmon crashed when it got a SIGCHLD

update to 2.1.3:

* Stop using g_unix_signal_add() to avoid threads
* Rename CLI optionlog-size-global-max to log-global-size-max 

Update to version 2.1.2:

* add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285)
* journald: print tag and name if both are specified
* drop some logs to debug level

Update to version 2.1.0

* logging: buffer partial messages to journald
* exit: close all fds &gt;= 3
* fix: cgroup: Free memory_cgroup_file_path if open fails.

Update to version 2.0.32

* Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
* exit_command: Fix: unset subreaper attribute before running exit command

Update to version 2.0.31
* logging: new mode -l passthrough
* ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
* conmon: Fix: free userdata files before exec cleanup
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.3.1" arch="src" src="src/conmon-2.1.5-150400.3.3.1.src.rpm">
          <filename>conmon-2.1.5-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.3.1" arch="x86_64" src="x86_64/conmon-2.1.5-150400.3.3.1.x86_64.rpm">
          <filename>conmon-2.1.5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.3.1" arch="aarch64" src="aarch64/conmon-2.1.5-150400.3.3.1.aarch64.rpm">
          <filename>conmon-2.1.5-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-177</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674763073"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194038" id="1194038" title="utils-linux rpmbuild %checks fail when @ in the directory path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205646" id="1205646" title="Temporary ABI incompatibility breaks uuidd restart" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- Fix tests not passing when '@' character is in build path: 
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.14.1" arch="src" src="src/util-linux-2.37.2-150400.8.14.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.14.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.14.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.14.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.14.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.14.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.14.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.14.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.14.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.14.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-37</id>
    <title>Security update for ca-certificates-mozilla</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673015772"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206212" id="1206212" title="VUL-0: CVE-2022-23491: python-certifi,ca-certificates-mozilla: Dropping TrustCor root certificates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206622" id="1206622" title="VUL-0: ca-certificates-mozilla: Update to 2.60" type="bugzilla"/>
    </references>
    <description>This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle &quot;valid before nov 30 2022&quot;
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates-mozilla" epoch="0" version="2.60" release="150200.27.1" arch="noarch" src="noarch/ca-certificates-mozilla-2.60-150200.27.1.noarch.rpm">
          <filename>ca-certificates-mozilla-2.60-150200.27.1.noarch.rpm</filename>
        </package>
        <package name="ca-certificates-mozilla" epoch="0" version="2.60" release="150200.27.1" arch="src" src="src/ca-certificates-mozilla-2.60-150200.27.1.src.rpm">
          <filename>ca-certificates-mozilla-2.60-150200.27.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-46</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673256981"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

-  Update pci, usb and vendor ids
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.365" release="150000.3.54.1" arch="noarch" src="noarch/hwdata-0.365-150000.3.54.1.noarch.rpm">
          <filename>hwdata-0.365-150000.3.54.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.365" release="150000.3.54.1" arch="src" src="src/hwdata-0.365-150000.3.54.1.src.rpm">
          <filename>hwdata-0.365-150000.3.54.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-48</id>
    <title>Recommended update for libtirpc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673257098"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199467" id="1199467" title="rpcbind ignores net.ipv4.ip_local_reserved_ports" type="bugzilla"/>
    </references>
    <description>This update for libtirpc fixes the following issues:

- Consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding to a random port (bsc#1199467)
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.2.6" release="150300.3.17.1" arch="src" src="src/libtirpc-1.2.6-150300.3.17.1.src.rpm">
          <filename>libtirpc-1.2.6-150300.3.17.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.2.6" release="150300.3.17.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.2.6-150300.3.17.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.2.6-150300.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.2.6" release="150300.3.17.1" arch="x86_64" src="x86_64/libtirpc3-1.2.6-150300.3.17.1.x86_64.rpm">
          <filename>libtirpc3-1.2.6-150300.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.2.6" release="150300.3.17.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.2.6-150300.3.17.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.2.6-150300.3.17.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.2.6" release="150300.3.17.1" arch="aarch64" src="aarch64/libtirpc3-1.2.6-150300.3.17.1.aarch64.rpm">
          <filename>libtirpc3-1.2.6-150300.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-56</id>
    <title>Security update for libksba</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673259247"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206579" id="1206579" title="VUL-0: CVE-2022-47629: libksba: integer overflow vulnerability in the CRL signature parser" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47629" id="CVE-2022-47629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47629" type="cve"/>
    </references>
    <description>This update for libksba fixes the following issues:

- CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL
  signature parser (bsc#1206579).
</description>
    <pkglist>
      <collection>
        <package name="libksba" epoch="0" version="1.3.5" release="150000.4.6.1" arch="src" src="src/libksba-1.3.5-150000.4.6.1.src.rpm">
          <filename>libksba-1.3.5-150000.4.6.1.src.rpm</filename>
        </package>
        <package name="libksba8" epoch="0" version="1.3.5" release="150000.4.6.1" arch="x86_64" src="x86_64/libksba8-1.3.5-150000.4.6.1.x86_64.rpm">
          <filename>libksba8-1.3.5-150000.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="libksba8" epoch="0" version="1.3.5" release="150000.4.6.1" arch="aarch64" src="aarch64/libksba8-1.3.5-150000.4.6.1.aarch64.rpm">
          <filename>libksba8-1.3.5-150000.4.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-75</id>
    <title>Security update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673510619"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206044" id="1206044" title="L3: MIB host-resource size calculation is broken for XFS - ref:_00D1igLOd._5005qGHkGL:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205150" id="1205150" title="VUL-0: CVE-2022-44792: net-snmp,net-snmp-openssl1: remote attacker with write access can cause a NULL pointer dereference in handle_ipDefaultTTL()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206828" id="1206828" title="net-snmp package doesn't support aes256 as privacy protocol" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205148" id="1205148" title="VUL-0: CVE-2022-44793: net-snmp-openssl1,net-snmp: remote attacker with write access can cause a NULL pointer dereference in handle_ipv6IpForwarding()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44793" id="CVE-2022-44793" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44793" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44792" id="CVE-2022-44792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44792" type="cve"/>
    </references>
    <description>This update for net-snmp fixes the following issues:

- CVE-2022-44793: Fixed a NULL pointer dereference issue that could
  allow a remote attacker with write access to crash the server
  instance (bsc#1205148).
- CVE-2022-44792: Fixed a NULL pointer dereference issue that could
  allow a remote attacker with write access to crash the server
  instance (bsc#1205150).

Other fixes:
- Enabled AES-192 and AES-256 privacy protocols (bsc#1206828).
- Fixed an incorrect systemd hardening that caused home directory
  size and allocation to be listed incorrectly (bsc#1206044)
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.8.1" arch="x86_64" src="x86_64/libsnmp40-5.9.3-150300.15.8.1.x86_64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.8.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.3" release="150300.15.8.1" arch="src" src="src/net-snmp-5.9.3-150300.15.8.1.src.rpm">
          <filename>net-snmp-5.9.3-150300.15.8.1.src.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.8.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.3-150300.15.8.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.8.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.8.1" arch="aarch64" src="aarch64/libsnmp40-5.9.3-150300.15.8.1.aarch64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.8.1.aarch64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.8.1" arch="aarch64" src="aarch64/snmp-mibs-5.9.3-150300.15.8.1.aarch64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-79</id>
    <title>Security update for python-future</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1673510798"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40899" id="CVE-2022-40899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40899" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206673" id="1206673" title="VUL-0: CVE-2022-40899: python,python39,python3,python310,python36,python27,python-future: ReDos in python-future and some cpython versions" type="bugzilla"/>
    </references>
    <description>This update for python-future fixes the following issues:

- CVE-2022-40899: Fixed an issue that could allow attackers to cause
  an excessive CPU usage via a crafted Set-Cookie header (bsc#1206673).
</description>
    <pkglist>
      <collection>
        <package name="python-future" epoch="0" version="0.18.2" release="150300.3.3.1" arch="src" src="src/python-future-0.18.2-150300.3.3.1.src.rpm">
          <filename>python-future-0.18.2-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-future" epoch="0" version="0.18.2" release="150300.3.3.1" arch="noarch" src="noarch/python3-future-0.18.2-150300.3.3.1.noarch.rpm">
          <filename>python3-future-0.18.2-150300.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-139</id>
    <title>Security update for python-certifi</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674654156"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206212" id="1206212" title="VUL-0: CVE-2022-23491: python-certifi,ca-certificates-mozilla: Dropping TrustCor root certificates" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491" id="CVE-2022-23491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491" type="cve"/>
    </references>
    <description>This update for python-certifi fixes the following issues:

- remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle
  certs (bsc#1206212 CVE-2022-23491)
     - TrustCor RootCert CA-1
     - TrustCor RootCert CA-2
     - TrustCor ECA-1
- Add removeTrustCor.patch
</description>
    <pkglist>
      <collection>
        <package name="python-certifi" epoch="0" version="2018.1.18" release="150000.3.3.1" arch="src" src="src/python-certifi-2018.1.18-150000.3.3.1.src.rpm">
          <filename>python-certifi-2018.1.18-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-certifi" epoch="0" version="2018.1.18" release="150000.3.3.1" arch="noarch" src="noarch/python3-certifi-2018.1.18-150000.3.3.1.noarch.rpm">
          <filename>python3-certifi-2018.1.18-150000.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-159</id>
    <title>Security update for python-setuptools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674753730"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897" id="CVE-2022-40897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206667" id="1206667" title="VUL-0: CVE-2022-40897: python27-setuptools,python36-setuptools,python310-setuptools,python-setuptools,python39-setuptools: ReDos in setuptools" type="bugzilla"/>
    </references>
    <description>This update for python-setuptools fixes the following issues:

- CVE-2022-40897: Fixed an excessive CPU usage that could be triggered
  by fetching a malicious HTML document (bsc#1206667).
</description>
    <pkglist>
      <collection>
        <package name="python-setuptools" epoch="0" version="44.1.1" release="150400.3.3.1" arch="src" src="src/python-setuptools-44.1.1-150400.3.3.1.src.rpm">
          <filename>python-setuptools-44.1.1-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.3.3.1" arch="noarch" src="noarch/python3-setuptools-44.1.1-150400.3.3.1.noarch.rpm">
          <filename>python3-setuptools-44.1.1-150400.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-119</id>
    <title>Security update for mozilla-nss</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674206896"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3479" id="CVE-2022-3479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3479" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207038" id="1207038" title="VUL-0: CVE-2022-23491: mozilla-nss: Update NSS to 3.79.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204272" id="1204272" title="VUL-0: CVE-2022-3479: mozilla-nss: nss client auth crash without a user certificate in the database" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491" id="CVE-2022-23491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491" type="cve"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- CVE-2022-3479: Fixed a potential crash that could be triggered when
  a server requested a client authentication certificate, but the
  client had no certificates stored (bsc#1204272).
- Updated to version 3.79.3 (bsc#1207038):
  - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/libfreebl3-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>libfreebl3-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.3" release="150400.3.23.1" arch="src" src="src/mozilla-nss-3.79.3-150400.3.23.1.src.rpm">
          <filename>mozilla-nss-3.79.3-150400.3.23.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.3" release="150400.3.23.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.3-150400.3.23.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.3-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/libfreebl3-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>libfreebl3-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.3" release="150400.3.23.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.3-150400.3.23.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.3-150400.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-788</id>
    <title>Recommended update for libsolv, libzypp, zypper</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678991900"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205570" id="1205570" title="pattern shown as @System beside repo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203249" id="1203249" title="Add a separate zypper command for removing ptfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204548" id="1204548" title="zypp-plugin-spacewalk: Repositories are refreshed upon every zypper ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203248" id="1203248" title="zypper rm ptf-xxxx should always fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203715" id="1203715" title="zypper serviceadd fails on idempotency check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178233" id="1178233" title="zypper up does not report any updates in WSL after longer pause" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204956" id="1204956" title="Cached repo packages are deleted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205636" id="1205636" title="zypper ps -s shows wrong command and no service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206949" id="1206949" title="[Build 20230107] openQA test fails in yast2_software_management" type="bugzilla"/>
    </references>
    <description>This update for libsolv, libzypp, zypper fixes the following issues:

libsolv:

- Do not autouninstall SUSE PTF packages
- Ensure 'duplinvolvedmap_all' is reset when a solver is reused
- Fix &quot;keep installed&quot; jobs not disabling &quot;best update&quot; rules
- New '-P' and '-W' options for `testsolv`
- New introspection interface for weak dependencies similar to ruleinfos
- Ensure special case file dependencies are written correctly in the testcase writer
- Support better info about alternatives
- Support decision reason queries
- Support merging of related decisions
- Support stringification of multiple solvables
- Support stringification of ruleinfo, decisioninfo and decision reasons

libzypp:

- Avoid calling getsockopt when we know the info already.
  This patch should fix logging on WSL, getsockopt seems to not be fully supported but the code required it when
  accepting new socket connections (bsc#1178233)
- Avoid redirecting 'history.logfile=/dev/null' into the target
- Create '.no_auto_prune' in the package cache dir to prevent auto cleanup of orphaned repositories (bsc#1204956)
- Enhance yaml-cpp detection
- Improve download of optional files
- MultiCurl: Make sure to reset the progress function when falling back.
- Properly reset range requests (bsc#1204548)
- Removing a PTF without enabled repos should always fail (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be removed (not replaced!) as well. 
  To remove a PTF `zypper install -- -PTF` or a dedicated `zypper removeptf PTF` should be used. This will update the
  installed PTF packages to theit latest version.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to calculate if a repository needs to be refreshed.
  This optimisation only takes place if the repo does specify only downloading base urls.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server MediaMultiCurl used to fallback to a fixed,
  relatively small BLKSIZE. This patch changes the fallback into a dynamic value based on the filesize using a similar
  metric as the MirrorCache implementation on the server side.
- ProgressData: enforce reporting the INIT||END state (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems (bsc#1205636)


zypper:

- Allow to (re)add a service with the same URL (bsc#1203715)
- Bump dependency requirement to libzypp-devel 17.31.7 or greater
- Explain outdatedness of repositories
- patterns: Avoid dispylaing superfluous @System entries (bsc#1205570)
- Provide `removeptf` command (bsc#1203249)
  A remove command which prefers replacing dependant packages to removing them as well.
  A PTF is typically removed as soon as the fix it provides is applied to the latest official update of the dependant
  packages. However it is not desired for the dependant packages to be removed together with the PTF, which is what the
  remove command would do. The `removeptf` command however will aim to replace the dependant packages by their official
  update versions.
- Update man page and explain '.no_auto_prune' (bsc#1204956)
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.23" release="150400.3.3.1" arch="src" src="src/libsolv-0.7.23-150400.3.3.1.src.rpm">
          <filename>libsolv-0.7.23-150400.3.3.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.23" release="150400.3.3.1" arch="x86_64" src="x86_64/libsolv-tools-0.7.23-150400.3.3.1.x86_64.rpm">
          <filename>libsolv-tools-0.7.23-150400.3.3.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.8" release="150400.3.14.1" arch="src" src="src/libzypp-17.31.8-150400.3.14.1.src.rpm">
          <filename>libzypp-17.31.8-150400.3.14.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.8" release="150400.3.14.1" arch="x86_64" src="x86_64/libzypp-17.31.8-150400.3.14.1.x86_64.rpm">
          <filename>libzypp-17.31.8-150400.3.14.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.59" release="150400.3.12.2" arch="src" src="src/zypper-1.14.59-150400.3.12.2.src.rpm">
          <filename>zypper-1.14.59-150400.3.12.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.59" release="150400.3.12.2" arch="x86_64" src="x86_64/zypper-1.14.59-150400.3.12.2.x86_64.rpm">
          <filename>zypper-1.14.59-150400.3.12.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.59" release="150400.3.12.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.59-150400.3.12.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.59-150400.3.12.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.23" release="150400.3.3.1" arch="aarch64" src="aarch64/libsolv-tools-0.7.23-150400.3.3.1.aarch64.rpm">
          <filename>libsolv-tools-0.7.23-150400.3.3.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.8" release="150400.3.14.1" arch="aarch64" src="aarch64/libzypp-17.31.8-150400.3.14.1.aarch64.rpm">
          <filename>libzypp-17.31.8-150400.3.14.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.59" release="150400.3.12.2" arch="aarch64" src="aarch64/zypper-1.14.59-150400.3.12.2.aarch64.rpm">
          <filename>zypper-1.14.59-150400.3.12.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-188</id>
    <title>Recommended update for zlib</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674817662"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203652" id="1203652" title="zlib: inflate() does not update strm.adler if DFLTCC is used" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issues:

- Follow up fix for bug bsc#1203652 due to libxml2 issues
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.39.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.39.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.39.1" arch="src" src="src/zlib-1.2.11-150000.3.39.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.39.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.39.1" arch="x86_64" src="x86_64/zlib-devel-1.2.11-150000.3.39.1.x86_64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.39.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.39.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.39.1" arch="aarch64" src="aarch64/zlib-devel-1.2.11-150000.3.39.1.aarch64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-346</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676038036"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204939" id="1204939" title="venv-salt-minion returning 'base:custom' failed: Jinja variable 'dict object' has no attribute 'machine_id'" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Control the collection of lvm grains via config (bsc#1204939)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.20.1" arch="x86_64" src="x86_64/python3-salt-3004-150400.8.20.1.x86_64.rpm">
          <filename>python3-salt-3004-150400.8.20.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.20.1" arch="src" src="src/salt-3004-150400.8.20.1.src.rpm">
          <filename>salt-3004-150400.8.20.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.20.1" arch="x86_64" src="x86_64/salt-3004-150400.8.20.1.x86_64.rpm">
          <filename>salt-3004-150400.8.20.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.20.1" arch="x86_64" src="x86_64/salt-minion-3004-150400.8.20.1.x86_64.rpm">
          <filename>salt-minion-3004-150400.8.20.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.20.1" arch="x86_64" src="x86_64/salt-transactional-update-3004-150400.8.20.1.x86_64.rpm">
          <filename>salt-transactional-update-3004-150400.8.20.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.20.1" arch="aarch64" src="aarch64/python3-salt-3004-150400.8.20.1.aarch64.rpm">
          <filename>python3-salt-3004-150400.8.20.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.20.1" arch="aarch64" src="aarch64/salt-3004-150400.8.20.1.aarch64.rpm">
          <filename>salt-3004-150400.8.20.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.20.1" arch="aarch64" src="aarch64/salt-minion-3004-150400.8.20.1.aarch64.rpm">
          <filename>salt-minion-3004-150400.8.20.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.20.1" arch="aarch64" src="aarch64/salt-transactional-update-3004-150400.8.20.1.aarch64.rpm">
          <filename>salt-transactional-update-3004-150400.8.20.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1809</id>
    <title>Recommended update for haveged</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681206476"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203079" id="1203079" title="L3: haveged is marked as deleted after reboot" type="bugzilla"/>
    </references>
    <description>This update for haveged fixes the following issues:

- Synchronize haveged instances during switching root (bsc#1203079)
</description>
    <pkglist>
      <collection>
        <package name="haveged" epoch="0" version="1.9.14" release="150400.3.3.1" arch="src" src="src/haveged-1.9.14-150400.3.3.1.src.rpm">
          <filename>haveged-1.9.14-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="haveged" epoch="0" version="1.9.14" release="150400.3.3.1" arch="x86_64" src="x86_64/haveged-1.9.14-150400.3.3.1.x86_64.rpm">
          <filename>haveged-1.9.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libhavege2" epoch="0" version="1.9.14" release="150400.3.3.1" arch="x86_64" src="x86_64/libhavege2-1.9.14-150400.3.3.1.x86_64.rpm">
          <filename>libhavege2-1.9.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="haveged" epoch="0" version="1.9.14" release="150400.3.3.1" arch="aarch64" src="aarch64/haveged-1.9.14-150400.3.3.1.aarch64.rpm">
          <filename>haveged-1.9.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libhavege2" epoch="0" version="1.9.14" release="150400.3.3.1" arch="aarch64" src="aarch64/libhavege2-1.9.14-150400.3.3.1.aarch64.rpm">
          <filename>libhavege2-1.9.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-125</id>
    <title>Recommended update for microos-tools</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674558251"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202395" id="1202395" title="BTRFS subvolume attr change even if subvolume is set to RO" type="bugzilla"/>
    </references>
    <description>This update for microos-tools fixes the following issues:

- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11] 

- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [bsc#1202395]
</description>
    <pkglist>
      <collection>
        <package name="microos-tools" epoch="0" version="2.17" release="150400.3.3.1" arch="src" src="src/microos-tools-2.17-150400.3.3.1.src.rpm">
          <filename>microos-tools-2.17-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.17" release="150400.3.3.1" arch="x86_64" src="x86_64/microos-tools-2.17-150400.3.3.1.x86_64.rpm">
          <filename>microos-tools-2.17-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.17" release="150400.3.3.1" arch="aarch64" src="aarch64/microos-tools-2.17-150400.3.3.1.aarch64.rpm">
          <filename>microos-tools-2.17-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-149</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674724751"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187428" id="1187428" title="kernel 5.3.18-24.61.1 introduces network retransmits and packet loss" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188605" id="1188605" title="[pfifo_fast,core count, GEC] MPI Benchmarks stall with qdisc pfifo_fast if (# queues) &lt; (# CPU cores)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190969" id="1190969" title="Wrong recognize VROC partitions." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191259" id="1191259" title="kernel: FIPS 140-3: SP800-90B for drivers/char/random.c userspace interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199294" id="1199294" title="xfs test creates traceback in Azure on aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201068" id="1201068" title="Partner-L3: Frequency scaling driver intel_pstate not loading on SLES 15 SP4 with Sapphire Rapids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203219" id="1203219" title="SLE-15SP4: Performance regression on aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203740" id="1203740" title="NFS4ERR_OLD_STATEID in response to WRITE is not handled well" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203829" id="1203829" title="[ampere] SLERT/arm64: kernel BUG at fs/inode.c:548!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204614" id="1204614" title="VUL-0: CVE-2022-42432: kernel-source-rt,kernel-source-azure,kernel-source: nftables: leak of stale stack data to userspace via nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204652" id="1204652" title="VUL-0: CVE-2022-3344: kernel: KVM: SVM: nested shutdown interception could lead to host crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204760" id="1204760" title="SCTP sysctl parameters get boundaries from host instead of net ns — ref:_00D1igLOd._5005qEDqV7:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204911" id="1204911" title="NULL pointer dereference starting docker on 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204989" id="1204989" title="cluster with BLUESTORE_SPURIOUS_READ_ERRORS warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205257" id="1205257" title="SLES 15 SP4 - boot: Add secure boot trailer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205263" id="1205263" title="Update legacy EDAC sysfs interface to provide 12 channel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205485" id="1205485" title="Partner-L3: [DELL EMC SLES 15 SP4 BUG] When system profile is set to &quot;Performance per Watt (DAPC)&quot; in BIOS, Bootup time is taking more" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205496" id="1205496" title="ext4 fs driver hangs with large ext4 volume (&gt;120TB ??)  and xattr and ACL enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205601" id="1205601" title="L3: SES7.1 31 OSD(s) have spurious read errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205695" id="1205695" title="LPAR is crashed by Phyp when doing DLPAR CPU operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206073" id="1206073" title="VUL-0: CVE-2022-3564: kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206098" id="1206098" title="[SLES][15-SP5][XEN][Build58.1] Error &quot;mpt3sas 0000:81:00.0: swiotlb buffer is full&quot; prevents xen host from booting up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206101" id="1206101" title="LTP:vsock01: setsockopt returns EINVAL in m32 mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206188" id="1206188" title="[MSFT][MANA][NET][Patch] Fix Race On Per-CQ Variable Napi_iperf Panic Fix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206209" id="1206209" title="VUL-0: CVE-2022-4379: kernel: use-after-free in NFS module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206273" id="1206273" title="fuse: lock inode unconditionally in fuse_fallocate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206344" id="1206344" title="memcg: Fix possible use-after-free in memcg_write_event_control()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206389" id="1206389" title="VUL-0: CVE-2022-3108: kernel: kmemdup's return value not checked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206390" id="1206390" title="VUL-0: CVE-2022-3113: kernel: devm_kzalloc return value not checked, null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206391" id="1206391" title="VUL-0: CVE-2022-3114: kernel: Unchecked kcalloc return leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206393" id="1206393" title="VUL-0: CVE-2022-3115: kernel: Unchecked kzalloc return leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206394" id="1206394" title="VUL-0: CVE-2022-3111: kernel: Unchecked WM8350_IRQ_CHG_FAST_RDY free leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206395" id="1206395" title="VUL-0: CVE-2022-3107: kernel: Unchecked kvmalloc_array return leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206396" id="1206396" title="VUL-0: CVE-2022-3104: kernel: kmalloc's return value not checked, leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206397" id="1206397" title="VUL-0: CVE-2022-3106: kernel: kmalloc's return value not checked, leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206398" id="1206398" title="VUL-0: CVE-2022-3105: kernel: uapi_finalize's return value not checked leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206399" id="1206399" title="VUL-0: CVE-2022-3112: kernel: kzalloc's return value not checked leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206456" id="1206456" title="panic in btrfs_ioctl_logical_to_ino" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206468" id="1206468" title="memory leak in set_mempolicy_home_node" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206515" id="1206515" title="VUL-0: CVE-2022-47520: kernel-source-rt,kernel-source,kernel-source-azure: WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206536" id="1206536" title="bug fix of mlx5 dirver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206554" id="1206554" title="wrong completion record for dmaengine in uapi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206602" id="1206602" title="L3: ] Kernel panic - not syncing: Hard LOCKUP - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206619" id="1206619" title="Delayed outgoing TCP packets causing latency spikes in RBD volumes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206664" id="1206664" title="VUL-0: CVE-2022-4662: kernel-source-azure,kernel-source-rt,kernel-source:  Recursive locking violation in usb-storage that can cause the kernel to deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206703" id="1206703" title="Sound stops working for MSI GS66 after kernel 5.14.21-150400.24.38 update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206794" id="1206794" title="Frequent Kernel Crashes due to problem in af_key.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206896" id="1206896" title="Out of memory in local cgroup's memory may cause denial of service outside its area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206912" id="1206912" title="Fix dma mask handling in mpt3sas" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207016" id="1207016" title="SLES15 SP5 - During DLPAR operations in shared mode and dedicated mode with smt loop, device tree entries are not getting populated(dlpar operation was success)[Denali/Everest/Rainier][P10]" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3344" id="CVE-2022-3344" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3344" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4662" id="CVE-2022-4662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3115" id="CVE-2022-3115" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3115" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47520" id="CVE-2022-47520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3112" id="CVE-2022-3112" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3112" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3564" id="CVE-2022-3564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4379" id="CVE-2022-4379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4379" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3108" id="CVE-2022-3108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3104" id="CVE-2022-3104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3113" id="CVE-2022-3113" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3113" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3107" id="CVE-2022-3107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3111" id="CVE-2022-3111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3111" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3105" id="CVE-2022-3105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3106" id="CVE-2022-3106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3106" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3114" id="CVE-2022-3114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3114" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1445" id="PED-1445" title="https://jira.suse.com/browse/PED-1445" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-568" id="PED-568" title="https://jira.suse.com/browse/PED-568" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-3344: Fixed a bug where nested shutdown interception could lead to host crash (bsc#1204652)
- CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664)
- CVE-2022-3115: Fixed a null pointer dereference in malidp_crtc.c caused by a lack of checks of the return value of kzalloc. (bsc#1206393)
- CVE-2022-47520: Fixed an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet. (bsc#1206515)
- CVE-2022-3112: Fixed a  null pointer dereference caused by lacks check of the return value of kzalloc() in vdec_helpers.c:amvdec_set_canvases. (bsc#1206399)
- CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073)
- CVE-2022-4379: Fixed a use-after-free vulnerability in nfs4file.c:__nfs42_ssc_open. (bsc#1206209)
- CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389)
- CVE-2022-3104: Fixed a null pointer dereference caused by caused by a missing check of the return value of kzalloc() in bugs.c:lkdtm_ARRAY_BOUNDS. (bsc#1206396)
- CVE-2022-3113: Fixed a null pointer dereference caused by a missing check of the return value of devm_kzalloc. (bsc#1206390)
- CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395)
- CVE-2022-3114: Fixed a null pointer dereference caused by a missing check of the return value of kcalloc. (bsc#1206391)
- CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350_IRQ_CHG_FAST_RDY in wm8350_init_charger. (bsc#1206394)
- CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398)
- CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397)

The following non-security bugs were fixed:

- acct: fix potential integer overflow in encode_comp_t() (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (git-fixes).
- ACPICA: Fix error code path in acpi_ds_call_control_method() (git-fixes).
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (git-fixes).
- ALSA: asihpi: fix missing pci_disable_device() (git-fixes).
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from podxt (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit (git-fixes).
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (git-fixes).
- ALSA: pcm: Set missing stop_operating flag at undoing trigger start (git-fixes).
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (git-fixes).
- ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (git-fixes).
- ALSA: usb-audio: add the quirk for KT0206 device (git-fixes).
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (git-fixes).
- apparmor: fix a memleak in multi_transaction_new() (git-fixes).
- apparmor: Fix abi check to include v8 abi (git-fixes).
- apparmor: fix lockdep warning when removing a namespace (git-fixes).
- apparmor: Fix memleak in alloc_ns() (git-fixes).
- apparmor: Use pointer to struct aa_label for lbs_cred (git-fixes).
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (git-fixes).
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-38x: Fix compatible string for gpios (git-fixes).
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-39x: Fix compatible string for gpios (git-fixes).
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (git-fixes).
- ARM: dts: qcom: apq8064: fix coresight compatible (git-fixes).
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (git-fixes).
- ARM: dts: rockchip: fix ir-receiver node names (git-fixes).
- ARM: dts: rockchip: fix node name for hym8563 rtc (git-fixes).
- ARM: dts: rockchip: remove clock-frequency from rtc (git-fixes).
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (git-fixes).
- ARM: dts: spear600: Fix clcd interrupt (git-fixes).
- ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (git-fixes).
- ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (git-fixes).
- ARM: dts: turris-omnia: Add ethernet aliases (git-fixes).
- ARM: dts: turris-omnia: Add switch port 6 node (git-fixes).
- ARM: mmp: fix timer_read delay (git-fixes).
- ARM: ux500: do not directly dereference __iomem (git-fixes).
- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path (performance bsc#1203219).
- arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (git-fixes).
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (git-fixes).
- arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (git-fixes).
- arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (git-fixes).
- arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (git-fixes).
- arm64: dts: mt2712e: Fix unit address for pinctrl node (git-fixes).
- arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (git-fixes).
- arm64: dts: mt6779: Fix devicetree build warnings (git-fixes).
- arm64: dts: mt7622: drop r_smpl property from mmc node (git-fixes).
- arm64: dts: mt8183: drop drv-type from mmc-node (git-fixes).
- arm64: dts: mt8183: Fix Mali GPU clock (git-fixes).
- arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (git-fixes).
- arm64: dts: qcom: msm8916: Drop MSS fallback compatible (git-fixes).
- arm64: dts: qcom: msm8996: Add MSM8996 Pro support (git-fixes).
- arm64: dts: qcom: msm8996: fix GPU OPP table (git-fixes).
- arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (git-fixes).
- arm64: dts: qcom: sdm630: fix UART1 pin bias (git-fixes).
- arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (git-fixes).
- arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength (git-fixes).
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (git-fixes).
- arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (git-fixes).
- arm64: dts: qcom: sm8250: correct LPASS pin pull down (git-fixes).
- arm64: dts: qcom: sm8250: drop bogus DP PHY clock (git-fixes).
- arm64: dts: qcom: sm8250: fix USB-DP PHY registers (git-fixes).
- arm64: dts: rockchip: fix ir-receiver node names (git-fixes).
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (git-fixes).
- arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (git-fixes).
- arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (git-fixes).
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (git-fixes).
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (git-fixes).
- ASoC: cs42l51: Correct PGA Volume minimum value (git-fixes).
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example (git-fixes).
- ASoC: fsl_micfil: explicitly clear CHnF flags (git-fixes).
- ASoC: fsl_micfil: explicitly clear software reset bit (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (git-fixes).
- ASoC: jz4740-i2s: Handle independent FIFO flush bits (git-fixes).
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (git-fixes).
- ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (git-fixes).
- ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (git-fixes).
- ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (git-fixes).
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (git-fixes).
- ASoC: ops: Correct bounds check for second channel on SX controls (git-fixes).
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (git-fixes).
- ASoC: pxa: fix null-pointer dereference in filter() (git-fixes).
- ASoC: qcom: Add checks for devm_kcalloc (git-fixes).
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (git-fixes).
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (git-fixes).
- ASoC: rt5670: Remove unbalanced pm_runtime_put() (git-fixes).
- ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (git-fixes).
- ASoC: soc-pcm: Add NULL check in BE reparenting (git-fixes).
- ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (git-fixes).
- ASoC: wm8994: Fix potential deadlock (git-fixes).
- ata: ahci: Fix PCS quirk application for suspend (git-fixes).
- binfmt_elf: fix documented return value for load_elf_phdrs() (git-fixes).
- binfmt_misc: fix shift-out-of-bounds in check_special_flags (git-fixes).
- binfmt: Fix error return code in load_elf_fdpic_binary() (git-fixes).
- block: Do not reread partition table on exclusively open device (bsc#1190969).
- Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (git-fixes).
- Bluetooth: btusb: Add debug message for CSR controllers (git-fixes).
- Bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_bcsp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_core: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_h5: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_ll: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_qca: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (git-fixes).
- Bluetooth: RFCOMM: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- brcmfmac: return error when getting invalid max_flowrings from dongle (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- can: do not increase rx statistics when generating a CAN rx error message frame (git-fixes).
- can: do not increase rx_bytes statistics for RTR frames (git-fixes).
- can: kvaser_usb_leaf: Fix bogus restart events (git-fixes).
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping (git-fixes).
- can: kvaser_usb_leaf: Set Warning state even without bus errors (git-fixes).
- can: kvaser_usb: do not increase tx statistics when sending error message frames (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (git-fixes).
- can: kvaser_usb: make use of units.h in assignment of frequency (git-fixes).
- can: m_can: fix typo prescalar -&gt; prescaler (git-fixes).
- can: m_can: is_lec_err(): clean up LEC error handling (git-fixes).
- can: mcba_usb: Fix termination command argument (git-fixes).
- can: sja1000: fix size of OCR_MODE_MASK define (git-fixes).
- can: tcan4x5x: Remove invalid write in clear_interrupts (git-fixes).
- chardev: fix error handling in cdev_device_add() (git-fixes).
- cifs: Add &quot;extbuf&quot; and &quot;extbuflen&quot; args to smb2_compound_op() (bsc#1193629).
- cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1193629).
- cifs: do not leak -ENOMEM in smb2_open_file() (bsc#1193629).
- cifs: do not refresh cached referrals from unactive mounts (bsc#1193629).
- cifs: fix confusing debug message (bsc#1193629).
- cifs: Fix kmap_local_page() unmapping (git-fixes).
- cifs: fix missing display of three mount options (bsc#1193629).
- cifs: fix oops during encryption (bsc#1199294).
- cifs: fix refresh of cached referrals (bsc#1193629).
- cifs: fix source pathname comparison of dfs supers (bsc#1193629).
- cifs: fix various whitespace errors in headers (bsc#1193629).
- cifs: get rid of mount options string parsing (bsc#1193629).
- cifs: minor cleanup of some headers (bsc#1193629).
- cifs: optimize reconnect of nested links (bsc#1193629).
- cifs: Parse owner/group for stat in smb311 posix extensions (bsc#1193629).
- cifs: print warning when conflicting soft vs. hard mount options specified (bsc#1193629).
- cifs: reduce roundtrips on create/qinfo requests (bsc#1193629).
- cifs: refresh root referrals (bsc#1193629).
- cifs: Remove duplicated include in cifsglob.h (bsc#1193629).
- cifs: remove unused smb3_fs_context::mount_options (bsc#1193629).
- cifs: set correct ipc status after initial tree connect (bsc#1193629).
- cifs: set correct status of tcon ipc when reconnecting (bsc#1193629).
- cifs: set correct tcon status after initial tree connect (bsc#1193629).
- cifs: set resolved ip in sockaddr (bsc#1193629).
- cifs: share dfs connections and supers (bsc#1193629).
- cifs: skip alloc when request has no pages (bsc#1193629).
- cifs: split out ses and tcon retrieval from mount_get_conns() (bsc#1193629).
- cifs: update internal module number (bsc#1193629).
- cifs: use fs_context for automounts (bsc#1193629).
- cifs: use origin fullpath for automounts (bsc#1193629).
- class: fix possible memory leak in __class_register() (git-fixes).
- clk: Fix pointer casting to prevent oops in devm_clk_release() (git-fixes).
- clk: generalize devm_clk_get() a bit (git-fixes).
- clk: imx: imx8mp: add shared clk gate for usb suspend clk (git-fixes).
- clk: imx: replace osc_hdmi with dummy (git-fixes).
- clk: nomadik: correct struct name kernel-doc warning (git-fixes).
- clk: Provide new devm_clk helpers for prepared and enabled clocks (git-fixes).
- clk: qcom: clk-krait: fix wrong div2 functions (git-fixes).
- clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (git-fixes).
- clk: qcom: lpass-sc7180: Fix pm_runtime usage (git-fixes).
- clk: renesas: r9a06g032: Repair grave increment error (git-fixes).
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (git-fixes).
- clk: samsung: Fix memory leak in _samsung_clk_register_pll() (git-fixes).
- clk: socfpga: Fix memory leak in socfpga_gate_init() (git-fixes).
- clk: st: Fix memory leak in st_of_quadfs_setup() (git-fixes).
- clk: sunxi-ng: v3s: Correct the header guard of ccu-sun8i-v3s.h (git-fixes).
- clocksource/drivers/sh_cmt: Access registers according to spec (git-fixes).
- clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (git-fixes).
- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- cpufreq: ACPI: Only set boost MSRs on supported CPUs (bsc#1205485).
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (bsc#1205485).
- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP mode (bsc#1201068).
- crypto: ccree - Make cc_debugfs_global_fini() available for module init function (git-fixes).
- crypto: ccree - Remove debugfs when platform_driver_register failed (git-fixes).
- crypto: cryptd - Use request context instead of stack for sub-request (git-fixes).
- crypto: hisilicon/qm - fix missing destroy qp_idr (git-fixes).
- crypto: img-hash - Fix variable dereferenced before check 'hdev-&gt;req' (git-fixes).
- crypto: n2 - add missing hash statesize (git-fixes).
- crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (git-fixes).
- crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (git-fixes).
- crypto: rockchip - add fallback for ahash (git-fixes).
- crypto: rockchip - add fallback for cipher (git-fixes).
- crypto: rockchip - better handle cipher key (git-fixes).
- crypto: rockchip - do not do custom power management (git-fixes).
- crypto: rockchip - do not store mode globally (git-fixes).
- crypto: rockchip - remove non-aligned handling (git-fixes).
- crypto: rockchip - rework by using crypto_engine (git-fixes).
- crypto: sun8i-ss - use dma_addr instead u32 (git-fixes).
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (git-fixes).
- device property: Fix documentation for fwnode_get_next_parent() (git-fixes).
- dmaengine: idxd: Fix crc_val field for completion record (git-fixes).
- docs/zh_CN: Fix '.. only::' directive's expression (git-fixes).
- Documentation: devres: add missing devm_acpi_dma_controller_free() helper (git-fixes).
- Documentation: devres: add missing MEM helper (git-fixes).
- Documentation: devres: add missing PHY helpers (git-fixes).
- Documentation: devres: add missing PWM helper (git-fixes).
- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free device/resource/connection (git-fixes).
- drbd: remove usage of list iterator variable after loop (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- driver core: Fix bus_type.match() error handling in __driver_attach() (git-fixes).
- drivers: dio: fix possible memory leak in dio_init() (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (git-fixes).
- drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (git-fixes).
- drm/amd/display: fix array index out of bound error in bios parser (git-fixes).
- drm/amd/display: Manually adjust strobe for DCN303 (git-fixes).
- drm/amd/display: prevent memory leak (git-fixes).
- drm/amd/display: Use the largest vready_offset in pipe group (git-fixes).
- drm/amd/pm/smu11: BACO is supported when it's in BACO state (git-fixes).
- drm/amdgpu: fix pci device refcount leak (git-fixes).
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (git-fixes).
- drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (git-fixes).
- drm/amdgpu: Fix type of second parameter in trans_msg() callback (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- drm/amdgpu/powerplay/psm: Fix memory leak in power state init (git-fixes).
- drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (git-fixes).
- drm/amdkfd: Fix memory leakage (git-fixes).
- drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (git-fixes).
- drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (git-fixes).
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup (git-fixes).
- drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink (git-fixes).
- drm/etnaviv: add missing quirks for GC300 (git-fixes).
- drm/etnaviv: do not truncate physical page address (git-fixes).
- drm/fourcc: Add packed 10bit YUV 4:2:0 format (git-fixes).
- drm/fourcc: Fix vsub/hsub for Q410 and Q401 (git-fixes).
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (git-fixes).
- drm/i915: Fix documentation for intel_uncore_forcewake_put__locked (git-fixes).
- drm/i915: remove circ_buf.h includes (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (git-fixes).
- drm/i915/display: Do not disable DDI/Transcoder when setting phy test pattern (git-fixes).
- drm/i915/dsi: fix VBT send packet port selection for dual link DSI (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/migrate: do not check the scratch page (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/ttm: never purge busy objects (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() (git-fixes).
- drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (git-fixes).
- drm/mediatek: Modify dpi power on/off sequence (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used (git-fixes).
- drm/msm: Use drm_mode_copy() (git-fixes).
- drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- drm/radeon: Add the missed acpi_put_table() to fix memory leak (git-fixes).
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (git-fixes).
- drm/rockchip: lvds: fix PM usage counter unbalance in poweron (git-fixes).
- drm/rockchip: Use drm_mode_copy() (git-fixes).
- drm/shmem-helper: Avoid vm_open error paths (git-fixes).
- drm/shmem-helper: Remove errant put in error path (git-fixes).
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (git-fixes).
- drm/sti: Use drm_mode_copy() (git-fixes).
- drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (git-fixes).
- drm/vmwgfx: Do not use screen objects when SEV is active (git-fixes).
- drm/vmwgfx: Fix a sparse warning in kernel docs (git-fixes).
- drm/vmwgfx: Validate the box size for the snooped cursor (git-fixes).
- Drop FIPS mode DRBG-&gt;getrandom(2) wire-up (bsc#1191259)
- dt-bindings: clock: qcom,aoncc-sm8250: fix compatible (git-fixes).
- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes).
- dt-bindings: display: sun6i-dsi: Fix clock conditional (git-fixes).
- dt-bindings: gpio: gpio-davinci: Increase maxItems in gpio-line-names (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property (git-fixes).
- EDAC/mc_sysfs: Increase legacy channel support to 12 (bsc#1205263).
- efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes).
- ext4: avoid BUG_ON when creating xattrs (bsc#1205496).
- extcon: usbc-tusb320: Add support for mode setting and reset (git-fixes).
- extcon: usbc-tusb320: Add support for TUSB320L (git-fixes).
- extcon: usbc-tusb320: Factor out extcon into dedicated functions (git-fixes).
- fbcon: Use kzalloc() in fbcon_prepare_logo() (git-fixes).
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed (git-fixes).
- fbdev: geode: do not build on UML (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (git-fixes).
- fbdev: pm2fb: fix missing pci_disable_device() (git-fixes).
- fbdev: smscufx: Fix several use-after-free bugs (git-fixes).
- fbdev: ssd1307fb: Drop optional dependency (git-fixes).
- fbdev: uvesafb: do not build on UML (git-fixes).
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (git-fixes).
- fbdev: vermilion: decrease reference count in error path (git-fixes).
- fbdev: via: Fix error in via_core_init() (git-fixes).
- firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (git-fixes).
- floppy: Fix memory leak in do_floppy_init() (git-fixes).
- fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206273).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe (git-fixes).
- gpiolib: cdev: fix NULL-pointer dereferences (git-fixes).
- gpiolib: check the 'ngpios' property in core gpiolib code (git-fixes).
- gpiolib: fix memory leak in gpiochip_setup_dev() (git-fixes).
- gpiolib: Get rid of redundant 'else' (git-fixes).
- gpiolib: improve coding style for local variables (git-fixes).
- gpiolib: make struct comments into real kernel docs (git-fixes).
- hamradio: baycom_epp: Fix return type of baycom_send_packet() (git-fixes).
- hamradio: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- HID: hid-sensor-custom: set fixed size for custom attributes (git-fixes).
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (git-fixes).
- HID: mcp2221: do not connect hidraw (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses quirk (git-fixes).
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (git-fixes).
- HID: usbhid: Add ALWAYS_POLL quirk for some mice (git-fixes).
- HID: wacom: Ensure bootloader PID is usable in hidraw mode (git-fixes).
- HSI: omap_ssi_core: Fix error handling in ssi_init() (git-fixes).
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (git-fixes).
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (git-fixes).
- hwmon: (jc42) Convert register access and caching to regmap/regcache (git-fixes).
- hwmon: (jc42) Fix missing unlock on error in jc42_write() (git-fixes).
- hwmon: (jc42) Restore the min/max/critical temperatures on resume (git-fixes).
- hwrng: amd - Fix PCI device refcount leak (git-fixes).
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (git-fixes).
- i2c: mux: reg: check return value after calling platform_get_resource() (git-fixes).
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (git-fixes).
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (git-fixes)
- ibmveth: Always stop tx queues during close (bsc#1065729).
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock (git-fixes).
- iio: adc128s052: add proper .data members in adc128_of_match table (git-fixes).
- iio: fix memory leak in iio_device_register_eventset() (git-fixes).
- iio: temperature: ltc2983: make bulk write buffer DMA-safe (git-fixes).
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list (git-fixes).
- Input: elants_i2c - properly handle the reset GPIO when power is off (git-fixes).
- Input: joystick - fix Kconfig warning for JOYSTICK_ADC (git-fixes).
- Input: wistron_btns - disable on UML (git-fixes).
- integrity: Fix memory leakage in keyring allocation error path (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- ipmi: fix memleak when unload ipmi driver (git-fixes).
- ipmi: fix use after free in _ipmi_destroy_user() (git-fixes).
- ipmi: kcs: Poll OBF briefly to reduce OBE latency (git-fixes).
- ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (git-fixes).
- kABI: reintroduce a non-inline usleep_range (git-fixes).
- lib/debugobjects: fix stat count and optimize debug_objects_mem_init (git-fixes).
- lib/fonts: fix undefined behavior in bit shift for get_default_font (git-fixes).
- mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (git-fixes).
- mailbox: mpfs: read the system controller's status (git-fixes).
- mailbox: zynq-ipi: fix error handling while device_register() fails (git-fixes).
- media: adv748x: afe: Select input port when initializing AFE (git-fixes).
- media: camss: Clean up received buffers on failed start of streaming (git-fixes).
- media: dvb-core: Fix double free in dvb_register_device() (git-fixes).
- media: dvb-core: Fix ignored return value in dvb_register_frontend() (git-fixes).
- media: dvb-frontends: fix leak of memory fw (git-fixes).
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (git-fixes).
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (git-fixes).
- media: i2c: ad5820: Fix error path (git-fixes).
- media: imon: fix a race condition in send_packet() (git-fixes).
- media: saa7164: fix missing pci_disable_device() (git-fixes).
- media: si470x: Fix use-after-free in si470x_int_in_callback() (git-fixes).
- media: solo6x10: fix possible memory leak in solo_sysfs_init() (git-fixes).
- media: stv0288: use explicitly signed char (git-fixes).
- media: v4l2-ctrls: Fix off-by-one error in integer menu control check (git-fixes).
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks (git-fixes).
- media: videobuf-dma-contig: use dma_mmap_coherent (git-fixes).
- media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (git-fixes).
- media: vimc: Fix wrong function called when vimc_init() fails (git-fixes).
- media: vivid: fix compose size exceed boundary (git-fixes).
- memcg, kmem: further deprecate kmem.limit_in_bytes (bsc#1206896).
- memcg: Fix possible use-after-free in memcg_write_event_control() (bsc#1206344).
- mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (git-fixes).
- mfd: mt6360: Add bounds checking in Regmap read/write call-backs (git-fixes).
- mfd: pm8008: Fix return value check in pm8008_probe() (git-fixes).
- mfd: pm8008: Remove driver data structure pm8008_data (git-fixes).
- mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (git-fixes).
- mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (git-fixes).
- misc: ocxl: fix possible name leak in ocxl_file_register_afu() (git-fixes).
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (git-fixes).
- mISDN: hfcmulti: do not call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (git-fixes).
- mISDN: hfcpci: do not call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (git-fixes).
- mISDN: hfcsusb: do not call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (git-fixes).
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read (bsc#1204989,bsc#1205601).
- mm/mempolicy: fix memory leak in set_mempolicy_home_node system call (bsc#1206468).
- mmc: alcor: fix return value check of mmc_add_host() (git-fixes).
- mmc: atmel-mci: fix return value check of mmc_add_host() (git-fixes).
- mmc: core: Normalize the error handling branch in sd_read_ext_regs() (git-fixes).
- mmc: f-sdh30: Add quirks for broken timeout clock capability (git-fixes).
- mmc: meson-gx: fix return value check of mmc_add_host() (git-fixes).
- mmc: mmci: fix return value check of mmc_add_host() (git-fixes).
- mmc: moxart: fix return value check of mmc_add_host() (git-fixes).
- mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (git-fixes).
- mmc: mxcmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: omap_hsmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: pxamci: fix return value check of mmc_add_host() (git-fixes).
- mmc: renesas_sdhi: alway populate SCC pointer (git-fixes).
- mmc: renesas_sdhi: better reset from HS400 mode (git-fixes).
- mmc: rtsx_pci: fix return value check of mmc_add_host() (git-fixes).
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (git-fixes).
- mmc: toshsd: fix return value check of mmc_add_host() (git-fixes).
- mmc: via-sdmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: vub300: fix return value check of mmc_add_host() (git-fixes).
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (git-fixes).
- mmc: wbsd: fix return value check of mmc_add_host() (git-fixes).
- mmc: wmt-sdmmc: fix return value check of mmc_add_host() (git-fixes).
- module: change to print useful messages from elf_validity_check() (git-fixes).
- module: fix [e_shstrndx].sh_size=0 OOB access (git-fixes).
- mt76: stop the radar detector after leaving dfs channel (git-fixes).
- mtd: Fix device name leak when register device failed in add_mtd_device() (git-fixes).
- mtd: lpddr2_nvm: Fix possible null-ptr-deref (git-fixes).
- mtd: maps: pxa2xx-flash: fix memory leak in probe (git-fixes).
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (git-fixes).
- mtd: spi-nor: Fix the number of bytes for the dummy cycles (git-fixes).
- mtd: spi-nor: hide jedec_id sysfs attribute if not present (git-fixes).
- net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428 bsc#1206619).
- net: mana: Fix race on per-CQ variable napi work_done (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (git-fixes).
- net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes).
- net: usb: smsc95xx: fix external PHY reset (git-fixes).
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (bsc#1206536).
- net/mlx5: Lag, filter non compatible devices (bsc#1206536).
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (bsc#1204614).
- nfc: Fix potential resource leaks (git-fixes).
- nfc: pn533: Clear nfc_target before being used (git-fixes).
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (git-fixes).
- NFS: Handle missing attributes in OPEN reply (bsc#1203740).
- nilfs2: fix shift-out-of-bounds due to too large exponent of block size (git-fixes).
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (git-fixes).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (jsc#SLE-24682).
- octeontx2-af: Do not reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (jsc#SLE-24682).
- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures (jsc#SLE-24682).
- padata: Fix list iterator in padata_do_serial() (git-fixes).
- PCI: Check for alloc failure in pci_request_irq() (git-fixes).
- PCI: dwc: Fix n_fts[] array overrun (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF (git-fixes).
- PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (git-fixes).
- PCI: vmd: Disable MSI remapping after suspend (git-fixes).
- PCI/sysfs: Fix double free in error path (git-fixes).
- phy: usb: s2 WoL wakeup_count not incremented for USB-&gt;Eth devices (git-fixes).
- pinctrl: k210: call of_node_put() (git-fixes).
- pinctrl: meditatek: Startup with the IRQs disabled (git-fixes).
- pinctrl: pinconf-generic: add missing of_node_put() (git-fixes).
- platform/chrome: cros_ec_typec: Cleanup switch handle return paths (git-fixes).
- platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix event typo (git-fixes).
- platform/x86: huawei-wmi: fix return value calculation (git-fixes).
- platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (git-fixes).
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (git-fixes).
- PM: hibernate: Fix mistake in kerneldoc comment (git-fixes).
- PM: runtime: Do not call __rpm_callback() from rpm_idle() (git-fixes).
- PNP: fix name memory leak in pnp_alloc_dev() (git-fixes).
- power: supply: ab8500: Fix error handling in ab8500_charger_init() (git-fixes).
- power: supply: fix null pointer dereferencing in power_supply_get_battery_info (git-fixes).
- power: supply: fix residue sysfs file in error handle route of __power_supply_register() (git-fixes).
- power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (git-fixes).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- powerpc: Take in account addition CPU node when building kexec FDT (bsc#1207016 ltc#201108).
- powerpc/64: Init jump labels before parse_early_param() (bsc#1065729).
- powerpc/pci: Fix get_phb_number() locking (bsc#1065729).
- powerpc/perf: callchain validate kernel stack pointer bounds (bsc#1065729).
- powerpc/powernv: add missing of_node_put (bsc#1065729).
- powerpc/pseries: unregister VPA when hot unplugging a CPU (bsc#1205695 ltc#200603).
- powerpc/pseries/eeh: use correct API for error log size (bsc#1065729).
- powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (git-fixes).
- powerpc/xive/spapr: correct bitmap allocation size (git-fixes).
- proc: fixup uptime selftest (git-fixes).
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (git-fixes).
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (git-fixes).
- pstore: Properly assign mem_type property (git-fixes).
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (git-fixes).
- pstore/ram: Fix error return code in ramoops_probe() (git-fixes).
- pstore/zone: Use GFP_ATOMIC to allocate zone buffer (git-fixes).
- pwm: lpc18xx-sct: Fix a comment to match code (git-fixes).
- pwm: mediatek: always use bus clock for PWM on MT7622 (git-fixes).
- pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (git-fixes).
- pwm: tegra: Improve required rate calculation (git-fixes).
- r6040: Fix kmemleak in probe and remove (git-fixes).
- random: allow partial reads if later user copies fail (bsc#1204911).
- random: check for signals every PAGE_SIZE chunk of /dev/random (bsc#1204911).
- random: convert to using fops-&gt;read_iter() (bsc#1204911).
- random: convert to using fops-&gt;write_iter() (bsc#1204911).
- random: remove outdated INT_MAX &gt;&gt; 6 check in urandom_read() (bsc#1204911).
- random: zero buffer after reading entropy from userspace (bsc#1204911).
- RDMA: Disable IB HW for UML (git-fixes)
- RDMA/core: Fix order of nldev_exit call (git-fixes)
- RDMA/core: Make sure &quot;ib_port&quot; is valid when access sysfs node (git-fixes)
- RDMA/efa: Add EFA 0xefa2 PCI ID (git-fixes)
- RDMA/hfi: Decrease PCI device reference count in error path (git-fixes)
- RDMA/hfi1: Fix error return code in parse_platform_config() (git-fixes)
- RDMA/hns: Fix AH attr queried by query_qp (git-fixes)
- RDMA/hns: Fix error code of CMD (git-fixes)
- RDMA/hns: Fix ext_sge num error when post send (git-fixes)
- RDMA/hns: fix memory leak in hns_roce_alloc_mr() (git-fixes)
- RDMA/hns: Fix page size cap from firmware (git-fixes)
- RDMA/hns: Fix PBL page MTR find (git-fixes)
- RDMA/hns: Fix XRC caps on HIP08 (git-fixes)
- RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (git-fixes)
- RDMA/irdma: Do not request 2-level PBLEs for CQ alloc (git-fixes)
- RDMA/irdma: Initialize net_type before checking it (git-fixes)
- RDMA/irdma: Report the correct link speed (git-fixes)
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (git-fixes)
- RDMA/nldev: Fix failure to send large messages (git-fixes)
- RDMA/nldev: Return &quot;-EAGAIN&quot; if the cm_id isn't from expected port (git-fixes)
- RDMA/restrack: Release MR restrack when delete (git-fixes)
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (git-fixes)
- RDMA/siw: Fix immediate work request flush to completion queue (git-fixes)
- RDMA/siw: Fix pointer cast warning (git-fixes)
- RDMA/siw: Set defined status for work completion with undefined status (git-fixes)
- RDMA/srp: Fix error return code in srp_parse_options() (git-fixes)
- regulator: bd718x7: Drop unnecessary info print (git-fixes).
- regulator: core: fix deadlock on regulator enable (git-fixes).
- regulator: core: fix module refcount leak in set_supply() (git-fixes).
- regulator: core: fix resource leak in regulator_register() (git-fixes).
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (git-fixes).
- regulator: core: fix use_count leakage when handling boot-on (git-fixes).
- regulator: core: use kfree_const() to free space conditionally (git-fixes).
- regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (git-fixes).
- regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (git-fixes).
- regulator: slg51000: Wait after asserting CS pin (git-fixes).
- regulator: twl6030: fix get status of twl6032 regulators (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state (git-fixes).
- remoteproc: qcom_q6v5_pas: detach power domains on remove (git-fixes).
- remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (git-fixes).
- remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (git-fixes).
- remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (git-fixes).
- remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (git-fixes).
- remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (git-fixes).
- rtc: cmos: fix build on non-ACPI platforms (git-fixes).
- rtc: cmos: Fix event handler registration ordering issue (git-fixes).
- rtc: cmos: Fix wake alarm breakage (git-fixes).
- rtc: ds1347: fix value written to century register (git-fixes).
- rtc: mxc_v2: Add missing clk_disable_unprepare() (git-fixes).
- rtc: pcf85063: fix pcf85063_clkout_control (gut-fixes).
- rtc: pcf85063: Fix reading alarm (git-fixes).
- rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (git-fixes).
- rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (git-fixes).
- rtc: snvs: Allow a time difference on clock register read (git-fixes).
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (git-fixes).
- rtmutex: Add acquire semantics for rtmutex lock acquisition slow path (bnc#1203829).
- s390/boot: add secure boot trailer (bsc#1205257 LTC#200451).
- sbitmap: fix lockup while swapping (bsc#1206602).
- sched/core: Fix comparison in sched_group_cookie_match() (git-fixes)
- sched/core: Fix the bug that task won't enqueue into core (git-fixes)
- sched/topology: Remove redundant variable and fix incorrect (git-fixes)
- sched/uclamp: Fix relationship between uclamp and migration (git-fixes)
- sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (git-fixes)
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it (git-fixes).
- scsi: advansys: Fix kernel pointer leak (git-fixes).
- scsi: aha152x: Fix aha152x_setup() __setup handler return value (git-fixes).
- scsi: bfa: Replace snprintf() with sysfs_emit() (git-fixes).
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (git-fixes).
- scsi: core: Fix scsi_mode_sense() buffer length handling (git-fixes).
- scsi: core: Reallocate device's budget map on queue depth change (git-fixes).
- scsi: core: Restrict legal sdev_state transitions via sysfs (git-fixes).
- scsi: hisi_sas: Free irq vectors in order for v3 HW (git-fixes).
- scsi: hisi_sas: Limit max hw sectors for v3 HW (git-fixes).
- scsi: hisi_sas: Use managed PCI functions (git-fixes).
- scsi: ipr: Fix missing/incorrect resource cleanup in error case (git-fixes).
- scsi: iscsi: Add recv workqueue helpers (git-fixes).
- scsi: iscsi: Fix harmless double shift bug (git-fixes).
- scsi: iscsi: Fix possible memory leak when device_register() failed (git-fixes).
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (git-fixes).
- scsi: iscsi: kabi: add iscsi_conn_queue_work back (git-fixes).
- scsi: iscsi: kabi: fix libiscsi new field (git-fixes).
- scsi: iscsi: Merge suspend fields (git-fixes).
- scsi: iscsi: Rename iscsi_conn_queue_work() (git-fixes).
- scsi: iscsi: Run recv path from workqueue (git-fixes).
- scsi: iscsi: Unblock session then wake up error handler (git-fixes).
- scsi: libfc: Fix use after free in fc_exch_abts_resp() (git-fixes).
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (git-fixes).
- scsi: lpfc: Correct bandwidth logging during receipt of congestion sync WCQE (jsc#PED-1445).
- scsi: lpfc: Fix crash involving race between FLOGI timeout and devloss handler (jsc#PED-1445).
- scsi: lpfc: Fix MI capability display in cmf_info sysfs attribute (jsc#PED-1445).
- scsi: lpfc: Fix WQ|CQ|EQ resource check (jsc#PED-1445).
- scsi: lpfc: Remove linux/msi.h include (jsc#PED-1445).
- scsi: lpfc: Remove redundant pointer 'lp' (jsc#PED-1445).
- scsi: lpfc: Update lpfc version to 14.2.0.9 (jsc#PED-1445).
- scsi: lpfc: Use memset_startat() helper (jsc#PED-1445).
- scsi: megaraid_sas: Fix double kfree() (git-fixes).
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (git-fixes).
- scsi: megaraid: Fix error check return value of register_chrdev() (git-fixes).
- scsi: mpi3mr: Fix memory leaks (git-fixes).
- scsi: mpi3mr: Fix reporting of actual data transfer size (git-fixes).
- scsi: mpi3mr: Fixes around reply request queues (git-fixes).
- scsi: mpt3sas: Do not change DMA mask while reallocating pools (bsc#1206912,bsc#1206098).
- scsi: mpt3sas: Fail reset operation if config request timed out (git-fixes).
- scsi: mpt3sas: Fix out-of-bounds compiler warning (git-fixes).
- scsi: mpt3sas: re-do lost mpt3sas DMA mask fix (bsc#1206912,bsc#1206098).
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API (bsc#1206912,bsc#1206098).
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (git-fixes).
- scsi: mvsas: Replace snprintf() with sysfs_emit() (git-fixes).
- scsi: myrb: Fix up null pointer access on myrb_cleanup() (git-fixes).
- scsi: myrs: Fix crash in error case (git-fixes).
- scsi: ncr53c8xx: Remove unused retrieve_from_waiting_list() function (git-fixes).
- scsi: pm8001: Fix bogus FW crash for maxcpus=1 (git-fixes).
- scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (git-fixes).
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (git-fixes).
- scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (git-fixes).
- scsi: pm8001: Fix tag leaks on error (git-fixes).
- scsi: pm8001: Fix task leak in pm8001_send_abort_all() (git-fixes).
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (git-fixes).
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task (git-fixes).
- scsi: pm80xx: Fix double completion for SATA devices (git-fixes).
- scsi: pm80xx: Fix memory leak during rmmod (git-fixes).
- scsi: pmcraid: Fix missing resource cleanup in error case (git-fixes).
- scsi: qedf: Add stag_work to all the vports (git-fixes).
- scsi: qedf: Change context reset messages to ratelimited (git-fixes).
- scsi: qedf: Fix a UAF bug in __qedf_probe() (git-fixes).
- scsi: qedf: Fix refcount issue when LOGO is received during TMF (git-fixes).
- scsi: qla2xxx: Fix crash when I/O abort times out (jsc#PED-568).
- scsi: qla2xxx: Fix set-but-not-used variable warnings (jsc#PED-568).
- scsi: qla2xxx: Initialize vha-&gt;unknown_atio_[list, work] for NPIV hosts (jsc#PED-568).
- scsi: qla2xxx: Remove duplicate of vha-&gt;iocb_work initialization (jsc#PED-568).
- scsi: qla2xxx: Remove unused variable 'found_devs' (jsc#PED-568).
- scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() (git-fixes).
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (git-fixes).
- scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (git-fixes).
- scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (git-fixes).
- scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (git-fixes).
- scsi: smartpqi: Fix kdump issue when controller is locked up (git-fixes).
- scsi: sr: Do not use GFP_DMA (git-fixes).
- scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition (git-fixes).
- scsi: ufs: Fix a kernel crash during shutdown (git-fixes).
- scsi: ufs: Treat link loss as fatal error (git-fixes).
- scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() (git-fixes).
- scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode() (git-fixes).
- scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() (git-fixes).
- scsi: vmw_pvscsi: Expand vcpuHint to 16 bits (git-fixes).
- sctp: sysctl: make extra pointers netns aware (bsc#1204760).
- selftests: devlink: fix the fd redirect in dummy_reporter_test (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- selftests/efivarfs: Add checking of the test return value (git-fixes).
- selftests/ftrace: event_triggers: wait longer for test_event_enable (git-fixes).
- selftests/powerpc: Fix resource leaks (git-fixes).
- serial: 8250_bcm7271: Fix error handling in brcmuart_init() (git-fixes).
- serial: amba-pl011: avoid SBSA UART accessing DMACR register (git-fixes).
- serial: pch: Fix PCI device refcount leak in pch_request_dma() (git-fixes).
- serial: pl011: Do not clear RX FIFO &amp; RX interrupt in unthrottle (git-fixes).
- serial: stm32: move dma_request_chan() before clk_prepare_enable() (git-fixes).
- serial: sunsab: Fix error handling in sunsab_init() (git-fixes).
- serial: tegra: Read DMA status before terminating (git-fixes).
- soc: mediatek: pm-domains: Fix the power glitch issue (git-fixes).
- soc: qcom: llcc: make irq truly optional (git-fixes).
- soc: qcom: Select REMAP_MMIO for LLCC driver (git-fixes).
- soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (git-fixes).
- soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 (git-fixes).
- spi: spi-gpio: Do not set MOSI as an input if not 3WIRE mode (git-fixes).
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (git-fixes).
- spi: Update reference to struct spi_controller (git-fixes).
- staging: media: tegra-video: fix chan-&gt;mipi value on error (git-fixes).
- staging: media: tegra-video: fix device_node use after free (git-fixes).
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (git-fixes).
- staging: rtl8192u: Fix use after free in ieee80211_rx() (git-fixes).
- string.h: Introduce memset_startat() for wiping trailing members and padding (jsc#PED-1445).
- test_firmware: fix memory leak in test_firmware_init() (git-fixes).
- thermal: core: fix some possible name leaks in error paths (git-fixes).
- thermal: int340x: Add missing attribute for data rate base (git-fixes).
- thermal/drivers/imx8mm_thermal: Validate temperature range (git-fixes).
- thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (git-fixes).
- timers: implement usleep_idle_range() (git-fixes).
- tpm: acpi: Call acpi_put_table() to fix memory leak (git-fixes).
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (git-fixes).
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (git-fixes).
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (git-fixes).
- tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (git-fixes).
- tracing: Add tracing_reset_all_online_cpus_unlocked() function (git-fixes).
- tracing: Free buffers when a used dynamic event is removed (git-fixes).
- tracing/doc: Fix typos on the timerlat tracer documentation (git-fixes).
- tracing/osnoise: Fix duration type (git-fixes).
- tty: serial: altera_uart_{r,t}x_chars() need only uart_port (git-fixes).
- tty: serial: clean up stop-tx part in altera_uart_tx_chars() (git-fixes).
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling (git-fixes).
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration (git-fixes).
- units: Add SI metric prefix definitions (git-fixes).
- units: add the HZ macros (git-fixes).
- usb: cdnsp: fix lack of ZLP for ep0 (git-fixes).
- usb: dwc3: core: defer probe on ulpi_read_id timeout (git-fixes).
- usb: dwc3: fix PHY disable sequence (git-fixes).
- usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (git-fixes).
- usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (git-fixes).
- usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (git-fixes).
- usb: dwc3: qcom: fix runtime PM wakeup (git-fixes).
- usb: gadget: uvc: Prevent buffer overflow in setup handler (git-fixes).
- usb: gadget: uvc: Rename bmInterfaceFlags -&gt; bmInterlaceFlags (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow (git-fixes).
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (git-fixes).
- usb: serial: cp210x: add Kamstrup RF sniffer PIDs (git-fixes).
- usb: serial: f81232: fix division by zero on line-speed change (git-fixes).
- usb: serial: f81534: fix division by zero on line-speed change (git-fixes).
- usb: serial: option: add Quectel EM05-G modem (git-fixes).
- usb: storage: Add check for kcalloc (git-fixes).
- usb: typec: Check for ops-&gt;exit instead of ops-&gt;enter in altmode_exit (git-fixes).
- usb: typec: Factor out non-PD fwnode properties (git-fixes).
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (git-fixes).
- usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (git-fixes).
- usb: typec: tipd: Fix spurious fwnode_handle_put in error path (git-fixes).
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout (git-fixes).
- usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (git-fixes).
- vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (git-fixes).
- vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (git-fixes).
- vfio: platform: Do not pass return buffer to ACPI _RST method (git-fixes).
- vhost: fix range used in translate_desc() (git-fixes).
- vhost/vsock: Fix error handling in vhost_vsock_init() (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet (git-fixes).
- vringh: fix range used in iotlb_translate() (git-fixes).
- vsock: Enable y2038 safe timeval for timeout (bsc#1206101).
- vsock: Refactor vsock_*_getsockopt to resemble sock_getsockopt (bsc#1206101).
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (git-fixes).
- wifi: ath10k: Fix return value in ath10k_pci_init() (git-fixes).
- wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (git-fixes).
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (git-fixes).
- wifi: ath9k: verify the expected usb_endpoints are present (git-fixes).
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (git-fixes).
- wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (git-fixes).
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (git-fixes).
- wifi: iwlwifi: mvm: fix double free on tx path (git-fixes).
- wifi: mac80211: fix memory leak in ieee80211_if_add() (git-fixes).
- wifi: mt76: do not run mt76u_status_worker if the device is not running (git-fixes).
- wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (git-fixes).
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (git-fixes).
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (git-fixes).
- wifi: rtl8xxxu: Fix the channel width reporting (git-fixes).
- wifi: rtl8xxxu: gen2: Turn on the rate control (git-fixes).
- wifi: rtw89: fix physts IE page check (git-fixes).
- wifi: rtw89: Fix some error handling path in rtw89_core_sta_assoc() (git-fixes).
- wifi: rtw89: use u32_encode_bits() to fill MAC quota value (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- xfrm: Fix oops in __xfrm_state_delete() (bsc#1206794).
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.41.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.41.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.41.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.41.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.41.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.41.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.41.1.150400.24.15.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.41.1.150400.24.15.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.41.1.150400.24.15.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.41.1.150400.24.15.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.41.1.150400.24.15.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.41.1.150400.24.15.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.41.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.41.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.41.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.41.1.150400.24.15.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.41.1.150400.24.15.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.41.1.150400.24.15.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-114</id>
    <title>Security update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674206590"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22809" id="CVE-2023-22809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22809" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207082" id="1207082" title="VUL-0: EMBARGOED: CVE-2023-22809: sudo: arbitrary file write with privileges of the RunAs user" type="bugzilla"/>
    </references>
    <description>This update for sudo fixes the following issues:

- CVE-2023-22809: Fixed an arbitrary file write issue that could be
  exploited by users with sudoedit permissions (bsc#1207082).
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.12.1" arch="src" src="src/sudo-1.9.9-150400.4.12.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.12.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.12.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.12.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.12.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.12.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.12.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-160</id>
    <title>Security update for samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674753772"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37967" id="CVE-2022-37967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20251" id="CVE-2021-20251" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20251" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3437" id="CVE-2022-3437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37966" id="CVE-2022-37966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38023" id="CVE-2022-38023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38023" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" id="CVE-2022-32746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745" id="CVE-2022-32745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" id="CVE-2022-42898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031" id="CVE-2022-2031" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742" id="CVE-2022-32742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744" id="CVE-2022-32744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201493" id="1201493" title="VUL-0: CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206546" id="1206546" title="VUL-0: CVE-2021-20251: samba: Bad password count not incremented atomically" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201492" id="1201492" title="VUL-0: CVE-2022-32745: samba, ldb: AD users can crash the server process with an LDAP add or modify request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200102" id="1200102" title="SLES 15 SP3 - smbd dumps core randomly  - ref:_00D1igLOd._5005q5zV47:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205126" id="1205126" title="VUL-0: CVE-2022-42898: krb5: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205386" id="1205386" title="VUL-0: CVE-2022-37967: samba: Windows Kerberos Elevation of Privilege Vulnerability." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205385" id="1205385" title="VUL-0: CVE-2022-37966: samba: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201490" id="1201490" title="VUL-0: CVE-2022-32746: samba,ldb: Use-after-free occurring in database audit logging module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206504" id="1206504" title="VUL-0: CVE-2022-38023: samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204254" id="1204254" title="VUL-0: CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201689" id="1201689" title="bind9.16 and samba-ad-dc-4.15.7 using bind as backed systemd issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201495" id="1201495" title="VUL-0: CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201496" id="1201496" title="VUL-0: CVE-2022-32742: samba: Server memory information leak via SMB1" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- CVE-2021-20251: Fixed an issue where the bad password count would
  not be properly incremented, which could allow attackers to brute
  force a user's password (bsc#1206546).

- Updated to version 4.15.13:
  - CVE-2022-37966: Fixed an issue where a weak cipher would be
    selected to encrypt session keys, which could lead to privilege
    escalation (bsc#1205385).
  - CVE-2022-37967: Fixed a potential privilege escalation issue via
    constrained delegation due to weak a cryptographic algorithm
    being selected (bsc#1205386).
  - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon
    Secure channel (bsc#1206504).

- Updated to version 4.15.12:
  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on
  32-bit systems (bsc#1205126).

- Updated to version 4.15.11:
  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()
  (bsc#1204254).

- Updated to version 4.15.10:
  - Fixed a potential crash due to a concurrency issue (bsc#1200102).

- Updated to version 4.15.9:
  - CVE-2022-32742: Fixed an information leak that could be triggered
    via SMB1 (bsc#1201496).
  - CVE-2022-32746: Fixed a memory corruption issue in database
    audit logging (bsc#1201490).
  - CVE-2022-2031: Fixed AD restrictions bypass associated with
    changing passwords (bsc#1201495).
  - CVE-2022-32745: Fixed a remote server crash that could be
    triggered with certain LDAP requests (bsc#1201492).
  - CVE-2022-32744: Fixed an issue where AD users could have forged
    password change requests on behalf of other users (bsc#1201493).

Other fixes:

- Fixed a problem when using bind as samba-ad-dc backend related to
  the named service (bsc#1201689).
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.15.13+git.591.ab36624310c" release="150400.3.19.1" arch="src" src="src/samba-4.15.13+git.591.ab36624310c-150400.3.19.1.src.rpm">
          <filename>samba-4.15.13+git.591.ab36624310c-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.591.ab36624310c" release="150400.3.19.1" arch="x86_64" src="x86_64/samba-client-libs-4.15.13+git.591.ab36624310c-150400.3.19.1.x86_64.rpm">
          <filename>samba-client-libs-4.15.13+git.591.ab36624310c-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.591.ab36624310c" release="150400.3.19.1" arch="aarch64" src="aarch64/samba-client-libs-4.15.13+git.591.ab36624310c-150400.3.19.1.aarch64.rpm">
          <filename>samba-client-libs-4.15.13+git.591.ab36624310c-150400.3.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-161</id>
    <title>Security update for python-py</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674753827"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204364" id="1204364" title="VUL-0: CVE-2022-42969: python-py: ReDoS via a Subversion repository with crafted info data" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42969" id="CVE-2022-42969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42969" type="cve"/>
    </references>
    <description>This update for python-py fixes the following issues:

- CVE-2022-42969: Fixed an excessive resource consumption that could
  be triggered when interacting with a Subversion repository
  containing crated data (bsc#1204364).
</description>
    <pkglist>
      <collection>
        <package name="python-py" epoch="0" version="1.10.0" release="150100.5.12.1" arch="src" src="src/python-py-1.10.0-150100.5.12.1.src.rpm">
          <filename>python-py-1.10.0-150100.5.12.1.src.rpm</filename>
        </package>
        <package name="python3-py" epoch="0" version="1.10.0" release="150100.5.12.1" arch="noarch" src="noarch/python3-py-1.10.0-150100.5.12.1.noarch.rpm">
          <filename>python3-py-1.10.0-150100.5.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-153</id>
    <title>Security update for haproxy</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674735266"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0056" id="CVE-2023-0056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0056" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207181" id="1207181" title="VUL-0: CVE-2023-0056: haproxy: segfault DoS" type="bugzilla"/>
    </references>
    <description>This update for haproxy fixes the following issues:

- CVE-2023-0056: Fixed a server crash that could be triggered via a
  malformed HTTP/2 frame (bsc#1207181).
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.8+git0.d1f8d41e0" release="150400.3.6.1" arch="src" src="src/haproxy-2.4.8+git0.d1f8d41e0-150400.3.6.1.src.rpm">
          <filename>haproxy-2.4.8+git0.d1f8d41e0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.8+git0.d1f8d41e0" release="150400.3.6.1" arch="x86_64" src="x86_64/haproxy-2.4.8+git0.d1f8d41e0-150400.3.6.1.x86_64.rpm">
          <filename>haproxy-2.4.8+git0.d1f8d41e0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.8+git0.d1f8d41e0" release="150400.3.6.1" arch="aarch64" src="aarch64/haproxy-2.4.8+git0.d1f8d41e0-150400.3.6.1.aarch64.rpm">
          <filename>haproxy-2.4.8+git0.d1f8d41e0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-178</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674763120"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207182" id="1207182" title="FIPS 140-3: OpenSSL DH/ECDH PCT" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.19.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.19.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.19.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.19.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.19.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.19.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.19.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.19.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.19.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.19.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.19.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.19.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.19.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.19.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.19.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.19.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.19.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.19.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-169</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674754203"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205209" id="1205209" title="VUL-0: CVE-2022-23824: xen: x86: Multiple speculative security issues (XSA-422)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23824" id="CVE-2022-23824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23824" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).

Non-security fixes:

- Updated to version 4.16.3 (bsc#1027519).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.3_02" release="150400.4.19.1" arch="src" src="src/xen-4.16.3_02-150400.4.19.1.src.rpm">
          <filename>xen-4.16.3_02-150400.4.19.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.3_02" release="150400.4.19.1" arch="x86_64" src="x86_64/xen-libs-4.16.3_02-150400.4.19.1.x86_64.rpm">
          <filename>xen-libs-4.16.3_02-150400.4.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-439</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676549382"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186056" id="1186056" title="usb drivers included in ramdisk when usb bus not present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205175" id="1205175" title="dracut installs initrds for non-existing kernels. Just because there is such a /lib/modules/$kernel_version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1069169" id="1069169" title="dracut: multipath module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204929" id="1204929" title="dracut-pre-udev complains about missing group rpc:rpc" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Exclude USB drivers in strict hostonly mode (bsc#1186056)
- Warn if included with no multipath devices and no user conf (bsc#1069169)
- Improve detection of installed kernel versions (bsc#1205175)
- chown using rpc default group (bsc#1204929)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="src" src="src/dracut-055+suse.331.g05b9ccb7-150400.3.16.1.src.rpm">
          <filename>dracut-055+suse.331.g05b9ccb7-150400.3.16.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="x86_64" src="x86_64/dracut-055+suse.331.g05b9ccb7-150400.3.16.1.x86_64.rpm">
          <filename>dracut-055+suse.331.g05b9ccb7-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.331.g05b9ccb7-150400.3.16.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.331.g05b9ccb7-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.331.g05b9ccb7-150400.3.16.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.331.g05b9ccb7-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="aarch64" src="aarch64/dracut-055+suse.331.g05b9ccb7-150400.3.16.1.aarch64.rpm">
          <filename>dracut-055+suse.331.g05b9ccb7-150400.3.16.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.331.g05b9ccb7-150400.3.16.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.331.g05b9ccb7-150400.3.16.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.331.g05b9ccb7" release="150400.3.16.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.331.g05b9ccb7-150400.3.16.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.331.g05b9ccb7-150400.3.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-181</id>
    <title>Recommended update for procps</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674766574"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206412" id="1206412" title="'free' command reports misleading &quot;used&quot; value" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issues:

- Improve memory handling/usage (bsc#1206412) 
- Make sure that correct library version is installed (bsc#1206412)
</description>
    <pkglist>
      <collection>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.28.1" arch="x86_64" src="x86_64/libprocps7-3.3.15-150000.7.28.1.x86_64.rpm">
          <filename>libprocps7-3.3.15-150000.7.28.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.28.1" arch="src" src="src/procps-3.3.15-150000.7.28.1.src.rpm">
          <filename>procps-3.3.15-150000.7.28.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.28.1" arch="x86_64" src="x86_64/procps-3.3.15-150000.7.28.1.x86_64.rpm">
          <filename>procps-3.3.15-150000.7.28.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.28.1" arch="aarch64" src="aarch64/libprocps7-3.3.15-150000.7.28.1.aarch64.rpm">
          <filename>libprocps7-3.3.15-150000.7.28.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.28.1" arch="aarch64" src="aarch64/procps-3.3.15-150000.7.28.1.aarch64.rpm">
          <filename>procps-3.3.15-150000.7.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-658</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678269090"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199853" id="1199853" title="Accelerated Networking fails when static ifcfg-eth1 file present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204549" id="1204549" title="cloud-netconfig does not support NetworkManager" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.7:
  + Overhaul policy routing setup
  + Support alias IPv4 ranges 
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update

- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path 
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-azure-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-azure-1.7-150000.25.8.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-ec2-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.7-150000.25.8.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-gce-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-gce-1.7-150000.25.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-709</id>
    <title>Recommended update for console-setup</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678460697"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202853" id="1202853" title="Could not switch uppercase and lowercase under terminal mode by using laptop keyboard" type="bugzilla"/>
    </references>
    <description>This update for console-setup and kbd fixes the following issue:

- Fix Caps_Lock mapping for us.map and others (bsc#1202853)
</description>
    <pkglist>
      <collection>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.3.1" arch="src" src="src/kbd-2.4.0-150400.5.3.1.src.rpm">
          <filename>kbd-2.4.0-150400.5.3.1.src.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.3.1" arch="x86_64" src="x86_64/kbd-2.4.0-150400.5.3.1.x86_64.rpm">
          <filename>kbd-2.4.0-150400.5.3.1.x86_64.rpm</filename>
        </package>
        <package name="kbd-legacy" epoch="0" version="2.4.0" release="150400.5.3.1" arch="noarch" src="noarch/kbd-legacy-2.4.0-150400.5.3.1.noarch.rpm">
          <filename>kbd-legacy-2.4.0-150400.5.3.1.noarch.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.3.1" arch="aarch64" src="aarch64/kbd-2.4.0-150400.5.3.1.aarch64.rpm">
          <filename>kbd-2.4.0-150400.5.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-179</id>
    <title>Recommended update for tar</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674766500"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202436" id="1202436" title="tar hang unpacking test data from gcc" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issue:

- Fix hang when unpacking test tarball (bsc#1202436)
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.26.1" arch="src" src="src/tar-1.34-150000.3.26.1.src.rpm">
          <filename>tar-1.34-150000.3.26.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.26.1" arch="x86_64" src="x86_64/tar-1.34-150000.3.26.1.x86_64.rpm">
          <filename>tar-1.34-150000.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.26.1" arch="aarch64" src="aarch64/tar-1.34-150000.3.26.1.aarch64.rpm">
          <filename>tar-1.34-150000.3.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-526</id>
    <title>Security update for tpm2-0-tss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677502371"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22745" id="CVE-2023-22745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22745" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207325" id="1207325" title="VUL-0: CVE-2023-22745: tpm2-0-tss: Buffer Overlow in TSS2_RC_Decode" type="bugzilla"/>
    </references>
    <description>This update for tpm2-0-tss fixes the following issues:

- CVE-2023-22745: Fixed a memory safety issue that could be exploited
  by local attackers with TPM access (bsc#1207325).
</description>
    <pkglist>
      <collection>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-esys0-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-fapi1-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-mu0-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-rc0-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-sys1-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-tcti-device0-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libtss2-tctildr0-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.3.1" arch="src" src="src/tpm2-0-tss-3.1.0-150400.3.3.1.src.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.3.1" arch="x86_64" src="x86_64/tpm2-0-tss-3.1.0-150400.3.3.1.x86_64.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-esys0-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-fapi1-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-mu0-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-rc0-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-sys1-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-tcti-device0-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libtss2-tctildr0-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.3.1" arch="aarch64" src="aarch64/tpm2-0-tss-3.1.0-150400.3.3.1.aarch64.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-147</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674721460"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187428" id="1187428" title="kernel 5.3.18-24.61.1 introduces network retransmits and packet loss" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188605" id="1188605" title="[pfifo_fast,core count, GEC] MPI Benchmarks stall with qdisc pfifo_fast if (# queues) &lt; (# CPU cores)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191259" id="1191259" title="kernel: FIPS 140-3: SP800-90B for drivers/char/random.c userspace interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199294" id="1199294" title="xfs test creates traceback in Azure on aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201068" id="1201068" title="Partner-L3: Frequency scaling driver intel_pstate not loading on SLES 15 SP4 with Sapphire Rapids" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203219" id="1203219" title="SLE-15SP4: Performance regression on aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203740" id="1203740" title="NFS4ERR_OLD_STATEID in response to WRITE is not handled well" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204614" id="1204614" title="VUL-0: CVE-2022-42432: kernel-source-rt,kernel-source-azure,kernel-source: nftables: leak of stale stack data to userspace via nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204652" id="1204652" title="VUL-0: CVE-2022-3344: kernel: KVM: SVM: nested shutdown interception could lead to host crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204760" id="1204760" title="SCTP sysctl parameters get boundaries from host instead of net ns — ref:_00D1igLOd._5005qEDqV7:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204911" id="1204911" title="NULL pointer dereference starting docker on 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204989" id="1204989" title="cluster with BLUESTORE_SPURIOUS_READ_ERRORS warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205263" id="1205263" title="Update legacy EDAC sysfs interface to provide 12 channel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205485" id="1205485" title="Partner-L3: [DELL EMC SLES 15 SP4 BUG] When system profile is set to &quot;Performance per Watt (DAPC)&quot; in BIOS, Bootup time is taking more" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205601" id="1205601" title="L3: SES7.1 31 OSD(s) have spurious read errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205695" id="1205695" title="LPAR is crashed by Phyp when doing DLPAR CPU operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206073" id="1206073" title="VUL-0: CVE-2022-3564: kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206098" id="1206098" title="[SLES][15-SP5][XEN][Build58.1] Error &quot;mpt3sas 0000:81:00.0: swiotlb buffer is full&quot; prevents xen host from booting up" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206101" id="1206101" title="LTP:vsock01: setsockopt returns EINVAL in m32 mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206188" id="1206188" title="[MSFT][MANA][NET][Patch] Fix Race On Per-CQ Variable Napi_iperf Panic Fix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206209" id="1206209" title="VUL-0: CVE-2022-4379: kernel: use-after-free in NFS module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206344" id="1206344" title="memcg: Fix possible use-after-free in memcg_write_event_control()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206389" id="1206389" title="VUL-0: CVE-2022-3108: kernel: kmemdup's return value not checked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206390" id="1206390" title="VUL-0: CVE-2022-3113: kernel: devm_kzalloc return value not checked, null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206393" id="1206393" title="VUL-0: CVE-2022-3115: kernel: Unchecked kzalloc return leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206394" id="1206394" title="VUL-0: CVE-2022-3111: kernel: Unchecked WM8350_IRQ_CHG_FAST_RDY free leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206395" id="1206395" title="VUL-0: CVE-2022-3107: kernel: Unchecked kvmalloc_array return leads to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206396" id="1206396" title="VUL-0: CVE-2022-3104: kernel: kmalloc's return value not checked, leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206397" id="1206397" title="VUL-0: CVE-2022-3106: kernel: kmalloc's return value not checked, leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206398" id="1206398" title="VUL-0: CVE-2022-3105: kernel: uapi_finalize's return value not checked leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206399" id="1206399" title="VUL-0: CVE-2022-3112: kernel: kzalloc's return value not checked leading to null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206456" id="1206456" title="panic in btrfs_ioctl_logical_to_ino" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206468" id="1206468" title="memory leak in set_mempolicy_home_node" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206515" id="1206515" title="VUL-0: CVE-2022-47520: kernel-source-rt,kernel-source,kernel-source-azure: WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206536" id="1206536" title="bug fix of mlx5 dirver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206554" id="1206554" title="wrong completion record for dmaengine in uapi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206602" id="1206602" title="L3: ] Kernel panic - not syncing: Hard LOCKUP - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206619" id="1206619" title="Delayed outgoing TCP packets causing latency spikes in RBD volumes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206664" id="1206664" title="VUL-0: CVE-2022-4662: kernel-source-azure,kernel-source-rt,kernel-source:  Recursive locking violation in usb-storage that can cause the kernel to deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206703" id="1206703" title="Sound stops working for MSI GS66 after kernel 5.14.21-150400.24.38 update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206794" id="1206794" title="Frequent Kernel Crashes due to problem in af_key.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206896" id="1206896" title="Out of memory in local cgroup's memory may cause denial of service outside its area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206912" id="1206912" title="Fix dma mask handling in mpt3sas" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207016" id="1207016" title="SLES15 SP5 - During DLPAR operations in shared mode and dedicated mode with smt loop, device tree entries are not getting populated(dlpar operation was success)[Denali/Everest/Rainier][P10]" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3344" id="CVE-2022-3344" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3344" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4662" id="CVE-2022-4662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3115" id="CVE-2022-3115" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3115" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47520" id="CVE-2022-47520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3112" id="CVE-2022-3112" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3112" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3564" id="CVE-2022-3564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4379" id="CVE-2022-4379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4379" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3108" id="CVE-2022-3108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3104" id="CVE-2022-3104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3113" id="CVE-2022-3113" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3113" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3107" id="CVE-2022-3107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3111" id="CVE-2022-3111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3111" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3105" id="CVE-2022-3105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3106" id="CVE-2022-3106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3106" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1445" id="PED-1445" title="https://jira.suse.com/browse/PED-1445" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-568" id="PED-568" title="https://jira.suse.com/browse/PED-568" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19249" id="SLE-19249" title="https://jira.suse.com/browse/SLE-19249" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-3344: Fixed a flaw found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0). (bsc#1204652)
- CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664)
- CVE-2022-3115: Fixed a null pointer dereference in malidp_crtc.c caused by a lack of checks of the return value of kzalloc. (bsc#1206393)
- CVE-2022-47520: Fixed an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet. (bsc#1206515)
- CVE-2022-3112: Fixed a  null pointer dereference caused by a missing check of the return value of kzalloc() in vdec_helpers.c:amvdec_set_canvases. (bsc#1206399)
- CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073)
- CVE-2022-4379: Fixed a use-after-free vulnerability in nfs4file.c:__nfs42_ssc_open. (bsc#1206209)
- CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389)
- CVE-2022-3104: Fixed a null pointer dereference caused by a missing check of the return value of kzalloc() in bugs.c:lkdtm_ARRAY_BOUNDS. (bsc#1206396)
- CVE-2022-3113: Fixed a null pointer dereference caused by a missing check of the return value of devm_kzalloc. (bsc#1206390)
- CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395)
- CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350_IRQ_CHG_FAST_RDY in wm8350_init_charger. (bsc#1206394)
- CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398)
- CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397)
    
The following non-security bugs were fixed:

- acct: fix potential integer overflow in encode_comp_t() (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (git-fixes).
- ACPICA: Fix error code path in acpi_ds_call_control_method() (git-fixes).
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (git-fixes).
- ALSA: asihpi: fix missing pci_disable_device() (git-fixes).
- ALSA: control-led: use strscpy in set_led_id() (git-fixes).
- ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 (git-fixes).
- ALSA: hda: cs35l41: Check runtime suspend capability at runtime_idle (git-fixes).
- ALSA: hda: cs35l41: Do not return -EINVAL from system suspend/resume (git-fixes).
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (git-fixes).
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (git-fixes).
- ALSA: hda/realtek - Turn on power early (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from podxt (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit (git-fixes).
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (git-fixes).
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (git-fixes).
- ALSA: pcm: Set missing stop_operating flag at undoing trigger start (git-fixes).
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (git-fixes).
- ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (git-fixes).
- ALSA: usb-audio: add the quirk for KT0206 device (git-fixes).
- ALSA: usb-audio: Make sure to stop endpoints before closing EPs (git-fixes).
- ALSA: usb-audio: Relax hw constraints for implicit fb sync (git-fixes).
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (git-fixes).
- apparmor: fix a memleak in multi_transaction_new() (git-fixes).
- apparmor: Fix abi check to include v8 abi (git-fixes).
- apparmor: fix lockdep warning when removing a namespace (git-fixes).
- apparmor: Fix memleak in alloc_ns() (git-fixes).
- apparmor: Use pointer to struct aa_label for lbs_cred (git-fixes).
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (git-fixes).
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-38x: Fix compatible string for gpios (git-fixes).
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: armada-39x: Fix compatible string for gpios (git-fixes).
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (git-fixes).
- ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (git-fixes).
- ARM: dts: qcom: apq8064: fix coresight compatible (git-fixes).
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (git-fixes).
- ARM: dts: rockchip: fix ir-receiver node names (git-fixes).
- ARM: dts: rockchip: fix node name for hym8563 rtc (git-fixes).
- ARM: dts: rockchip: remove clock-frequency from rtc (git-fixes).
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (git-fixes).
- ARM: dts: spear600: Fix clcd interrupt (git-fixes).
- ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (git-fixes).
- ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (git-fixes).
- ARM: dts: turris-omnia: Add ethernet aliases (git-fixes).
- ARM: dts: turris-omnia: Add switch port 6 node (git-fixes).
- ARM: mmp: fix timer_read delay (git-fixes).
- ARM: ux500: do not directly dereference __iomem (git-fixes).
- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path (performance bsc#1203219).
- arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (git-fixes).
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (git-fixes).
- arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (git-fixes).
- arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (git-fixes).
- arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (git-fixes).
- arm64: dts: mt2712e: Fix unit address for pinctrl node (git-fixes).
- arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (git-fixes).
- arm64: dts: mt6779: Fix devicetree build warnings (git-fixes).
- arm64: dts: mt7622: drop r_smpl property from mmc node (git-fixes).
- arm64: dts: mt8183: drop drv-type from mmc-node (git-fixes).
- arm64: dts: mt8183: Fix Mali GPU clock (git-fixes).
- arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (git-fixes).
- arm64: dts: qcom: msm8916: Drop MSS fallback compatible (git-fixes).
- arm64: dts: qcom: msm8996: Add MSM8996 Pro support (git-fixes).
- arm64: dts: qcom: msm8996: fix GPU OPP table (git-fixes).
- arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (git-fixes).
- arm64: dts: qcom: sdm630: fix UART1 pin bias (git-fixes).
- arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (git-fixes).
- arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength (git-fixes).
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (git-fixes).
- arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (git-fixes).
- arm64: dts: qcom: sm8250: correct LPASS pin pull down (git-fixes).
- arm64: dts: qcom: sm8250: drop bogus DP PHY clock (git-fixes).
- arm64: dts: qcom: sm8250: fix USB-DP PHY registers (git-fixes).
- arm64: dts: rockchip: fix ir-receiver node names (git-fixes).
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (git-fixes).
- arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (git-fixes).
- arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (git-fixes).
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (git-fixes).
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (git-fixes).
- ASoC: cs42l51: Correct PGA Volume minimum value (git-fixes).
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example (git-fixes).
- ASoC: fsl_micfil: explicitly clear CHnF flags (git-fixes).
- ASoC: fsl_micfil: explicitly clear software reset bit (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (git-fixes).
- ASoC: jz4740-i2s: Handle independent FIFO flush bits (git-fixes).
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (git-fixes).
- ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (git-fixes).
- ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (git-fixes).
- ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (git-fixes).
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (git-fixes).
- ASoC: ops: Correct bounds check for second channel on SX controls (git-fixes).
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (git-fixes).
- ASoC: pxa: fix null-pointer dereference in filter() (git-fixes).
- ASoC: qcom: Add checks for devm_kcalloc (git-fixes).
- ASoC: qcom: lpass-cpu: Fix fallback SD line index handling (git-fixes).
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (git-fixes).
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (git-fixes).
- ASoC: rt5670: Remove unbalanced pm_runtime_put() (git-fixes).
- ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (git-fixes).
- ASoC: soc-pcm: Add NULL check in BE reparenting (git-fixes).
- ASoC: wm8904: fix wrong outputs volume after power reactivation (git-fixes).
- ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (git-fixes).
- ASoC: wm8994: Fix potential deadlock (git-fixes).
- ata: ahci: Fix PCS quirk application for suspend (git-fixes).
- binfmt_elf: fix documented return value for load_elf_phdrs() (git-fixes).
- binfmt_misc: fix shift-out-of-bounds in check_special_flags (git-fixes).
- binfmt: Fix error return code in load_elf_fdpic_binary() (git-fixes).
- Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (git-fixes).
- Bluetooth: btusb: Add debug message for CSR controllers (git-fixes).
- Bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_bcsp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_core: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_h5: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_ll: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: hci_qca: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (git-fixes).
- Bluetooth: RFCOMM: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- brcmfmac: return error when getting invalid max_flowrings from dongle (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- can: kvaser_usb_leaf: Fix bogus restart events (git-fixes).
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping (git-fixes).
- can: kvaser_usb_leaf: Set Warning state even without bus errors (git-fixes).
- can: kvaser_usb: do not increase tx statistics when sending error message frames (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (git-fixes).
- can: mcba_usb: Fix termination command argument (git-fixes).
- can: sja1000: fix size of OCR_MODE_MASK define (git-fixes).
- can: tcan4x5x: Remove invalid write in clear_interrupts (git-fixes).
- chardev: fix error handling in cdev_device_add() (git-fixes).
- cifs: Add &quot;extbuf&quot; and &quot;extbuflen&quot; args to smb2_compound_op() (bsc#1193629).
- cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1193629).
- cifs: do not leak -ENOMEM in smb2_open_file() (bsc#1193629).
- cifs: do not refresh cached referrals from unactive mounts (bsc#1193629).
- cifs: fix confusing debug message (bsc#1193629).
- cifs: Fix kmap_local_page() unmapping (git-fixes).
- cifs: fix missing display of three mount options (bsc#1193629).
- cifs: fix oops during encryption (bsc#1199294).
- cifs: fix refresh of cached referrals (bsc#1193629).
- cifs: fix source pathname comparison of dfs supers (bsc#1193629).
- cifs: fix various whitespace errors in headers (bsc#1193629).
- cifs: get rid of mount options string parsing (bsc#1193629).
- cifs: minor cleanup of some headers (bsc#1193629).
- cifs: optimize reconnect of nested links (bsc#1193629).
- cifs: Parse owner/group for stat in smb311 posix extensions (bsc#1193629).
- cifs: print warning when conflicting soft vs. hard mount options specified (bsc#1193629).
- cifs: reduce roundtrips on create/qinfo requests (bsc#1193629).
- cifs: refresh root referrals (bsc#1193629).
- cifs: Remove duplicated include in cifsglob.h (bsc#1193629).
- cifs: remove unused smb3_fs_context::mount_options (bsc#1193629).
- cifs: set correct ipc status after initial tree connect (bsc#1193629).
- cifs: set correct status of tcon ipc when reconnecting (bsc#1193629).
- cifs: set correct tcon status after initial tree connect (bsc#1193629).
- cifs: set resolved ip in sockaddr (bsc#1193629).
- cifs: share dfs connections and supers (bsc#1193629).
- cifs: skip alloc when request has no pages (bsc#1193629).
- cifs: split out ses and tcon retrieval from mount_get_conns() (bsc#1193629).
- cifs: update internal module number (bsc#1193629).
- cifs: use fs_context for automounts (bsc#1193629).
- cifs: use origin fullpath for automounts (bsc#1193629).
- class: fix possible memory leak in __class_register() (git-fixes).
- clk: Fix pointer casting to prevent oops in devm_clk_release() (git-fixes).
- clk: generalize devm_clk_get() a bit (git-fixes).
- clk: imx: imx8mp: add shared clk gate for usb suspend clk (git-fixes).
- clk: imx: replace osc_hdmi with dummy (git-fixes).
- clk: nomadik: correct struct name kernel-doc warning (git-fixes).
- clk: Provide new devm_clk helpers for prepared and enabled clocks (git-fixes).
- clk: qcom: clk-krait: fix wrong div2 functions (git-fixes).
- clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (git-fixes).
- clk: qcom: lpass-sc7180: Fix pm_runtime usage (git-fixes).
- clk: renesas: r9a06g032: Repair grave increment error (git-fixes).
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (git-fixes).
- clk: samsung: Fix memory leak in _samsung_clk_register_pll() (git-fixes).
- clk: socfpga: Fix memory leak in socfpga_gate_init() (git-fixes).
- clk: st: Fix memory leak in st_of_quadfs_setup() (git-fixes).
- clk: sunxi-ng: v3s: Correct the header guard of ccu-sun8i-v3s.h (git-fixes).
- clocksource/drivers/sh_cmt: Access registers according to spec (git-fixes).
- clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() (git-fixes).
- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- cpufreq: ACPI: Only set boost MSRs on supported CPUs (bsc#1205485).
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (bsc#1205485).
- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP mode (bsc#1201068).
- crypto: ccree - Make cc_debugfs_global_fini() available for module init function (git-fixes).
- crypto: ccree - Remove debugfs when platform_driver_register failed (git-fixes).
- crypto: cryptd - Use request context instead of stack for sub-request (git-fixes).
- crypto: hisilicon/qm - fix missing destroy qp_idr (git-fixes).
- crypto: img-hash - Fix variable dereferenced before check 'hdev-&gt;req' (git-fixes).
- crypto: n2 - add missing hash statesize (git-fixes).
- crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (git-fixes).
- crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (git-fixes).
- crypto: rockchip - add fallback for ahash (git-fixes).
- crypto: rockchip - add fallback for cipher (git-fixes).
- crypto: rockchip - better handle cipher key (git-fixes).
- crypto: rockchip - do not do custom power management (git-fixes).
- crypto: rockchip - do not store mode globally (git-fixes).
- crypto: rockchip - remove non-aligned handling (git-fixes).
- crypto: rockchip - rework by using crypto_engine (git-fixes).
- crypto: sun8i-ss - use dma_addr instead u32 (git-fixes).
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (git-fixes).
- device property: Fix documentation for fwnode_get_next_parent() (git-fixes).
- dmaengine: idxd: Fix crc_val field for completion record (git-fixes).
- docs/zh_CN: Fix '.. only::' directive's expression (git-fixes).
- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free device/resource/connection (git-fixes).
- drbd: remove usage of list iterator variable after loop (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- driver core: Fix bus_type.match() error handling in __driver_attach() (git-fixes).
- drivers: dio: fix possible memory leak in dio_init() (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (git-fixes).
- drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (git-fixes).
- drm/amd/display: fix array index out of bound error in bios parser (git-fixes).
- drm/amd/display: Manually adjust strobe for DCN303 (git-fixes).
- drm/amd/display: prevent memory leak (git-fixes).
- drm/amd/display: Use the largest vready_offset in pipe group (git-fixes).
- drm/amd/pm/smu11: BACO is supported when it's in BACO state (git-fixes).
- drm/amdgpu: fix pci device refcount leak (git-fixes).
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (git-fixes).
- drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (git-fixes).
- drm/amdgpu: Fix type of second parameter in trans_msg() callback (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- drm/amdgpu/powerplay/psm: Fix memory leak in power state init (git-fixes).
- drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend (git-fixes).
- drm/amdkfd: Fix memory leakage (git-fixes).
- drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (git-fixes).
- drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() (git-fixes).
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup (git-fixes).
- drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink (git-fixes).
- drm/etnaviv: add missing quirks for GC300 (git-fixes).
- drm/etnaviv: do not truncate physical page address (git-fixes).
- drm/fourcc: Add packed 10bit YUV 4:2:0 format (git-fixes).
- drm/fourcc: Fix vsub/hsub for Q410 and Q401 (git-fixes).
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (git-fixes).
- drm/i915: Fix documentation for intel_uncore_forcewake_put__locked (git-fixes).
- drm/i915: remove circ_buf.h includes (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (git-fixes).
- drm/i915/display: Do not disable DDI/Transcoder when setting phy test pattern (git-fixes).
- drm/i915/dsi: fix VBT send packet port selection for dual link DSI (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/migrate: do not check the scratch page (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/ttm: never purge busy objects (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() (git-fixes).
- drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (git-fixes).
- drm/mediatek: Modify dpi power on/off sequence (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used (git-fixes).
- drm/msm: another fix for the headless Adreno GPU (git-fixes).
- drm/msm: Use drm_mode_copy() (git-fixes).
- drm/msm/adreno: Make adreno quirks not overwrite each other (git-fixes).
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (git-fixes).
- drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- drm/radeon: Add the missed acpi_put_table() to fix memory leak (git-fixes).
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (git-fixes).
- drm/rockchip: lvds: fix PM usage counter unbalance in poweron (git-fixes).
- drm/rockchip: Use drm_mode_copy() (git-fixes).
- drm/shmem-helper: Avoid vm_open error paths (git-fixes).
- drm/shmem-helper: Remove errant put in error path (git-fixes).
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (git-fixes).
- drm/sti: Use drm_mode_copy() (git-fixes).
- drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (git-fixes).
- drm/virtio: Fix GEM handle creation UAF (git-fixes).
- drm/vmwgfx: Do not use screen objects when SEV is active (git-fixes).
- drm/vmwgfx: Fix a sparse warning in kernel docs (git-fixes).
- drm/vmwgfx: Validate the box size for the snooped cursor (git-fixes).
- Drop FIPS mode DRBG-&gt;getrandom(2) wire-up (bsc#1191259)
- dt-bindings: clock: qcom,aoncc-sm8250: fix compatible (git-fixes).
- dt-bindings: display: sun6i-dsi: Fix clock conditional (git-fixes).
- dt-bindings: gpio: gpio-davinci: Increase maxItems in gpio-line-names (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix description of core clock (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint (git-fixes).
- dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode (git-fixes).
- dt-bindings: msm/dsi: Do not require vcca-supply on 14nm PHY (git-fixes).
- dt-bindings: msm/dsi: Do not require vdds-supply on 10nm PHY (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property (git-fixes).
- EDAC/mc_sysfs: Increase legacy channel support to 12 (bsc#1205263).
- efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes).
- efi: fix userspace infinite retry read efivars after EFI runtime services page fault (git-fixes).
- extcon: usbc-tusb320: Add support for mode setting and reset (git-fixes).
- extcon: usbc-tusb320: Add support for TUSB320L (git-fixes).
- extcon: usbc-tusb320: Factor out extcon into dedicated functions (git-fixes).
- fbcon: Use kzalloc() in fbcon_prepare_logo() (git-fixes).
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed (git-fixes).
- fbdev: geode: do not build on UML (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (git-fixes).
- fbdev: pm2fb: fix missing pci_disable_device() (git-fixes).
- fbdev: ssd1307fb: Drop optional dependency (git-fixes).
- fbdev: uvesafb: do not build on UML (git-fixes).
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (git-fixes).
- fbdev: vermilion: decrease reference count in error path (git-fixes).
- fbdev: via: Fix error in via_core_init() (git-fixes).
- firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (git-fixes).
- floppy: Fix memory leak in do_floppy_init() (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe (git-fixes).
- gpiolib: cdev: fix NULL-pointer dereferences (git-fixes).
- gpiolib: check the 'ngpios' property in core gpiolib code (git-fixes).
- gpiolib: fix memory leak in gpiochip_setup_dev() (git-fixes).
- gpiolib: Get rid of redundant 'else' (git-fixes).
- gpiolib: improve coding style for local variables (git-fixes).
- gpiolib: make struct comments into real kernel docs (git-fixes).
- hamradio: baycom_epp: Fix return type of baycom_send_packet() (git-fixes).
- hamradio: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- HID: hid-sensor-custom: set fixed size for custom attributes (git-fixes).
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (git-fixes).
- HID: mcp2221: do not connect hidraw (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses quirk (git-fixes).
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (git-fixes).
- HID: wacom: Ensure bootloader PID is usable in hidraw mode (git-fixes).
- HSI: omap_ssi_core: Fix error handling in ssi_init() (git-fixes).
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (git-fixes).
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (git-fixes).
- hwmon: (jc42) Convert register access and caching to regmap/regcache (git-fixes).
- hwmon: (jc42) Fix missing unlock on error in jc42_write() (git-fixes).
- hwmon: (jc42) Restore the min/max/critical temperatures on resume (git-fixes).
- hwrng: amd - Fix PCI device refcount leak (git-fixes).
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (git-fixes).
- i2c: mux: reg: check return value after calling platform_get_resource() (git-fixes).
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (git-fixes).
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (git-fixes)
- ibmveth: Always stop tx queues during close (bsc#1065729).
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock (git-fixes).
- iio: adc128s052: add proper .data members in adc128_of_match table (git-fixes).
- iio: fix memory leak in iio_device_register_eventset() (git-fixes).
- iio: temperature: ltc2983: make bulk write buffer DMA-safe (git-fixes).
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list (git-fixes).
- Input: elants_i2c - properly handle the reset GPIO when power is off (git-fixes).
- Input: joystick - fix Kconfig warning for JOYSTICK_ADC (git-fixes).
- Input: wistron_btns - disable on UML (git-fixes).
- integrity: Fix memory leakage in keyring allocation error path (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- ipmi: fix memleak when unload ipmi driver (git-fixes).
- ipmi: fix use after free in _ipmi_destroy_user() (git-fixes).
- ipmi: kcs: Poll OBF briefly to reduce OBE latency (git-fixes).
- ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (git-fixes).
- lib/debugobjects: fix stat count and optimize debug_objects_mem_init (git-fixes).
- lib/fonts: fix undefined behavior in bit shift for get_default_font (git-fixes).
- mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (git-fixes).
- mailbox: mpfs: read the system controller's status (git-fixes).
- mailbox: zynq-ipi: fix error handling while device_register() fails (git-fixes).
- media: adv748x: afe: Select input port when initializing AFE (git-fixes).
- media: camss: Clean up received buffers on failed start of streaming (git-fixes).
- media: dvb-core: Fix double free in dvb_register_device() (git-fixes).
- media: dvb-core: Fix ignored return value in dvb_register_frontend() (git-fixes).
- media: dvb-frontends: fix leak of memory fw (git-fixes).
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (git-fixes).
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (git-fixes).
- media: i2c: ad5820: Fix error path (git-fixes).
- media: imon: fix a race condition in send_packet() (git-fixes).
- media: saa7164: fix missing pci_disable_device() (git-fixes).
- media: si470x: Fix use-after-free in si470x_int_in_callback() (git-fixes).
- media: solo6x10: fix possible memory leak in solo_sysfs_init() (git-fixes).
- media: stv0288: use explicitly signed char (git-fixes).
- media: v4l2-ctrls: Fix off-by-one error in integer menu control check (git-fixes).
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks (git-fixes).
- media: videobuf-dma-contig: use dma_mmap_coherent (git-fixes).
- media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() (git-fixes).
- media: vimc: Fix wrong function called when vimc_init() fails (git-fixes).
- media: vivid: fix compose size exceed boundary (git-fixes).
- memcg, kmem: further deprecate kmem.limit_in_bytes (bsc#1206896).
- memcg: Fix possible use-after-free in memcg_write_event_control() (bsc#1206344).
- mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (git-fixes).
- mfd: mt6360: Add bounds checking in Regmap read/write call-backs (git-fixes).
- mfd: pm8008: Fix return value check in pm8008_probe() (git-fixes).
- mfd: pm8008: Remove driver data structure pm8008_data (git-fixes).
- mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (git-fixes).
- mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (git-fixes).
- misc: ocxl: fix possible name leak in ocxl_file_register_afu() (git-fixes).
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (git-fixes).
- mISDN: hfcmulti: do not call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (git-fixes).
- mISDN: hfcpci: do not call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (git-fixes).
- mISDN: hfcsusb: do not call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (git-fixes).
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read (bsc#1204989,bsc#1205601).
- mm/mempolicy: fix memory leak in set_mempolicy_home_node system call (bsc#1206468).
- mmc: alcor: fix return value check of mmc_add_host() (git-fixes).
- mmc: atmel-mci: fix return value check of mmc_add_host() (git-fixes).
- mmc: core: Normalize the error handling branch in sd_read_ext_regs() (git-fixes).
- mmc: f-sdh30: Add quirks for broken timeout clock capability (git-fixes).
- mmc: meson-gx: fix return value check of mmc_add_host() (git-fixes).
- mmc: mmci: fix return value check of mmc_add_host() (git-fixes).
- mmc: moxart: fix return value check of mmc_add_host() (git-fixes).
- mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (git-fixes).
- mmc: mxcmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: omap_hsmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: pxamci: fix return value check of mmc_add_host() (git-fixes).
- mmc: renesas_sdhi: alway populate SCC pointer (git-fixes).
- mmc: renesas_sdhi: better reset from HS400 mode (git-fixes).
- mmc: rtsx_pci: fix return value check of mmc_add_host() (git-fixes).
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (git-fixes).
- mmc: toshsd: fix return value check of mmc_add_host() (git-fixes).
- mmc: via-sdmmc: fix return value check of mmc_add_host() (git-fixes).
- mmc: vub300: fix return value check of mmc_add_host() (git-fixes).
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (git-fixes).
- mmc: wbsd: fix return value check of mmc_add_host() (git-fixes).
- mmc: wmt-sdmmc: fix return value check of mmc_add_host() (git-fixes).
- mt76: stop the radar detector after leaving dfs channel (git-fixes).
- mtd: Fix device name leak when register device failed in add_mtd_device() (git-fixes).
- mtd: lpddr2_nvm: Fix possible null-ptr-deref (git-fixes).
- mtd: maps: pxa2xx-flash: fix memory leak in probe (git-fixes).
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (git-fixes).
- mtd: spi-nor: Fix the number of bytes for the dummy cycles (git-fixes).
- mtd: spi-nor: hide jedec_id sysfs attribute if not present (git-fixes).
- net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428 bsc#1206619).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (git-fixes).
- net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes).
- net: usb: smsc95xx: fix external PHY reset (git-fixes).
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (bsc#1206536).
- net/mlx5: Lag, filter non compatible devices (bsc#1206536).
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (bsc#1204614).
- nfc: Fix potential resource leaks (git-fixes).
- nfc: pn533: Clear nfc_target before being used (git-fixes).
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (git-fixes).
- NFS: Handle missing attributes in OPEN reply (bsc#1203740).
- nilfs2: fix shift-out-of-bounds due to too large exponent of block size (git-fixes).
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (git-fixes).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (jsc#SLE-24682).
- octeontx2-af: Do not reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (jsc#SLE-24682).
- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures (jsc#SLE-24682).
- PCI: Check for alloc failure in pci_request_irq() (git-fixes).
- PCI: dwc: Fix n_fts[] array overrun (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF (git-fixes).
- PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (git-fixes).
- PCI: vmd: Disable MSI remapping after suspend (git-fixes).
- PCI/sysfs: Fix double free in error path (git-fixes).
- phy: usb: s2 WoL wakeup_count not incremented for USB-&gt;Eth devices (git-fixes).
- pinctrl: k210: call of_node_put() (git-fixes).
- pinctrl: meditatek: Startup with the IRQs disabled (git-fixes).
- pinctrl: pinconf-generic: add missing of_node_put() (git-fixes).
- platform/chrome: cros_ec_typec: Cleanup switch handle return paths (git-fixes).
- platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix event typo (git-fixes).
- platform/surface: aggregator: Add missing call to ssam_request_sync_free() (git-fixes).
- platform/surface: aggregator: Ignore command messages not intended for us (git-fixes).
- platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting (git-fixes).
- platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present (git-fixes).
- platform/x86: huawei-wmi: fix return value calculation (git-fixes).
- platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (git-fixes).
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (git-fixes).
- platform/x86: sony-laptop: Do not turn off 0x153 keyboard backlight during probe (git-fixes).
- PM: hibernate: Fix mistake in kerneldoc comment (git-fixes).
- PM: runtime: Do not call __rpm_callback() from rpm_idle() (git-fixes).
- PNP: fix name memory leak in pnp_alloc_dev() (git-fixes).
- power: supply: ab8500: Fix error handling in ab8500_charger_init() (git-fixes).
- power: supply: fix null pointer dereferencing in power_supply_get_battery_info (git-fixes).
- power: supply: fix residue sysfs file in error handle route of __power_supply_register() (git-fixes).
- power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (git-fixes).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- powerpc: Take in account addition CPU node when building kexec FDT (bsc#1207016 ltc#201108).
- powerpc/64: Init jump labels before parse_early_param() (bsc#1065729).
- powerpc/pci: Fix get_phb_number() locking (bsc#1065729).
- powerpc/perf: callchain validate kernel stack pointer bounds (bsc#1065729).
- powerpc/powernv: add missing of_node_put (bsc#1065729).
- powerpc/pseries: unregister VPA when hot unplugging a CPU (bsc#1205695 ltc#200603).
- powerpc/pseries/eeh: use correct API for error log size (bsc#1065729).
- powerpc/rtas: avoid device tree lookups in rtas_os_term() (bsc#1065729).
- powerpc/rtas: avoid scheduling in rtas_os_term() (bsc#1065729).
- powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (git-fixes).
- powerpc/xive/spapr: correct bitmap allocation size (git-fixes).
- proc: fixup uptime selftest (git-fixes).
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (git-fixes).
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (git-fixes).
- pstore: Properly assign mem_type property (git-fixes).
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (git-fixes).
- pstore/ram: Fix error return code in ramoops_probe() (git-fixes).
- pstore/zone: Use GFP_ATOMIC to allocate zone buffer (git-fixes).
- pwm: lpc18xx-sct: Fix a comment to match code (git-fixes).
- pwm: mediatek: always use bus clock for PWM on MT7622 (git-fixes).
- pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (git-fixes).
- pwm: tegra: Improve required rate calculation (git-fixes).
- r6040: Fix kmemleak in probe and remove (git-fixes).
- random: allow partial reads if later user copies fail (bsc#1204911).
- random: check for signals every PAGE_SIZE chunk of /dev/random (bsc#1204911).
- random: convert to using fops-&gt;read_iter() (bsc#1204911).
- random: convert to using fops-&gt;write_iter() (bsc#1204911).
- random: remove outdated INT_MAX &gt;&gt; 6 check in urandom_read() (bsc#1204911).
- random: zero buffer after reading entropy from userspace (bsc#1204911).
- RDMA: Disable IB HW for UML (git-fixes)
- RDMA/core: Fix order of nldev_exit call (git-fixes)
- RDMA/core: Make sure &quot;ib_port&quot; is valid when access sysfs node (git-fixes)
- RDMA/efa: Add EFA 0xefa2 PCI ID (git-fixes)
- RDMA/hfi: Decrease PCI device reference count in error path (git-fixes)
- RDMA/hfi1: Fix error return code in parse_platform_config() (git-fixes)
- RDMA/hns: Fix AH attr queried by query_qp (git-fixes)
- RDMA/hns: Fix error code of CMD (git-fixes)
- RDMA/hns: Fix ext_sge num error when post send (git-fixes)
- RDMA/hns: fix memory leak in hns_roce_alloc_mr() (git-fixes)
- RDMA/hns: Fix page size cap from firmware (git-fixes)
- RDMA/hns: Fix PBL page MTR find (git-fixes)
- RDMA/hns: Fix XRC caps on HIP08 (git-fixes)
- RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (git-fixes)
- RDMA/irdma: Do not request 2-level PBLEs for CQ alloc (git-fixes)
- RDMA/irdma: Initialize net_type before checking it (git-fixes)
- RDMA/irdma: Report the correct link speed (git-fixes)
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (git-fixes)
- RDMA/nldev: Fix failure to send large messages (git-fixes)
- RDMA/nldev: Return &quot;-EAGAIN&quot; if the cm_id isn't from expected port (git-fixes)
- RDMA/restrack: Release MR restrack when delete (git-fixes)
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (git-fixes)
- RDMA/siw: Fix immediate work request flush to completion queue (git-fixes)
- RDMA/siw: Fix pointer cast warning (git-fixes)
- RDMA/siw: Set defined status for work completion with undefined status (git-fixes)
- RDMA/srp: Fix error return code in srp_parse_options() (git-fixes)
- regulator: bd718x7: Drop unnecessary info print (git-fixes).
- regulator: core: fix deadlock on regulator enable (git-fixes).
- regulator: core: fix module refcount leak in set_supply() (git-fixes).
- regulator: core: fix resource leak in regulator_register() (git-fixes).
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (git-fixes).
- regulator: core: fix use_count leakage when handling boot-on (git-fixes).
- regulator: core: use kfree_const() to free space conditionally (git-fixes).
- regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (git-fixes).
- regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (git-fixes).
- regulator: slg51000: Wait after asserting CS pin (git-fixes).
- regulator: twl6030: fix get status of twl6032 regulators (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state (git-fixes).
- remoteproc: qcom_q6v5_pas: detach power domains on remove (git-fixes).
- remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (git-fixes).
- remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (git-fixes).
- remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (git-fixes).
- remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (git-fixes).
- remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (git-fixes).
- rtc: cmos: fix build on non-ACPI platforms (git-fixes).
- rtc: cmos: Fix event handler registration ordering issue (git-fixes).
- rtc: cmos: Fix wake alarm breakage (git-fixes).
- rtc: ds1347: fix value written to century register (git-fixes).
- rtc: mxc_v2: Add missing clk_disable_unprepare() (git-fixes).
- rtc: pcf85063: fix pcf85063_clkout_control (gut-fixes).
- rtc: pcf85063: Fix reading alarm (git-fixes).
- rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (git-fixes).
- rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (git-fixes).
- rtc: snvs: Allow a time difference on clock register read (git-fixes).
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (git-fixes).
- sbitmap: fix lockup while swapping (bsc#1206602).
- sched/core: Fix comparison in sched_group_cookie_match() (git-fixes)
- sched/core: Fix the bug that task won't enqueue into core (git-fixes)
- sched/topology: Remove redundant variable and fix incorrect (git-fixes)
- sched/uclamp: Fix relationship between uclamp and migration (git-fixes)
- sched/uclamp: Make task_fits_capacity() use util_fits_cpu() (git-fixes)
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it (git-fixes).
- scsi: advansys: Fix kernel pointer leak (git-fixes).
- scsi: aha152x: Fix aha152x_setup() __setup handler return value (git-fixes).
- scsi: bfa: Replace snprintf() with sysfs_emit() (git-fixes).
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (git-fixes).
- scsi: core: Fix scsi_mode_sense() buffer length handling (git-fixes).
- scsi: core: Reallocate device's budget map on queue depth change (git-fixes).
- scsi: core: Restrict legal sdev_state transitions via sysfs (git-fixes).
- scsi: hisi_sas: Free irq vectors in order for v3 HW (git-fixes).
- scsi: hisi_sas: Limit max hw sectors for v3 HW (git-fixes).
- scsi: hisi_sas: Use managed PCI functions (git-fixes).
- scsi: ipr: Fix missing/incorrect resource cleanup in error case (git-fixes).
- scsi: iscsi: Add recv workqueue helpers (git-fixes).
- scsi: iscsi: Fix harmless double shift bug (git-fixes).
- scsi: iscsi: Fix possible memory leak when device_register() failed (git-fixes).
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (git-fixes).
- scsi: iscsi: kabi: add iscsi_conn_queue_work back (git-fixes).
- scsi: iscsi: kabi: fix libiscsi new field (git-fixes).
- scsi: iscsi: Merge suspend fields (git-fixes).
- scsi: iscsi: Rename iscsi_conn_queue_work() (git-fixes).
- scsi: iscsi: Run recv path from workqueue (git-fixes).
- scsi: iscsi: Unblock session then wake up error handler (git-fixes).
- scsi: libfc: Fix use after free in fc_exch_abts_resp() (git-fixes).
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (git-fixes).
- scsi: lpfc: Correct bandwidth logging during receipt of congestion sync WCQE (jsc#PED-1445).
- scsi: lpfc: Fix crash involving race between FLOGI timeout and devloss handler (jsc#PED-1445).
- scsi: lpfc: Fix MI capability display in cmf_info sysfs attribute (jsc#PED-1445).
- scsi: lpfc: Fix WQ|CQ|EQ resource check (jsc#PED-1445).
- scsi: lpfc: Remove linux/msi.h include (jsc#PED-1445).
- scsi: lpfc: Remove redundant pointer 'lp' (jsc#PED-1445).
- scsi: lpfc: Update lpfc version to 14.2.0.9 (jsc#PED-1445).
- scsi: lpfc: Use memset_startat() helper (jsc#PED-1445).
- scsi: megaraid_sas: Fix double kfree() (git-fixes).
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (git-fixes).
- scsi: megaraid: Fix error check return value of register_chrdev() (git-fixes).
- scsi: mpi3mr: Fix memory leaks (git-fixes).
- scsi: mpi3mr: Fix reporting of actual data transfer size (git-fixes).
- scsi: mpi3mr: Fixes around reply request queues (git-fixes).
- scsi: mpt3sas: Do not change DMA mask while reallocating pools (bsc#1206912,bsc#1206098).
- scsi: mpt3sas: Fail reset operation if config request timed out (git-fixes).
- scsi: mpt3sas: Fix out-of-bounds compiler warning (git-fixes).
- scsi: mpt3sas: re-do lost mpt3sas DMA mask fix (bsc#1206912,bsc#1206098).
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API (bsc#1206912,bsc#1206098).
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (git-fixes).
- scsi: mvsas: Replace snprintf() with sysfs_emit() (git-fixes).
- scsi: myrb: Fix up null pointer access on myrb_cleanup() (git-fixes).
- scsi: myrs: Fix crash in error case (git-fixes).
- scsi: ncr53c8xx: Remove unused retrieve_from_waiting_list() function (git-fixes).
- scsi: pm8001: Fix bogus FW crash for maxcpus=1 (git-fixes).
- scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (git-fixes).
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (git-fixes).
- scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (git-fixes).
- scsi: pm8001: Fix tag leaks on error (git-fixes).
- scsi: pm8001: Fix task leak in pm8001_send_abort_all() (git-fixes).
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (git-fixes).
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task (git-fixes).
- scsi: pm80xx: Fix double completion for SATA devices (git-fixes).
- scsi: pm80xx: Fix memory leak during rmmod (git-fixes).
- scsi: pmcraid: Fix missing resource cleanup in error case (git-fixes).
- scsi: qedf: Add stag_work to all the vports (git-fixes).
- scsi: qedf: Change context reset messages to ratelimited (git-fixes).
- scsi: qedf: Fix a UAF bug in __qedf_probe() (git-fixes).
- scsi: qedf: Fix refcount issue when LOGO is received during TMF (git-fixes).
- scsi: qla2xxx: Fix crash when I/O abort times out (jsc#PED-568).
- scsi: qla2xxx: Fix set-but-not-used variable warnings (jsc#PED-568).
- scsi: qla2xxx: Initialize vha-&gt;unknown_atio_[list, work] for NPIV hosts (jsc#PED-568).
- scsi: qla2xxx: Remove duplicate of vha-&gt;iocb_work initialization (jsc#PED-568).
- scsi: qla2xxx: Remove unused variable 'found_devs' (jsc#PED-568).
- scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() (git-fixes).
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (git-fixes).
- scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (git-fixes).
- scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (git-fixes).
- scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (git-fixes).
- scsi: smartpqi: Fix kdump issue when controller is locked up (git-fixes).
- scsi: sr: Do not use GFP_DMA (git-fixes).
- scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition (git-fixes).
- scsi: ufs: Fix a kernel crash during shutdown (git-fixes).
- scsi: ufs: Treat link loss as fatal error (git-fixes).
- scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() (git-fixes).
- scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode() (git-fixes).
- scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() (git-fixes).
- scsi: vmw_pvscsi: Expand vcpuHint to 16 bits (git-fixes).
- sctp: sysctl: make extra pointers netns aware (bsc#1204760).
- selftests: devlink: fix the fd redirect in dummy_reporter_test (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- selftests/efivarfs: Add checking of the test return value (git-fixes).
- selftests/ftrace: event_triggers: wait longer for test_event_enable (git-fixes).
- selftests/powerpc: Fix resource leaks (git-fixes).
- serial: 8250_bcm7271: Fix error handling in brcmuart_init() (git-fixes).
- serial: amba-pl011: avoid SBSA UART accessing DMACR register (git-fixes).
- serial: pch: Fix PCI device refcount leak in pch_request_dma() (git-fixes).
- serial: pl011: Do not clear RX FIFO &amp; RX interrupt in unthrottle (git-fixes).
- serial: stm32: move dma_request_chan() before clk_prepare_enable() (git-fixes).
- serial: sunsab: Fix error handling in sunsab_init() (git-fixes).
- serial: tegra: Read DMA status before terminating (git-fixes).
- soc: mediatek: pm-domains: Fix the power glitch issue (git-fixes).
- soc: qcom: llcc: make irq truly optional (git-fixes).
- soc: qcom: Select REMAP_MMIO for LLCC driver (git-fixes).
- soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (git-fixes).
- soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 (git-fixes).
- spi: spi-gpio: Do not set MOSI as an input if not 3WIRE mode (git-fixes).
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (git-fixes).
- spi: Update reference to struct spi_controller (git-fixes).
- staging: media: tegra-video: fix chan-&gt;mipi value on error (git-fixes).
- staging: media: tegra-video: fix device_node use after free (git-fixes).
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (git-fixes).
- staging: rtl8192u: Fix use after free in ieee80211_rx() (git-fixes).
- string.h: Introduce memset_startat() for wiping trailing members and padding (jsc#PED-1445).
- test_firmware: fix memory leak in test_firmware_init() (git-fixes).
- thermal: core: fix some possible name leaks in error paths (git-fixes).
- thermal: int340x: Add missing attribute for data rate base (git-fixes).
- thermal/drivers/imx8mm_thermal: Validate temperature range (git-fixes).
- thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (git-fixes).
- tpm: acpi: Call acpi_put_table() to fix memory leak (git-fixes).
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (git-fixes).
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (git-fixes).
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (git-fixes).
- tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() (git-fixes).
- tracing/doc: Fix typos on the timerlat tracer documentation (git-fixes).
- tty: serial: altera_uart_{r,t}x_chars() need only uart_port (git-fixes).
- tty: serial: clean up stop-tx part in altera_uart_tx_chars() (git-fixes).
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling (git-fixes).
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration (git-fixes).
- usb: cdnsp: fix lack of ZLP for ep0 (git-fixes).
- usb: dwc3: core: defer probe on ulpi_read_id timeout (git-fixes).
- usb: dwc3: fix PHY disable sequence (git-fixes).
- usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (git-fixes).
- usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (git-fixes).
- usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (git-fixes).
- usb: dwc3: qcom: fix runtime PM wakeup (git-fixes).
- usb: gadget: uvc: Prevent buffer overflow in setup handler (git-fixes).
- usb: gadget: uvc: Rename bmInterfaceFlags -&gt; bmInterlaceFlags (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow (git-fixes).
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (git-fixes).
- usb: serial: cp210x: add Kamstrup RF sniffer PIDs (git-fixes).
- usb: serial: f81232: fix division by zero on line-speed change (git-fixes).
- usb: serial: f81534: fix division by zero on line-speed change (git-fixes).
- usb: serial: option: add Quectel EM05-G modem (git-fixes).
- usb: storage: Add check for kcalloc (git-fixes).
- usb: typec: Check for ops-&gt;exit instead of ops-&gt;enter in altmode_exit (git-fixes).
- usb: typec: Factor out non-PD fwnode properties (git-fixes).
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (git-fixes).
- usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (git-fixes).
- usb: typec: tipd: Fix spurious fwnode_handle_put in error path (git-fixes).
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout (git-fixes).
- usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (git-fixes).
- vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (git-fixes).
- vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (git-fixes).
- vfio: platform: Do not pass return buffer to ACPI _RST method (git-fixes).
- vhost: fix range used in translate_desc() (git-fixes).
- vhost/vsock: Fix error handling in vhost_vsock_init() (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet (git-fixes).
- vringh: fix range used in iotlb_translate() (git-fixes).
- vsock: Enable y2038 safe timeval for timeout (bsc#1206101).
- vsock: Refactor vsock_*_getsockopt to resemble sock_getsockopt (bsc#1206101).
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (git-fixes).
- wifi: ath10k: Fix return value in ath10k_pci_init() (git-fixes).
- wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (git-fixes).
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (git-fixes).
- wifi: ath9k: verify the expected usb_endpoints are present (git-fixes).
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (git-fixes).
- wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (git-fixes).
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (git-fixes).
- wifi: iwlwifi: mvm: fix double free on tx path (git-fixes).
- wifi: mac80211: fix memory leak in ieee80211_if_add() (git-fixes).
- wifi: mt76: do not run mt76u_status_worker if the device is not running (git-fixes).
- wifi: mt76: fix coverity overrun-call in mt76_get_txpower() (git-fixes).
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (git-fixes).
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (git-fixes).
- wifi: rtl8xxxu: Fix the channel width reporting (git-fixes).
- wifi: rtl8xxxu: gen2: Turn on the rate control (git-fixes).
- wifi: rtw89: fix physts IE page check (git-fixes).
- wifi: rtw89: Fix some error handling path in rtw89_core_sta_assoc() (git-fixes).
- wifi: rtw89: use u32_encode_bits() to fill MAC quota value (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- xfrm: Fix oops in __xfrm_state_delete() (bsc#1206794).
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.8.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.8.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.8.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.8.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.8.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.8.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-201</id>
    <title>Security update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1674829474"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205000" id="1205000" title="VUL-0: CVE-2022-4415: systemd-coredump: systemd-coredump not respecting fs.suid_dumpable kernel setting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204944" id="1204944" title="Problem accessing TPM when secure boot is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207264" id="1207264" title="&quot;%config(noreplace) %{_sysconfdir}/pam.d/systemd-user&quot; missing in systemd.spec" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4415" id="CVE-2022-4415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4415" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-2663" id="PED-2663" title="https://jira.suse.com/browse/PED-2663" type="jira"/>
    </references>
    <description>This update for systemd fixes the following issues:

- CVE-2022-4415: Fixed an issue where users could access coredumps
  with changed uid, gid or capabilities (bsc#1205000).

Non-security fixes:

- Enabled the pstore service (jsc#PED-2663).
- Fixed an issue accessing TPM when secure boot is enabled (bsc#1204944).
- Fixed an issue where a pamd file could get accidentally overwritten
  after an update (bsc#1207264).
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/libsystemd0-249.14-150400.8.19.1.x86_64.rpm">
          <filename>libsystemd0-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/libudev1-249.14-150400.8.19.1.x86_64.rpm">
          <filename>libudev1-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.14" release="150400.8.19.1" arch="src" src="src/systemd-249.14-150400.8.19.1.src.rpm">
          <filename>systemd-249.14-150400.8.19.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/systemd-249.14-150400.8.19.1.x86_64.rpm">
          <filename>systemd-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/systemd-container-249.14-150400.8.19.1.x86_64.rpm">
          <filename>systemd-container-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.14-150400.8.19.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.14-150400.8.19.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.14" release="150400.8.19.1" arch="x86_64" src="x86_64/udev-249.14-150400.8.19.1.x86_64.rpm">
          <filename>udev-249.14-150400.8.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/libsystemd0-249.14-150400.8.19.1.aarch64.rpm">
          <filename>libsystemd0-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/libudev1-249.14-150400.8.19.1.aarch64.rpm">
          <filename>libudev1-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/systemd-249.14-150400.8.19.1.aarch64.rpm">
          <filename>systemd-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/systemd-container-249.14-150400.8.19.1.aarch64.rpm">
          <filename>systemd-container-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.14-150400.8.19.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.14-150400.8.19.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.14" release="150400.8.19.1" arch="aarch64" src="aarch64/udev-249.14-150400.8.19.1.aarch64.rpm">
          <filename>udev-249.14-150400.8.19.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-335</id>
    <title>Recommended update for hyper-v</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1675947082"/>
    <references/>
    <description>This update for hyper-v fixes the following issues:
    
   - Provide the latest version for SLE-15-SP4 too.
  </description>
    <pkglist>
      <collection>
        <package name="hyper-v" epoch="0" version="8" release="150200.14.8.1" arch="src" src="src/hyper-v-8-150200.14.8.1.src.rpm">
          <filename>hyper-v-8-150200.14.8.1.src.rpm</filename>
        </package>
        <package name="hyper-v" epoch="0" version="8" release="150200.14.8.1" arch="x86_64" src="x86_64/hyper-v-8-150200.14.8.1.x86_64.rpm">
          <filename>hyper-v-8-150200.14.8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-594</id>
    <title>Recommended update for drbd-utils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677749326"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206754" id="1206754" title="L3: DRBD - /lib/drbd/scripts/drbd : No such file or directory" type="bugzilla"/>
    </references>
    <description>This update for drbd-utils fixes the following issues:

- Fix drbd.service failing to load, caused by incorrect path to executable (bsc#1206754)
</description>
    <pkglist>
      <collection>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.9.1" arch="src" src="src/drbd-utils-9.19.0-150400.3.9.1.src.rpm">
          <filename>drbd-utils-9.19.0-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.9.1" arch="x86_64" src="x86_64/drbd-utils-9.19.0-150400.3.9.1.x86_64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.9.1" arch="aarch64" src="aarch64/drbd-utils-9.19.0-150400.3.9.1.aarch64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-211</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1675095996"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206868" id="1206868" title="VUL-1: CVE-2023-0054: vim: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206867" id="1206867" title="VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207396" id="1207396" title="VUL-0: CVE-2023-0433: vim: Heap-based Buffer Overflow in vim prior to 9.0.1225" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207162" id="1207162" title="VUL-1: CVE-2023-0288: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206866" id="1206866" title="VUL-1: CVE-2023-0049: vim: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0433" id="CVE-2023-0433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0049" id="CVE-2023-0049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0049" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0288" id="CVE-2023-0288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0054" id="CVE-2023-0054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0054" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0051" id="CVE-2023-0051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0051" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- Updated to version 9.0.1234:
  - CVE-2023-0433: Fixed an out of bounds memory access that could
    cause a crash (bsc#1207396).
  - CVE-2023-0288: Fixed an out of bounds memory access that could
    cause a crash (bsc#1207162).
  - CVE-2023-0054: Fixed an out of bounds memory write that could
    cause a crash or memory corruption (bsc#1206868).
  - CVE-2023-0051: Fixed an out of bounds memory access that could
    cause a crash (bsc#1206867).
  - CVE-2023-0049: Fixed an out of bounds memory access that could
    cause a crash (bsc#1206866).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1234" release="150000.5.34.1" arch="src" src="src/vim-9.0.1234-150000.5.34.1.src.rpm">
          <filename>vim-9.0.1234-150000.5.34.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1234" release="150000.5.34.1" arch="noarch" src="noarch/vim-data-common-9.0.1234-150000.5.34.1.noarch.rpm">
          <filename>vim-data-common-9.0.1234-150000.5.34.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1234" release="150000.5.34.1" arch="x86_64" src="x86_64/vim-small-9.0.1234-150000.5.34.1.x86_64.rpm">
          <filename>vim-small-9.0.1234-150000.5.34.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1234" release="150000.5.34.1" arch="aarch64" src="aarch64/vim-small-9.0.1234-150000.5.34.1.aarch64.rpm">
          <filename>vim-small-9.0.1234-150000.5.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-342</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676020037"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48281" id="CVE-2022-48281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48281" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207413" id="1207413" title="VUL-0: CVE-2022-48281: tiff: heap-based buffer overflow via a crafted TIFF image via processCropSelections in tools/tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-48281: Fixed a buffer overflow that could be triggered via
  a crafted image (bsc#1207413).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.25.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.25.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.25.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.25.1" arch="src" src="src/tiff-4.0.9-150000.45.25.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.25.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.25.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.25.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-617</id>
    <title>Recommended update for jitterentropy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677858559"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207789" id="1207789" title="jitterentropy does not ship debuginfo" type="bugzilla"/>
    </references>
    <description>This update for jitterentropy fixes the following issues:

- build jitterentropy library with debuginfo (bsc#1207789)
</description>
    <pkglist>
      <collection>
        <package name="jitterentropy" epoch="0" version="3.4.0" release="150000.1.9.1" arch="src" src="src/jitterentropy-3.4.0-150000.1.9.1.src.rpm">
          <filename>jitterentropy-3.4.0-150000.1.9.1.src.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.0" release="150000.1.9.1" arch="x86_64" src="x86_64/jitterentropy-devel-3.4.0-150000.1.9.1.x86_64.rpm">
          <filename>jitterentropy-devel-3.4.0-150000.1.9.1.x86_64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.0" release="150000.1.9.1" arch="x86_64" src="x86_64/libjitterentropy3-3.4.0-150000.1.9.1.x86_64.rpm">
          <filename>libjitterentropy3-3.4.0-150000.1.9.1.x86_64.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.0" release="150000.1.9.1" arch="aarch64" src="aarch64/jitterentropy-devel-3.4.0-150000.1.9.1.aarch64.rpm">
          <filename>jitterentropy-devel-3.4.0-150000.1.9.1.aarch64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.0" release="150000.1.9.1" arch="aarch64" src="aarch64/libjitterentropy3-3.4.0-150000.1.9.1.aarch64.rpm">
          <filename>libjitterentropy3-3.4.0-150000.1.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-311</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1675787807"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207533" id="1207533" title="VUL-0: EMBARGOED: CVE-2023-0286: openssl: X.400 address type confusion in X.509 GeneralName" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207536" id="1207536" title="VUL-0: EMBARGOED: CVE-2023-0215: openssl: Use-after-free following BIO_new_NDEF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207538" id="1207538" title="VUL-0: EMBARGOED: CVE-2022-4450: openssl: Double free after calling PEM_read_bio_ex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207534" id="1207534" title="VUL-0: EMBARGOED: CVE-2022-4304: openssl: Timing Oracle in RSA Decryption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" id="CVE-2023-0286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" id="CVE-2023-0215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" id="CVE-2022-4450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" id="CVE-2022-4304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533).
- CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536).
- CVE-2022-4450: Fixed double free after calling PEM_read_bio_ex() (bsc#1207538).
- CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.22.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.22.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.22.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.22.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.22.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.22.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.22.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.22.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.22.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.22.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.22.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.22.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.22.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.22.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.22.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.22.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-700</id>
    <title>Recommended update for multipath-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678438306"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207232" id="1207232" title="L3: rpm -V multipath-tools fails for latest version: multipath-tools-0.9.0+62+suse.3e048d4-150400.4.7.1.x86_64" type="bugzilla"/>
    </references>
    <description>This update for multipath-tools fixes the following issue:

- Fix &quot;rpm --verify&quot; (bsc#1207232)
</description>
    <pkglist>
      <collection>
        <package name="kpartx" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="x86_64" src="x86_64/kpartx-0.9.0+62+suse.3e048d4-150400.4.10.1.x86_64.rpm">
          <filename>kpartx-0.9.0+62+suse.3e048d4-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="x86_64" src="x86_64/libmpath0-0.9.0+62+suse.3e048d4-150400.4.10.1.x86_64.rpm">
          <filename>libmpath0-0.9.0+62+suse.3e048d4-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="src" src="src/multipath-tools-0.9.0+62+suse.3e048d4-150400.4.10.1.src.rpm">
          <filename>multipath-tools-0.9.0+62+suse.3e048d4-150400.4.10.1.src.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="x86_64" src="x86_64/multipath-tools-0.9.0+62+suse.3e048d4-150400.4.10.1.x86_64.rpm">
          <filename>multipath-tools-0.9.0+62+suse.3e048d4-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="aarch64" src="aarch64/kpartx-0.9.0+62+suse.3e048d4-150400.4.10.1.aarch64.rpm">
          <filename>kpartx-0.9.0+62+suse.3e048d4-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="aarch64" src="aarch64/libmpath0-0.9.0+62+suse.3e048d4-150400.4.10.1.aarch64.rpm">
          <filename>libmpath0-0.9.0+62+suse.3e048d4-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+62+suse.3e048d4" release="150400.4.10.1" arch="aarch64" src="aarch64/multipath-tools-0.9.0+62+suse.3e048d4-150400.4.10.1.aarch64.rpm">
          <filename>multipath-tools-0.9.0+62+suse.3e048d4-150400.4.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-433</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676533395"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185861" id="1185861" title="VUL-0: CVE-2020-24588: kernel-source: ath10k: drop MPDU which has discard flag set by firmware for SDIO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185863" id="1185863" title="VUL-0: kernel-source: various 802.11 security issues aka &quot;FRAGATTACKS&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186449" id="1186449" title="acpi-cpufreq: Skip initializtion if a cpufreq driver exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191256" id="1191256" title="kernel: FIPS 140-3: SP800-56Arev3 for DH" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192868" id="1192868" title="[EAR - NOT FOR USA Citizens] PTF request to fix CVE-2021-34693, CVE-2020-36386, CVE-2020-24588, CVE-2020-24586, CVE-2020-26139, CVE-2020-24587 about kernel-source in SLES11 SP3 DT LTSS - ATAE ref:_00D1igLOd._5001ilwoM3:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195175" id="1195175" title="L3-Question: VM Fails to Initialize CX4 VF due to Mem Fragmentation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195655" id="1195655" title="SLES15 SP4 - [P8][P9][P10]- Hard lockups are observed while running stress-ng and LPAR hangs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196058" id="1196058" title="System enters emergency mode with device timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199701" id="1199701" title="ath11k: arbitrary packet injection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204063" id="1204063" title="Kernel 5.19.8 appears to be missing lpuart earlycon and console" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204356" id="1204356" title="udev device scanning slow in Xen - processing SEQNUM=* is taking a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204662" id="1204662" title="[15SP5][XEN] Entry into maintenance mode after boot up 15SP5 XEN kernel for AMD Zen3 test machine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205495" id="1205495" title="L3: Server rebooted - dump generated - need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206006" id="1206006" title="[Azure] scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206036" id="1206036" title="btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206056" id="1206056" title="[PATCH] btrfs: fix processing of delayed data refs during backref  walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206057" id="1206057" title="[PATCH] btrfs: fix processing of delayed tree block refs during  backref walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206258" id="1206258" title="VUL-0: CVE-2022-4382: kernel: use-after-free write in put_dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206363" id="1206363" title="VUL-0: CVE-2022-4382: kernel live patch: use-after-free write in put_dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206459" id="1206459" title="[HPS Bug] SLES15-SP4 installation process is blocked due &quot;workqueue lockup&quot; caused by ipmi_ssif driver on HPE RL300 platforms." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206616" id="1206616" title="QEMU+KVM fails with &quot;failed to set MSR&quot; after kernel update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206677" id="1206677" title="VUL-0: kernel-source: sctp_diag: fix type confusion in inet_diag_msg_sctpasoc_fill()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206784" id="1206784" title="VUL-0: kernel-source: HID: drop assumptions on non-empty lists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207010" id="1207010" title="Tunable vm.compaction_proactiveness doesn't work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207034" id="1207034" title="VUL-0: CVE-2023-0179: kernel: integer overflow vulnerability within the Netfilter (nftables) subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207134" id="1207134" title="VUL-0: CVE-2023-0266: kernel-source,kernel-source-rt,kernel-source-azure: Missing locks in SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 compat code causing UAF used in the wild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207149" id="1207149" title="brightness keys not working on Lenovo ideapad 3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207158" id="1207158" title="[FVTCR]SLES15 SP4 [5.14.21-150400.24.18-default] while running btrfs xfstest with 4k/64k gets stuck with open_ctree failed error and makes lpar unresponsive [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207184" id="1207184" title="FIPS 140-3: Kernel: valid FIPS PCT test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207186" id="1207186" title="VUL-0: kernel-source,kernel-source-rt,kernel-source-azure: HID: betop: check shape of output reports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207190" id="1207190" title="VUL-0: CVE-2023-0266: kernel live patch: Missing locks in SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 compat code causing UAF used in the wild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207237" id="1207237" title="VUL-0: CVE-2022-47929: kernel-source,kernel-source-rt,kernel-source-azure: NULL pointer dereference bug in the traffic control subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207263" id="1207263" title="btrfs: backport several fsync related changes to SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207269" id="1207269" title="Kernel fails to build when CONFIG_PM_SLEEP is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207497" id="1207497" title="&quot;modprobe diag288_wdt&quot; fails with &quot;could not insert 'diag288_wdt': Invalid argument&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207500" id="1207500" title="SLES15 SP5 [5.14.21-150500.35-default] btrfs/272 xfstest fails with error missing kernel patch [P10]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207501" id="1207501" title="SLES15 SP5 [5.14.21-150500.35-default] xfs/557 xfstest fails with error missing kernel patch [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207506" id="1207506" title="SLES15 SP5 [5.14.21-150500.35-default] btrfs/280 xfstest fails with error missing kernel patch [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207507" id="1207507" title="SLES15 SP5 [5.14.21-150500.35-default] btrfs/279 xfstest fails with error missing kernel patch [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207734" id="1207734" title="AMDGPU related freeze when returning from monitor powersave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207769" id="1207769" title="VUL-0: kernel: NULL ptr in show_smaps_rollup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207842" id="1207842" title="PVT:1030:XM:ITC:SUSE LPAR lost connection after doing PEC Injections on 4 port ethernet adapter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207878" id="1207878" title="[ENA]  Back port DMA buffer fix in distros" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207933" id="1207933" title="SLE-15SP4 KOTD: Cannot set lz4 compression on zram device" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24588" id="CVE-2020-24588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0179" id="CVE-2023-0179" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0179" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4382" id="CVE-2022-4382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0266" id="CVE-2023-0266" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0266" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47929" id="CVE-2022-47929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0590" id="CVE-2023-0590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0122" id="CVE-2023-0122" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0122" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23455" id="CVE-2023-23455" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23455" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23454" id="CVE-2023-23454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23454" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207795" id="1207795" title="VUL-0: CVE-2023-23454: kernel: type-confusion in the CBQ network scheduler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207050" id="1207050" title="VUL-0: CVE-2023-0122: kernel-source-rt,kernel-source,kernel-source-azure: NVME driver: null pointer dereference in drivers/nvme/target/auth.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207125" id="1207125" title="VUL-0: CVE-2023-23455: kernel: type-confusion in the ATM network scheduler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207036" id="1207036" title="VUL-0: CVE-2023-0590: kernel: use-after-free due to race condition in qdisc_graft()" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-21132" id="SLE-21132" title="https://jira.suse.com/browse/SLE-21132" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24682" id="SLE-24682" title="https://jira.suse.com/browse/SLE-24682" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 was missing locks that could have been used in a use-after-free that could have resulted in a priviledge escalation to gain ring0 access from the system user (bsc#1207134).
- CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034).
- CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bnc#1207050).
- CVE-2022-4382: Fixed a use-after-free flaw that was caused by a race condition among the superblock operations inside the gadgetfs code (bsc#1206258).
- CVE-2020-24588: Fixed injection of arbitrary network packets against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n) (bsc#1199701).

The following non-security bugs were fixed:

- ACPI: EC: Fix EC address space handler unregistration (bsc#1207149).
- ACPI: EC: Fix ECDT probe ordering issues (bsc#1207149).
- ACPI: PRM: Check whether EFI runtime is available (git-fixes).
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149).
- ACPICA: include/acpi/acpixf.h: Fix indentation (bsc#1207149).
- ALSA: control-led: use strscpy in set_led_id() (git-fixes).
- ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 (git-fixes).
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (git-fixes).
- ALSA: hda/realtek - Turn on power early (git-fixes).
- ALSA: hda/realtek: Add Acer Predator PH315-54 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes).
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes).
- ALSA: hda: cs35l41: Check runtime suspend capability at runtime_idle (git-fixes).
- ALSA: hda: cs35l41: Do not return -EINVAL from system suspend/resume (git-fixes).
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (git-fixes).
- ALSA: usb-audio: Make sure to stop endpoints before closing EPs (git-fixes).
- ALSA: usb-audio: Relax hw constraints for implicit fb sync (git-fixes).
- ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 (git-fixes).
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (git-fixes).
- ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (git-fixes).
- ARM: dts: imx7d-pico: Use 'clock-frequency' (git-fixes).
- ARM: dts: imx: Fix pca9547 i2c-mux node name (git-fixes).
- ARM: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes).
- ARM: imx: add missing of_node_put() (git-fixes).
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes).
- ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes).
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes).
- ASoC: fsl_micfil: Correct the number of steps on SX controls (git-fixes).
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes).
- ASoC: qcom: lpass-cpu: Fix fallback SD line index handling (git-fixes).
- ASoC: wm8904: fix wrong outputs volume after power reactivation (git-fixes).
- Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (git-fixes).
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev (git-fixes).
- Documentation: Remove bogus claim about del_timer_sync() (git-fixes).
- HID: betop: check shape of output reports (git-fixes).
- HID: betop: check shape of output reports (git-fixes, bsc#1207186).
- HID: check empty report_list in bigben_probe() (git-fixes).
- HID: check empty report_list in hid_validate_values() (git-fixes).
- HID: drop assumptions on non-empty lists (git-fixes, bsc#1206784).
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (git-fixes).
- HID: playstation: sanity check DualSense calibration data (git-fixes).
- HID: revert CHERRY_MOUSE_000C quirk (git-fixes).
- IB/hfi1: Fix expected receive setup error exit issues (git-fixes)
- IB/hfi1: Immediately remove invalid memory from hardware (git-fixes)
- IB/hfi1: Reject a zero-length user expected buffer (git-fixes)
- IB/hfi1: Remove user expected buffer invalidate race (git-fixes)
- IB/hfi1: Reserve user expected TIDs (git-fixes)
- IB/mad: Do not call to function that might sleep while in atomic context (git-fixes).
- KVM: x86: Check for existing Hyper-V vCPU in kvm_hv_vcpu_init() (bsc#1206616).
- PCI/PM: Define pci_restore_standard_config() only for CONFIG_PM_SLEEP (bsc#1207269).
- PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() (git-fixes).
- RDMA/core: Fix ib block iterator counter overflow (bsc#1207878).
- RDMA/core: Fix ib block iterator counter overflow (git-fixes)
- RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes)
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes)
- RDMA/rxe: Prevent faulty rkey generation (git-fixes)
- RDMA/srp: Move large values to a new enum for gcc13 (git-fixes)
- Revert &quot;ARM: dts: armada-38x: Fix compatible string for gpios&quot; (git-fixes).
- Revert &quot;ARM: dts: armada-39x: Fix compatible string for gpios&quot; (git-fixes).
- Revert &quot;Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode&quot; (git-fixes).
- Revert &quot;Revert &quot;block, bfq: honor already-setup queue merges&quot;&quot; (git-fixes).
- Revert &quot;arm64: dts: meson-sm1-odroid-hc4: disable unused USB PHY0&quot; (git-fixes).
- Revert &quot;wifi: mac80211: fix memory leak in ieee80211_if_add()&quot; (git-fixes).
- SUNRPC: Do not dereference xprt-&gt;snd_task if it's a cookie (git-fixes).
- SUNRPC: Use BIT() macro in rpc_show_xprt_state() (git-fixes).
- USB: gadget: Fix use-after-free during usb config switch (git-fixes).
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (git-fixes).
- USB: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes).
- USB: serial: option: add Quectel EC200U modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (CS) modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (GR) modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (RS) modem (git-fixes).
- USB: serial: option: add Quectel EM05CN (SG) modem (git-fixes).
- USB: serial: option: add Quectel EM05CN modem (git-fixes).
- VMCI: Use threaded irqs instead of tasklets (git-fixes).
- arm64: atomics: format whitespace consistently (git-fixes).
- arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (git-fixes).
- arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (git-fixes).
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes).
- arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes).
- arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes).
- arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes).
- arm64: dts: qcom: msm8992: Do not use sfpb mutex (git-fixes).
- arm64: efi: Execute runtime services from a dedicated stack (git-fixes).
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes).
- ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes).
- bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes).
- bfq: fix use-after-free in bfq_dispatch_request (git-fixes).
- bfq: fix waker_bfqq inconsistency crash (git-fixes).
- blk-throttle: prevent overflow while calculating wait time (git-fixes).
- blk-wbt: fix that 'rwb-&gt;wc' is always set to 1 in wbt_init() (git-fixes).
- blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes).
- block, bfq: do not move oom_bfqq (git-fixes).
- block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes).
- block, bfq: fix possible uaf for 'bfqq-&gt;bic' (git-fixes).
- block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes).
- block, bfq: protect 'bfqd-&gt;queued' by 'bfqd-&gt;lock' (git-fixes).
- block/bfq_wf2q: correct weight to ioprio (git-fixes).
- block/bio: remove duplicate append pages code (git-fixes).
- block: check minor range in device_add_disk() (git-fixes).
- block: ensure iov_iter advances for added pages (git-fixes).
- block: fix infinite loop for invalid zone append (git-fixes).
- block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes).
- block: use bdev_get_queue() in bio.c (git-fixes).
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (git-fixes).
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (git-fixes).
- bnxt_en: Remove debugfs when pci_register_driver failed (git-fixes).
- bnxt_en: add dynamic debug support for HWRM messages (git-fixes).
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (git-fixes).
- bnxt_en: fix the handling of PCIE-AER (git-fixes).
- bnxt_en: refactor bnxt_cancel_reservations() (git-fixes).
- btrfs: add helper to delete a dir entry from a log tree (bsc#1207263).
- btrfs: avoid inode logging during rename and link when possible (bsc#1207263).
- btrfs: avoid logging all directory changes during renames (bsc#1207263).
- btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5 (bsc#1206036 bsc#1207500 ltc#201363).
- btrfs: do not log unnecessary boundary keys when logging directory (bsc#1207263).
- btrfs: fix assertion failure when logging directory key range item (bsc#1207263).
- btrfs: fix processing of delayed data refs during backref walking (bsc#1206056 bsc#1207507 ltc#201367).
- btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057 bsc#1207506 ltc#201368).
- btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158).
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158).
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes).
- btrfs: join running log transaction when logging new name (bsc#1207263).
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158).
- btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (bsc#1207263).
- btrfs: prepare extents to be logged before locking a log tree path (bsc#1207263).
- btrfs: put initial index value of a directory in a constant (bsc#1207263).
- btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158).
- btrfs: qgroup: remove outdated TODO comments (bsc#1207158).
- btrfs: remove unnecessary NULL check for the new inode during rename exchange (bsc#1207263).
- btrfs: remove useless path release in the fast fsync path (bsc#1207263).
- btrfs: remove write and wait of struct walk_control (bsc#1207263).
- btrfs: stop copying old dir items when logging a directory (bsc#1207263).
- btrfs: stop doing unnecessary log updates during a rename (bsc#1207263).
- btrfs: stop trying to log subdirectories created in past transactions (bsc#1207263).
- btrfs: use single variable to track return value at btrfs_log_inode() (bsc#1207263).
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes).
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes).
- cifs: Fix uninitialized memory read for smb311 posix symlink create (git-fixes).
- cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629).
- cifs: do not include page data when checking signature (git-fixes).
- cifs: do not query ifaces on smb1 mounts (git-fixes).
- cifs: don't take exclusive lock for updating target hints (bsc#1193629).
- cifs: fix double free on failed kerberos auth (git-fixes).
- cifs: fix file info setting in cifs_open_file() (git-fixes).
- cifs: fix file info setting in cifs_query_path_info() (git-fixes).
- cifs: fix potential deadlock in cache_refresh_path() (git-fixes).
- cifs: fix potential memory leaks in session setup (bsc#1193629).
- cifs: fix race in assemble_neg_contexts() (bsc#1193629).
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629).
- cifs: handle cache lookup errors different than -ENOENT (bsc#1193629).
- cifs: ignore ipc reconnect failures during dfs failover (bsc#1193629).
- cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (bsc#1193629).
- cifs: remove duplicate code in __refresh_tcon() (bsc#1193629).
- cifs: remove redundant assignment to the variable match (bsc#1193629).
- cifs: remove unused function (bsc#1193629).
- comedi: adv_pci1760: Fix PWM instruction handling (git-fixes).
- config: arm64: Fix Freescale LPUART dependency (boo#1204063). 
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes).
- cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes).
- crypto: fixed DH and ECDH implemention for FIPS PCT (jsc#SLE-21132,bsc#1191256,bsc#1207184).
- dm btree: add a defensive bounds check to insert_at() (git-fixes).
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes).
- dm cache: Fix UAF in destroy() (git-fixes).
- dm cache: set needs_check flag after aborting metadata (git-fixes).
- dm clone: Fix UAF in clone_dtr() (git-fixes).
- dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes).
- dm integrity: clear the journal on suspend (git-fixes).
- dm integrity: flush the journal on suspend (git-fixes).
- dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes).
- dm ioctl: prevent potential spectre v1 gadget (git-fixes).
- dm raid: fix address sanitizer warning in raid_resume (git-fixes).
- dm raid: fix address sanitizer warning in raid_status (git-fixes).
- dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes).
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes).
- dm thin: Fix UAF in run_timer_softirq() (git-fixes).
- dm thin: Use last transaction's pmd-&gt;root when commit failed (git-fixes).
- dm thin: resume even if in FAIL mode (git-fixes).
- dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes).
- dm: fix alloc_dax error handling in alloc_dev (git-fixes).
- dm: requeue IO if mapping table not yet available (git-fixes).
- dmaengine: Fix double increment of client_count in dma_chan_get() (git-fixes).
- dmaengine: idxd: Do not call DMX TX callbacks during workqueue disable (git-fixes).
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled (git-fixes).
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes).
- dmaengine: lgm: Move DT parsing after initialization (git-fixes).
- dmaengine: tegra210-adma: fix global intr clear (git-fixes).
- dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (git-fixes).
- dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (git-fixes).
- docs: Fix the docs build with Sphinx 6.0 (git-fixes).
- driver core: Fix test_async_probe_init saves device in wrong array (git-fixes).
- drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (git-fixes).
- drivers:md:fix a potential use-after-free bug (git-fixes).
- drm/amd/display: Calculate output_color_space after pixel encoding adjustment (git-fixes).
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (git-fixes).
- drm/amd/display: Fix set scaling doesn's work (git-fixes).
- drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734).
- drm/amd/display: fix issues with driver unload (git-fixes).
- drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes).
- drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes).
- drm/amdgpu: drop experimental flag on aldebaran (git-fixes).
- drm/hyperv: Add error message for fb size greater than allocated (git-fixes).
- drm/i915/adlp: Fix typo for reference clock (git-fixes).
- drm/i915/display: Check source height is &gt; 0 (git-fixes).
- drm/i915/gt: Reset twice (git-fixes).
- drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes).
- drm/i915: Fix potential bit_17 double-free (git-fixes).
- drm/i915: re-disable RC6p on Sandy Bridge (git-fixes).
- drm/msm/adreno: Make adreno quirks not overwrite each other (git-fixes).
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (git-fixes).
- drm/msm: another fix for the headless Adreno GPU (git-fixes).
- drm/panfrost: fix GENERIC_ATOMIC64 dependency (git-fixes).
- drm/vc4: hdmi: make CEC adapter name unique (git-fixes).
- drm/virtio: Fix GEM handle creation UAF (git-fixes).
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes).
- dt-bindings: msm/dsi: Do not require vcca-supply on 14nm PHY (git-fixes).
- dt-bindings: msm/dsi: Do not require vdds-supply on 10nm PHY (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix description of core clock (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint (git-fixes).
- dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode (git-fixes).
- efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes).
- efi: fix userspace infinite retry read efivars after EFI runtime services page fault (git-fixes).
- efi: rt-wrapper: Add missing include (git-fixes).
- efi: tpm: Avoid READ_ONCE() for accessing the event log (git-fixes).
- ext4: Fixup pages without buffers (bsc#1205495).
- extcon: usbc-tusb320: fix kernel-doc warning (git-fixes).
- fbcon: Check font dimension limits (git-fixes).
- fbdev: omapfb: avoid stack overflow warning (git-fixes).
- firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes).
- firmware: arm_scmi: Harden shared memory access in fetch_notification (git-fixes).
- firmware: arm_scmi: Harden shared memory access in fetch_response (git-fixes).
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes).
- fs: remove __sync_filesystem (git-fixes).
- ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes).
- ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes).
- git_sort: add usb-linus branch for gregkh/usb
- gsmi: fix null-deref in gsmi_get_variable (git-fixes).
- hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes).
- i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes).
- i2c: mv64xxx: Remove shutdown method from driver (git-fixes).
- i40e: Disallow ip4 and ip6 l4_4_bytes (git-fixes).
- i40e: Fix error handling in i40e_init_module() (git-fixes).
- i40e: Fix not setting default xps_cpus after reset (git-fixes).
- igb: Allocate MSI-X vector when testing (git-fixes).
- iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes).
- iio: adc: stm32-dfsdm: fill module aliases (git-fixes).
- iio: hid: fix the retval in accel_3d_capture_sample (git-fixes).
- iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes).
- iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes).
- iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes).
- iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes).
- iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes).
- iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes).
- iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes).
- iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes).
- iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes).
- iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes).
- iio:adc:twl6030: Enable measurement of VAC (git-fixes).
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes).
- ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459).
- ipmi:ssif: Increase the message retry time (bsc#1206459).
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (git-fixes).
- ixgbevf: Fix resource leak in ixgbevf_init_module() (git-fixes).
- jbd2: use the correct print format (git-fixes).
- kABI workaround for struct acpi_ec (bsc#1207149).
- kABI: Preserve TRACE_EVENT_FL values (git-fixes).
- kabi/severities: add mlx5 internal symbols
- l2tp: Do not sleep and disable BH under writer-side sk_callback_lock (git-fixes).
- loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes).
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes).
- md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes).
- md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes).
- md: protect md_unregister_thread from reentrancy (git-fixes).
- mei: me: add meteor lake point M DID (git-fixes).
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (git-fixes).
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (git-fixes).
- memory: tegra: Remove clients SID override programming (git-fixes).
- misc: fastrpc: Do not remove map on creater_process and device_release (git-fixes).
- misc: fastrpc: Fix use-after-free race condition for maps (git-fixes).
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769).
- mm: compaction: kABI: avoid pglist_data kABI breakage (bsc#1207010).
- mm: compaction: support triggering of proactive compaction by user (bsc#1207010).
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (git-fixes).
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (git-fixes).
- module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662).
- mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes).
- mt76: mt7921: avoid unnecessary spin_lock/spin_unlock in mt7921_mcu_tx_done_event (git-fixes).
- nbd: Fix hung on disconnect request if socket is closed before (git-fixes).
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes).
- nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes).
- nbd: fix io hung while disconnecting device (git-fixes).
- nbd: fix race between nbd_alloc_config() and module removal (git-fixes).
- net/mlx4: Check retval of mlx4_bitmap_init (git-fixes).
- net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175).
- net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842).
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (git-fixes).
- net: ena: Fix error handling in ena_init() (git-fixes).
- net: liquidio: release resources when liquidio driver open failed (git-fixes).
- net: liquidio: simplify if expression (git-fixes).
- net: macvlan: Use built-in RCU list checking (git-fixes).
- net: macvlan: fix memory leaks of macvlan_common_newlink (git-fixes).
- net: mdio: validate parameter addr in mdiobus_get_phy() (git-fixes).
- net: nfc: Fix use-after-free in local_cleanup() (git-fixes).
- net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes).
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes).
- net: tun: Fix memory leaks of napi_get_frags (git-fixes).
- net: tun: Fix use-after-free in tun_detach() (git-fixes).
- net: tun: call napi_schedule_prep() to ensure we own a napi (git-fixes).
- net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes).
- net: usb: sr9700: Handle negative len (git-fixes).
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (git-fixes).
- netrom: Fix use-after-free caused by accept on already connected socket (git-fixes).
- netrom: Fix use-after-free of a listening socket (git-fixes).
- nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes).
- null_blk: fix ida error handling in null_add_dev() (git-fixes).
- octeontx2-af: Fix reference count issue in rvu_sdp_init() (jsc#SLE-24682).
- octeontx2-af: debugsfs: fix pci device refcount leak (git-fixes).
- octeontx2-pf: Add check for devm_kcalloc (git-fixes).
- octeontx2-pf: Fix potential memory leak in otx2_init_tc() (jsc#SLE-24682).
- of/address: Return an error when no valid dma-ranges are found (git-fixes).
- phy: Revert &quot;phy: qualcomm: usb28nm: Add MDM9607 init sequence&quot; (git-fixes).
- phy: phy-can-transceiver: Skip warning if no &quot;max-bitrate&quot; (git-fixes).
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (git-fixes).
- phy: ti: fix Kconfig warning and operator precedence (git-fixes).
- pinctrl: amd: Add dynamic debugging for active GPIOs (git-fixes).
- pinctrl: rockchip: fix mux route data for rk3568 (git-fixes).
- platform/surface: aggregator: Add missing call to ssam_request_sync_free() (git-fixes).
- platform/surface: aggregator: Ignore command messages not intended for us (git-fixes).
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes).
- platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting (git-fixes).
- platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present (git-fixes).
- platform/x86: sony-laptop: Do not turn off 0x153 keyboard backlight during probe (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes).
- powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869).
- powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869).
- powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes).
- powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869).
- powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869).
- powerpc/rtas: avoid device tree lookups in rtas_os_term() (bsc#1065729).
- powerpc/rtas: avoid scheduling in rtas_os_term() (bsc#1065729).
- powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869).
- powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869).
- powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869).
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep (git-fixes).
- r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes).
- r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes).
- regulator: da9211: Use irq handler when ready (git-fixes).
- rpm/mkspec-dtb: add riscv64 dtb-renesas subpackage
- s390/qeth: fix various format strings (git-fixes).
- sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes)
- sched/core: Introduce sched_asym_cpucap_active() (git-fixes)
- sched/cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes)
- sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes)
- sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes)
- sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes)
- sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes)
- scsi: Revert &quot;scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT&quot; (git-fixes).
- scsi: core: Fix a race between scsi_done() and scsi_timeout() (git-fixes).
- scsi: efct: Fix possible memleak in efct_device_init() (git-fixes).
- scsi: elx: libefc: Fix second parameter type in state callbacks (git-fixes).
- scsi: fcoe: Fix possible name leak when device_register() fails (git-fixes).
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (git-fixes).
- scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes).
- scsi: hpsa: Fix error handling in hpsa_add_sas_host() (git-fixes).
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (git-fixes).
- scsi: hpsa: Fix possible memory leak in hpsa_init_one() (git-fixes).
- scsi: ipr: Fix WARNING in ipr_init() (git-fixes).
- scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile (git-fixes).
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (git-fixes).
- scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_report_zones() (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_verify() (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_write_scat() (git-fixes).
- scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (git-fixes).
- scsi: snic: Fix possible UAF in snic_tgt_create() (git-fixes).
- scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes).
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (bsc#1206006).
- scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes).
- scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes).
- scsi: ufs: core: Enable link lost interrupt (git-fixes).
- sctp: fail if no bound addresses can be used for a given scope (bsc#1206677).
- selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes).
- selftests: Provide local define of __cpuid_count() (git-fixes).
- serial: 8250_dma: Fix DMA Rx rearm race (git-fixes).
- serial: atmel: fix incorrect baudrate setup (git-fixes).
- serial: pch_uart: Pass correct sg to dma_unmap_sg() (git-fixes).
- sfc: fix potential memleak in __ef100_hard_start_xmit() (git-fixes).
- soc: imx8m: Fix incorrect check for of_clk_get_by_name() (git-fixes).
- spi: spidev: remove debug messages that access spidev-&gt;spi without locking (git-fixes).
- staging: mt7621-dts: change some node hex addresses to lower case (git-fixes).
- staging: vchiq_arm: fix enum vchiq_status return types (git-fixes).
- swim3: add missing major.h include (git-fixes).
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (git-fixes).
- thermal/core: Remove duplicate information when an error occurs (git-fixes).
- thunderbolt: Do not call PM runtime functions in tb_retimer_scan() (git-fixes).
- thunderbolt: Do not report errors if on-board retimers are found (git-fixes).
- thunderbolt: Use correct function to calculate maximum USB3 link rate (git-fixes).
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation.
- tick/sched: Fix non-kernel-doc comment (git-fixes).
- tomoyo: fix broken dependency on *.conf.default (git-fixes).
- tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes).
- tracing/hist: Fix issue of losting command info in error_log (git-fixes).
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes).
- tracing/hist: Fix wrong return value in parse_action_params() (git-fixes).
- tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes).
- tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes).
- tracing/probes: Handle system names with hyphens (git-fixes).
- tracing: Add '__rel_loc' using trace event macros (git-fixes).
- tracing: Add DYNAMIC flag for dynamic events (git-fixes).
- tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes).
- tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes).
- tracing: Do not use out-of-sync va_list in event printing (git-fixes).
- tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes).
- tracing: Fix a kmemleak false positive in tracing_map (git-fixes).
- tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes).
- tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes).
- tracing: Fix issue of missing one synthetic field (git-fixes).
- tracing: Fix mismatched comment in __string_len (git-fixes).
- tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes).
- tracing: Fix race where histograms can be called before the event (git-fixes).
- tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes).
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes).
- tracing: Fix warning on variable 'struct trace_array' (git-fixes).
- tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes).
- tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes).
- tracing: Have type enum modifications copy the strings (git-fixes).
- tracing: Make tp_printk work on syscall tracepoints (git-fixes).
- tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes).
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes).
- tty: fix possible null-ptr-defer in spk_ttyio_release (git-fixes).
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (git-fixes).
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (git-fixes).
- usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes).
- usb: cdns3: remove fetched trb from cache before dequeuing (git-fixes).
- usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes).
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes).
- usb: fotg210-udc: Fix ages old endianness issues (git-fixes).
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (git-fixes).
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes).
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (git-fixes).
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes).
- usb: gadget: f_hid: fix refcount leak on error path (git-fixes).
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes).
- usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes).
- usb: gadget: g_webcam: Send color matching descriptor per frame (git-fixes).
- usb: gadget: udc: core: Print error code in usb_gadget_probe_driver() (git-fixes).
- usb: gadget: udc: core: Revise comments for USB ep enable/disable (git-fixes).
- usb: gadget: udc: core: Use pr_fmt() to prefix messages (git-fixes).
- usb: gadget: udc: core: remove usage of list iterator past the loop body (git-fixes).
- usb: host: ehci-fsl: Fix module alias (git-fixes).
- usb: typec: altmodes/displayport: Add pin assignment helper (git-fixes).
- usb: typec: altmodes/displayport: Fix pin assignment calculation (git-fixes).
- usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail (git-fixes).
- usb: xhci: Check endpoint is valid before dereferencing it (git-fixes).
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes).
- vfs: make sync_filesystem return errors from -&gt;sync_fs (git-fixes).
- virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes).
- virtio-net: correctly enable callback during start_xmit (git-fixes).
- virtio_pci: modify ENOENT to EINVAL (git-fixes).
- w1: fix WARNING after calling w1_process() (git-fixes).
- w1: fix deadloop in __w1_remove_master_device() (git-fixes).
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes)
- watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497).
- watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497).
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (git-fixes).
- wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes).
- wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_sta_set_decap_offload (git-fixes).
- wifi: mt76: mt7921e: fix race issue between reset and suspend/resume (git-fixes).
- wifi: mt76: sdio: fix the deadlock caused by sdio-&gt;stat_work (git-fixes).
- wifi: mt76: sdio: poll sta stat when device transmits data (git-fixes).
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (git-fixes).
- x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes).
- x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes).
- xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes).
- xfs: fix incorrect error-out in xfs_remove (git-fixes).
- xfs: fix incorrect i_nlink caused by inode racing (git-fixes).
- xfs: fix maxlevels comparisons in the btree staging code (git-fixes).
- xfs: fix memory leak in xfs_errortag_init (git-fixes).
- xfs: get rid of assert from xfs_btree_islastblock (git-fixes).
- xfs: get root inode correctly at bulkstat (git-fixes).
- xfs: initialize the check_owner object fully (git-fixes).
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes).
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes).
- xfs: return errors in xfs_fs_sync_fs (git-fixes).
- xfs: xfstest fails with error missing kernel patch (git-fixes bsc#1207501 ltc#201370).
- xhci-pci: set the dma max_seg_size (git-fixes).
- xhci: Fix null pointer dereference when host dies (git-fixes).
- zram: Delete patch for regression addressed (bsc#1207933).
- zram: do not lookup algorithm in backends table (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.46.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.46.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.46.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.46.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.46.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.46.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.46.1.150400.24.17.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.46.1.150400.24.17.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.46.1.150400.24.17.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.46.1.150400.24.17.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.46.1.150400.24.17.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.46.1.150400.24.17.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.46.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.46.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.46.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.46.1.150400.24.17.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.46.1.150400.24.17.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.46.1.150400.24.17.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-348</id>
    <title>Security update for less</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676038132"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46663" id="CVE-2022-46663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46663" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207815" id="1207815" title="VUL-0: CVE-2022-46663: less: filtering bypass in less -R leading to DoS" type="bugzilla"/>
    </references>
    <description>This update for less fixes the following issues:

  - CVE-2022-46663: Fixed denial-of-service by printing specially crafted escape sequences to the terminal (bsc#1207815).
</description>
    <pkglist>
      <collection>
        <package name="less" epoch="0" version="590" release="150400.3.3.1" arch="src" src="src/less-590-150400.3.3.1.src.rpm">
          <filename>less-590-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.3.1" arch="x86_64" src="x86_64/less-590-150400.3.3.1.x86_64.rpm">
          <filename>less-590-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.3.1" arch="aarch64" src="aarch64/less-590-150400.3.3.1.aarch64.rpm">
          <filename>less-590-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-785</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678991704"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205554" id="1205554" title="Remove unsupported zfs module from grub2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205200" id="1205200" title="L3: grub2-mkconfig issue with M3 machine types" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2951" id="PED-2951" title="ECO: Maint: Adding grub2 zfs module into new sub-package" type="jira"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Remove zfs modules (bsc#1205554)
- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.23.2" arch="src" src="src/grub2-2.06-150400.11.23.2.src.rpm">
          <filename>grub2-2.06-150400.11.23.2.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.23.2" arch="x86_64" src="x86_64/grub2-2.06-150400.11.23.2.x86_64.rpm">
          <filename>grub2-2.06-150400.11.23.2.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.23.2" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.23.2.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.23.2.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.23.2" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.23.2.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.23.2.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.23.2" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.23.2.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.23.2.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.23.2" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.23.2.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.23.2.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.23.2" arch="aarch64" src="aarch64/grub2-2.06-150400.11.23.2.aarch64.rpm">
          <filename>grub2-2.06-150400.11.23.2.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.23.2" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.23.2.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.23.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-349</id>
    <title>Recommended update for hwinfo</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676038153"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204294" id="1204294" title="Virtual Machine USB drives missing &quot;Attached to:&quot; lines which causes YES Certification test to fail" type="bugzilla"/>
    </references>
    <description>This update for hwinfo fixes the following issues:

- Create Xen usb controller device if necessary. (bsc#1204294)
 </description>
    <pkglist>
      <collection>
        <package name="hwinfo" epoch="0" version="21.84" release="150400.3.9.1" arch="src" src="src/hwinfo-21.84-150400.3.9.1.src.rpm">
          <filename>hwinfo-21.84-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.84" release="150400.3.9.1" arch="x86_64" src="x86_64/hwinfo-21.84-150400.3.9.1.x86_64.rpm">
          <filename>hwinfo-21.84-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.84" release="150400.3.9.1" arch="aarch64" src="aarch64/hwinfo-21.84-150400.3.9.1.aarch64.rpm">
          <filename>hwinfo-21.84-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-486</id>
    <title>Security update for c-ares</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677145120"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208067" id="1208067" title="VUL-0: CVE-2022-4904: c-ares: missing string length check causes buffer overflow in config_sortlist()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4904" id="CVE-2022-4904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4904" type="cve"/>
    </references>
    <description>This update for c-ares fixes the following issues:

  Updated to version 1.19.0:

  - CVE-2022-4904: Fixed missing string length check in config_sortlist() (bsc#1208067).

</description>
    <pkglist>
      <collection>
        <package name="c-ares" epoch="0" version="1.19.0" release="150000.3.20.1" arch="src" src="src/c-ares-1.19.0-150000.3.20.1.src.rpm">
          <filename>c-ares-1.19.0-150000.3.20.1.src.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.0" release="150000.3.20.1" arch="x86_64" src="x86_64/libcares2-1.19.0-150000.3.20.1.x86_64.rpm">
          <filename>libcares2-1.19.0-150000.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.0" release="150000.3.20.1" arch="aarch64" src="aarch64/libcares2-1.19.0-150000.3.20.1.aarch64.rpm">
          <filename>libcares2-1.19.0-150000.3.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-713</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678699531"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update provides multiple new 4096 RSA keys for SUSE Linux Enterprise
15, SUSE Manager 4.2/4.3, Storage 7.1, SUSE Registry) that we will switch
to mid of 2023. (jsc#PED-2777)

- gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SUSE Linux Enterprise (RPM and repositories).
- gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserve key for SUSE Linux Enterprise (RPM and repositories).
- suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF packages.
- build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
  New RSA 4096 key for the SUSE registry registry.suse.com, installed as
  suse-container-key-2023.pem and suse-container-key-2023.asc
- suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
  New PTF container signing key for registry.suse.com/ptf/ space.
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.31.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.31.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.31.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.31.1" arch="src" src="src/suse-build-key-12.0-150000.8.31.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.31.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-429</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676479292"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207991" id="1207991" title="VUL-0: EMBARGOED: CVE-2023-23915: curl: HSTS amnesia with --parallel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207992" id="1207992" title="VUL-0: EMBARGOED: CVE-2023-23916: curl: HTTP multi-header compression denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207990" id="1207990" title="VUL-0: EMBARGOED: CVE-2023-23914: curl: HSTS ignored on multiple requests" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23914" id="CVE-2023-23914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916" id="CVE-2023-23916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23915" id="CVE-2023-23915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23915" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990).
- CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991).
- CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.15.1" arch="src" src="src/curl-7.79.1-150400.5.15.1.src.rpm">
          <filename>curl-7.79.1-150400.5.15.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.15.1" arch="x86_64" src="x86_64/curl-7.79.1-150400.5.15.1.x86_64.rpm">
          <filename>curl-7.79.1-150400.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.79.1" release="150400.5.15.1" arch="x86_64" src="x86_64/libcurl4-7.79.1-150400.5.15.1.x86_64.rpm">
          <filename>libcurl4-7.79.1-150400.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.15.1" arch="aarch64" src="aarch64/curl-7.79.1-150400.5.15.1.aarch64.rpm">
          <filename>curl-7.79.1-150400.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.79.1" release="150400.5.15.1" arch="aarch64" src="aarch64/libcurl4-7.79.1-150400.5.15.1.aarch64.rpm">
          <filename>libcurl4-7.79.1-150400.5.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-622</id>
    <title>Recommended update for tcl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678097892"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206623" id="1206623" title="Tcl/Tk test string-2.20.1 fails on big endian architectures" type="bugzilla"/>
    </references>
    <description>This update for tcl fixes the following issues:

- Fix string compare -length on big endian and improve string equal on little endian. (bsc#1206623)
</description>
    <pkglist>
      <collection>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="src" src="src/tcl-8.6.12-150300.14.9.1.src.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.src.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="x86_64" src="x86_64/tcl-8.6.12-150300.14.9.1.x86_64.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.x86_64.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="aarch64" src="aarch64/tcl-8.6.12-150300.14.9.1.aarch64.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-434</id>
    <title>Security update for mozilla-nss</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676534895"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208138" id="1208138" title="VUL-0: CVE-2023-0767: mozilla-nss: Update NSS to 3.79.4" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0767" id="CVE-2023-0767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0767" type="cve"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

  Updated to NSS 3.79.4 (bsc#1208138):

  - CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/libfreebl3-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.26.1" arch="src" src="src/mozilla-nss-3.79.4-150400.3.26.1.src.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.26.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.26.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.4-150400.3.26.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/libfreebl3-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.26.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.4-150400.3.26.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-411</id>
    <title>Security update for haproxy</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676390827"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208132" id="1208132" title="VUL-0: EMBARGOED: CVE-2023-25725: haproxy: serious vulnerability in the HTTP/1 parser" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25725" id="CVE-2023-25725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25725" type="cve"/>
    </references>
    <description>This update for haproxy fixes the following issues:

- CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
- Fixed an issue where sensitive data might leak to the backend.
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.8+git0.d1f8d41e0" release="150400.3.10.1" arch="src" src="src/haproxy-2.4.8+git0.d1f8d41e0-150400.3.10.1.src.rpm">
          <filename>haproxy-2.4.8+git0.d1f8d41e0-150400.3.10.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.8+git0.d1f8d41e0" release="150400.3.10.1" arch="x86_64" src="x86_64/haproxy-2.4.8+git0.d1f8d41e0-150400.3.10.1.x86_64.rpm">
          <filename>haproxy-2.4.8+git0.d1f8d41e0-150400.3.10.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.8+git0.d1f8d41e0" release="150400.3.10.1" arch="aarch64" src="aarch64/haproxy-2.4.8+git0.d1f8d41e0-150400.3.10.1.aarch64.rpm">
          <filename>haproxy-2.4.8+git0.d1f8d41e0-150400.3.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-432</id>
    <title>Recommended update for graphite2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676483331"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207676" id="1207676" title="graphite2: Incorrect license quoted in graphite2 RPM [ref:_00D1igLOd._5005qKZr2d:ref]" type="bugzilla"/>
    </references>
    <description>This update for graphite2 fixes the following issue:

- Correct license string to LGPL-2.1-or-later OR MPL-2.0 OR GPL-2.0-or-later (bsc#1207676)
</description>
    <pkglist>
      <collection>
        <package name="graphite2" epoch="0" version="1.3.11" release="150000.4.3.1" arch="src" src="src/graphite2-1.3.11-150000.4.3.1.src.rpm">
          <filename>graphite2-1.3.11-150000.4.3.1.src.rpm</filename>
        </package>
        <package name="libgraphite2-3" epoch="0" version="1.3.11" release="150000.4.3.1" arch="x86_64" src="x86_64/libgraphite2-3-1.3.11-150000.4.3.1.x86_64.rpm">
          <filename>libgraphite2-3-1.3.11-150000.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgraphite2-3" epoch="0" version="1.3.11" release="150000.4.3.1" arch="aarch64" src="aarch64/libgraphite2-3-1.3.11-150000.4.3.1.aarch64.rpm">
          <filename>libgraphite2-3-1.3.11-150000.4.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-756</id>
    <title>Recommended update for libappindicator</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678961888"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207112" id="1207112" title="Make libappindicator3 provides compatible gtk3 symbol." type="bugzilla"/>
    </references>
    <description>This update for libappindicator fixes the following issues:

- Provide compatibility symbol required by Slack RPM  package (bsc#1207112)
</description>
    <pkglist>
      <collection>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="x86_64" src="x86_64/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libappindicator3" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="src" src="src/libappindicator3-12.10.1+bzr20170215-150200.3.3.1.src.rpm">
          <filename>libappindicator3-12.10.1+bzr20170215-150200.3.3.1.src.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="x86_64" src="x86_64/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="aarch64" src="aarch64/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="aarch64" src="aarch64/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-464</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676913112"/>
    <references/>
    <description>This update for systemd fixes the following issues:

- Merge of v249.15
- Drop workaround related to systemd-timesyncd that addressed a Factory issue.
- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).
- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.
- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.
- Make sure we apply the presets on units shipped by systemd package.
- systemd-testsuite: move the integration tests in a dedicated sub directory.
- Move systemd-cryptenroll into udev package.
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/libsystemd0-249.15-150400.8.22.1.x86_64.rpm">
          <filename>libsystemd0-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/libudev1-249.15-150400.8.22.1.x86_64.rpm">
          <filename>libudev1-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.15" release="150400.8.22.1" arch="src" src="src/systemd-249.15-150400.8.22.1.src.rpm">
          <filename>systemd-249.15-150400.8.22.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/systemd-249.15-150400.8.22.1.x86_64.rpm">
          <filename>systemd-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/systemd-container-249.15-150400.8.22.1.x86_64.rpm">
          <filename>systemd-container-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.15-150400.8.22.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.15-150400.8.22.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.15" release="150400.8.22.1" arch="x86_64" src="x86_64/udev-249.15-150400.8.22.1.x86_64.rpm">
          <filename>udev-249.15-150400.8.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/libsystemd0-249.15-150400.8.22.1.aarch64.rpm">
          <filename>libsystemd0-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/libudev1-249.15-150400.8.22.1.aarch64.rpm">
          <filename>libudev1-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/systemd-249.15-150400.8.22.1.aarch64.rpm">
          <filename>systemd-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/systemd-container-249.15-150400.8.22.1.aarch64.rpm">
          <filename>systemd-container-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.15-150400.8.22.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.15-150400.8.22.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.15" release="150400.8.22.1" arch="aarch64" src="aarch64/udev-249.15-150400.8.22.1.aarch64.rpm">
          <filename>udev-249.15-150400.8.22.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-463</id>
    <title>Security update for tar</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1676907244"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48303" id="CVE-2022-48303" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48303" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207753" id="1207753" title="VUL-0: CVE-2022-48303: tar: GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202436" id="1202436" title="tar hang unpacking test data from gcc" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753). 

Bug fixes:

- Fix hang when unpacking test tarball (bsc#1202436).
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.31.1" arch="src" src="src/tar-1.34-150000.3.31.1.src.rpm">
          <filename>tar-1.34-150000.3.31.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.31.1" arch="x86_64" src="x86_64/tar-1.34-150000.3.31.1.x86_64.rpm">
          <filename>tar-1.34-150000.3.31.1.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.31.1" arch="aarch64" src="aarch64/tar-1.34-150000.3.31.1.aarch64.rpm">
          <filename>tar-1.34-150000.3.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-568</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677578805"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33196" id="CVE-2022-33196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21216" id="CVE-2022-21216" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21216" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38090" id="CVE-2022-38090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38090" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208277" id="1208277" title="VUL-0: CVE-2022-21216: ucode-intel,microcode_ctl: INTEL-SA-00700: out-of-band management privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208275" id="1208275" title="VUL-0: CVE-2022-38090: microcode_ctl,ucode-intel: INTEL-SA-00767: information disclosure in SGX via improper shared resources" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208276" id="1208276" title="VUL-0: CVE-2022-33196: microcode_ctl,ucode-intel: INTEL-SA-00738: SGX privilege escalation via incorrect default permissions" type="bugzilla"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20230214 release.
 
Security issues fixed:

- CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
- CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
- CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)

- New Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13

- Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20230214" release="150200.21.1" arch="src" src="src/ucode-intel-20230214-150200.21.1.src.rpm">
          <filename>ucode-intel-20230214-150200.21.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20230214" release="150200.21.1" arch="x86_64" src="x86_64/ucode-intel-20230214-150200.21.1.x86_64.rpm">
          <filename>ucode-intel-20230214-150200.21.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1586</id>
    <title>Recommended update for nfs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679914989"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200710" id="1200710" title="dracut-initqueue[581]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207022" id="1207022" title="kdump and fadump over nfs is failing with dracut error (CedarLake/mlx5_core/MOFED5.8)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203746" id="1203746" title="60s NFS timeout during cluster failover | __nfs4_reclaim_open_state: Lock reclaim failed!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206781" id="1206781" title="dracut-initqueue[744]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207843" id="1207843" title="nfs-utils.spec: systemd drop-in file conflicts with HA Resource Agent nfsserver" type="bugzilla"/>
    </references>
    <description>This update for nfs-utils fixes the following issues:

- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride with a drop-in with a later sequence number (bsc#1207843)
- Avoid modprobe errors when sysctl is not installed (bsc#1200710 bsc#1207022 bsc#1206781)
- Add &quot;-S scope&quot; option to rpc.nfsd to simplify fail-over cluster configuration (bsc#1203746)
</description>
    <pkglist>
      <collection>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="x86_64" src="x86_64/nfs-client-2.1.1-150100.10.32.1.x86_64.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="x86_64" src="x86_64/nfs-kernel-server-2.1.1-150100.10.32.1.x86_64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-utils" epoch="0" version="2.1.1" release="150100.10.32.1" arch="src" src="src/nfs-utils-2.1.1-150100.10.32.1.src.rpm">
          <filename>nfs-utils-2.1.1-150100.10.32.1.src.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="aarch64" src="aarch64/nfs-client-2.1.1-150100.10.32.1.aarch64.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.aarch64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="aarch64" src="aarch64/nfs-kernel-server-2.1.1-150100.10.32.1.aarch64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-722</id>
    <title>Security update for python-cryptography</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678802247"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23931" id="CVE-2023-23931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23931" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208036" id="1208036" title="VUL-0: CVE-2023-23931: python-cryptography: Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf" type="bugzilla"/>
    </references>
    <description>This update for python-cryptography fixes the following issues:

  - CVE-2023-23931: Fixed memory corruption due to invalidly changed immutable object (bsc#1208036).
</description>
    <pkglist>
      <collection>
        <package name="python-cryptography" epoch="0" version="3.3.2" release="150400.16.6.1" arch="src" src="src/python-cryptography-3.3.2-150400.16.6.1.src.rpm">
          <filename>python-cryptography-3.3.2-150400.16.6.1.src.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.16.6.1" arch="x86_64" src="x86_64/python3-cryptography-3.3.2-150400.16.6.1.x86_64.rpm">
          <filename>python3-cryptography-3.3.2-150400.16.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.16.6.1" arch="aarch64" src="aarch64/python3-cryptography-3.3.2-150400.16.6.1.aarch64.rpm">
          <filename>python3-cryptography-3.3.2-150400.16.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1670</id>
    <title>Recommended update for cpupower</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680090485"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202890" id="1202890" title="Attempting to run turbostat on SLES15 SP4 gives &quot;no such file or directory&quot; error" type="bugzilla"/>
    </references>
    <description>This update for cpupower fixes the following issues:

- Replace error with a warning if perf is unavailable (bsc#1202890)
</description>
    <pkglist>
      <collection>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="src" src="src/cpupower-5.14-150400.3.3.1.src.rpm">
          <filename>cpupower-5.14-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="x86_64" src="x86_64/cpupower-5.14-150400.3.3.1.x86_64.rpm">
          <filename>cpupower-5.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="x86_64" src="x86_64/libcpupower0-5.14-150400.3.3.1.x86_64.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="aarch64" src="aarch64/cpupower-5.14-150400.3.3.1.aarch64.rpm">
          <filename>cpupower-5.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="aarch64" src="aarch64/libcpupower0-5.14-150400.3.3.1.aarch64.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-714</id>
    <title>Recommended update for rpm</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678701268"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207294" id="1207294" title="rpm is not able to generate python(abi) dependencies/provides for python 3.10" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- Fix missing python(abi) for 3.XX versions (bsc#1207294)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/python-rpm-4.14.3-150300.55.1.src.rpm">
          <filename>python-rpm-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150300.55.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/rpm-4.14.3-150300.55.1.src.rpm">
          <filename>rpm-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/rpm-4.14.3-150300.55.1.x86_64.rpm">
          <filename>rpm-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/rpm-ndb-4.14.3-150300.55.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150300.55.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150300.55.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/rpm-4.14.3-150300.55.1.aarch64.rpm">
          <filename>rpm-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150300.55.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-692</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678374370"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205792" id="1205792" title="launch-xenstore error messages show in SLES15 SP4 xen kernel." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208286" id="1208286" title="VUL-0: CVE-2022-27672: xen: Cross-Thread Return Address Predictions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27672" id="CVE-2022-27672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27672" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

  - CVE-2022-27672: Fixed speculative execution vulnerability due to RAS being dynamically partitioned between non-idle threads (bsc#1208286).

  Bugfixes:
  
  - Fixed launch-xenstore error (bsc#1205792) 
  - Fixed issues in VMX (bsc#1027519).

</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.3_04" release="150400.4.22.1" arch="src" src="src/xen-4.16.3_04-150400.4.22.1.src.rpm">
          <filename>xen-4.16.3_04-150400.4.22.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.3_04" release="150400.4.22.1" arch="x86_64" src="x86_64/xen-libs-4.16.3_04-150400.4.22.1.x86_64.rpm">
          <filename>xen-libs-4.16.3_04-150400.4.22.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1668</id>
    <title>Recommended update for firewalld</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680089230"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206928" id="1206928" title="firewall-offline-cmd fails with ERROR: Calling pre func" type="bugzilla"/>
    </references>
    <description>This update for firewalld fixes the following issues:

- Fix `firewall-offline-cmd` command failing with error (bsc#1206928)
</description>
    <pkglist>
      <collection>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.9.1" arch="noarch" src="noarch/firewalld-0.9.3-150400.8.9.1.noarch.rpm">
          <filename>firewalld-0.9.3-150400.8.9.1.noarch.rpm</filename>
        </package>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.9.1" arch="src" src="src/firewalld-0.9.3-150400.8.9.1.src.rpm">
          <filename>firewalld-0.9.3-150400.8.9.1.src.rpm</filename>
        </package>
        <package name="python3-firewall" epoch="0" version="0.9.3" release="150400.8.9.1" arch="noarch" src="noarch/python3-firewall-0.9.3-150400.8.9.1.noarch.rpm">
          <filename>python3-firewall-0.9.3-150400.8.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-795</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679040820"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36109" id="CVE-2022-36109" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36109" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206065" id="1206065" title="[trackerbug] Docker 20.10.21-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205375" id="1205375" title="VUL-0: CVE-2022-36109: docker: supplementary group permissions bypass" type="bugzilla"/>
    </references>
    <description>
This update for docker fixes the following issues:

Docker was updated to 20.10.23-ce.

See upstream changelog at https://docs.docker.com/engine/release-notes/#201023

Docker was updated to 20.10.21-ce (bsc#1206065)

See upstream changelog at https://docs.docker.com/engine/release-notes/#201021 

Security issues fixed:

- CVE-2022-36109: Fixed supplementary group permissions bypass (bsc#1205375)

- Fix wrong After: in docker.service, fixes bsc#1188447
- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.
- Allow to install container-selinux instead of apparmor-parser.
- Change to using systemd-sysusers
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="src" src="src/docker-20.10.23_ce-150000.175.1.src.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="x86_64" src="x86_64/docker-20.10.23_ce-150000.175.1.x86_64.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="aarch64" src="aarch64/docker-20.10.23_ce-150000.175.1.aarch64.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1581</id>
    <title>Security update for ceph</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679905893"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202292" id="1202292" title="[staging][ftbfs] ceph fails to build against fmt 9.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187748" id="1187748" title="When an RBD is mapped, it is attempted to be deployed as an OSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201604" id="1201604" title="cephfs-shell not installing correctly with updated setuptools" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200978" id="1200978" title="Passive managers incorrectly re-directs alertmanager using the IP address instead of FQDN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188911" id="1188911" title="OSD marked down causes wrong backfill_toofull" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204430" id="1204430" title="VUL-0: CVE-2022-3650: ceph: ceph-base: ceph-crash.service Python script allows privilege escalation from ceph to root" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200317" id="1200317" title="After OSD replacement completed cephadm failed and cluster ended up with 12 OSDs down and client access failures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200262" id="1200262" title="SES7: &quot;ceph orch apply -i drive_groups-1.yml --dry-run&quot; fails when using &quot;block_db_size:&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202077" id="1202077" title="SES7.1: Need to configure prometheus: custom_scrape_configs: within containers." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206158" id="1206158" title="L3-Question: &quot;insecure global_id reclaim&quot; warning for iSCSI gateway — ref:_00D1igLOd._5005qGKZ5W:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201837" id="1201837" title="VUL-0: CVE-2022-0670: ceph: user/tenant can access (read/write) any share" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192838" id="1192838" title="cephadm: iscsi missing mgr permissions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201976" id="1201976" title="L3-Question: Ceph dashboard legend does not show names" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196046" id="1196046" title="SES7: alertmanager webhook_configs has wrong (short name) URLs in /etc/alertmanager/alertmanager.yml resulting in endless SSL certificate warnings in syslog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205436" id="1205436" title="SES 7.1: dashboard tries to access rgw via IP instead of rgw_api_host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199183" id="1199183" title="OSD OOM killed when pgs where scaled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201797" id="1201797" title="unable create/delete subvolume in cephfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200501" id="1200501" title="Grafana Pie Chart panel stopped working" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192840" id="1192840" title="&quot;cephadm shell&quot; barfs out a Python traceback (&quot;TypeError: _daemon_add_misc() got an unexpected keyword argument&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205025" id="1205025" title="VUL-0: CVE-2022-3854: ceph: possible DoS issue in ceph URL processing on RGW backends" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203375" id="1203375" title="Tiny virtual floppy device  causes OSD service placement to fail — ref:_00D1igLOd._5005qBACg6:ref" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3854" id="CVE-2022-3854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3650" id="CVE-2022-3650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0670" id="CVE-2022-0670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0670" type="cve"/>
    </references>
    <description>This update for ceph fixes the following issues:

Security issues fixed:

- CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837).
- CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#1204430).
- CVE-2022-3854: Fixed possible DoS issue in ceph URL processing on RGW backends (bsc#1205025).

Bug fixes:

- osd, tools, kv: non-aggressive, on-line trimming of accumulated dups (bsc#1199183).
- ceph-volume: fix fast device alloc size on mulitple device  (bsc#1200262).
- cephadm: update monitoring container images (bsc#1200501).
- mgr/dashboard: prevent alert redirect (bsc#1200978).
- mgr/volumes: Add subvolumegroup resize cmd (bsc#1201797).
- monitoring/ceph-mixin: add RGW host to label info (bsc#1201976).
- mgr/dashboard: enable addition of custom Prometheus alerts (bsc#1202077).
- python-common: Add 'KB' to supported suffixes in SizeMatcher (bsc#1203375).
- mgr/dashboard: fix rgw connect when using ssl (bsc#1205436).
- ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS (bsc#1202292).
- cephfs-shell: move source to separate subdirectory (bsc#1201604).

Fix in previous release:

- mgr/cephadm: try to get FQDN for configuration files (bsc#1196046).
- When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748).
- OSD marked down causes wrong backfill_toofull (bsc#1188911).
- cephadm: Fix iscsi client caps (allow mgr &lt;service status&gt; calls) (bsc#1192838).
- mgr/cephadm: fix and improve osd draining (bsc#1200317).
- add iscsi and nfs to upgrade process (bsc#1206158).
- mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments (bsc#1192840).
</description>
    <pkglist>
      <collection>
        <package name="ceph" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="src" src="src/ceph-16.2.11.58+g38d6afd3b78-150400.3.6.1.src.rpm">
          <filename>ceph-16.2.11.58+g38d6afd3b78-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="x86_64" src="x86_64/librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm">
          <filename>librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="x86_64" src="x86_64/librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm">
          <filename>librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="aarch64" src="aarch64/librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm">
          <filename>librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="aarch64" src="aarch64/librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm">
          <filename>librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-563</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677577925"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207994" id="1207994" title="FIPS: OpenSSL: Make jitterentropy calls thread-safe" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- FIPS: Serialize jitterentropy calls to avoid thread safety issues [bsc#1207994]
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.25.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.25.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.25.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.25.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.25.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.25.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.25.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.25.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.25.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.25.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.25.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.25.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.25.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.25.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.25.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.25.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.25.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.25.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-626</id>
    <title>Recommended update for libnvme</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678098270"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207159" id="1207159" title="nvme-stas not compatible with latest python3-libnvme MU" type="bugzilla"/>
    </references>
    <description>This update for libnvme fixes the following issues:

- Fix import error in python-libnvme (bsc#1207159)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0" release="150400.3.15.1" arch="src" src="src/libnvme-1.0-150400.3.15.1.src.rpm">
          <filename>libnvme-1.0-150400.3.15.1.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.15.1" arch="x86_64" src="x86_64/libnvme1-1.0-150400.3.15.1.x86_64.rpm">
          <filename>libnvme1-1.0-150400.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.15.1" arch="aarch64" src="aarch64/libnvme1-1.0-150400.3.15.1.aarch64.rpm">
          <filename>libnvme1-1.0-150400.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-875</id>
    <title>Recommended update for sg3_utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679509083"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207706" id="1207706" title="sg3_utils: Upstream fixes and enhancements for rescan-scsi-bus.sh" type="bugzilla"/>
    </references>
    <description>This update for sg3_utils fixes the following issues:

- Speed large multipath scans (bsc#1207706)
</description>
    <pkglist>
      <collection>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="x86_64" src="x86_64/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="src" src="src/sg3_utils-1.47+13.75d23ac-150400.3.6.1.src.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="x86_64" src="x86_64/sg3_utils-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="aarch64" src="aarch64/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="aarch64" src="aarch64/sg3_utils-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1636</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680002777"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207853" id="1207853" title="D-Installer cannot build in s390x because of missing fbcon module" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Update to version 15.4.16:
  * modprobe.conf: s390x: remove softdep on fbcon (bsc#1207853)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="src" src="src/suse-module-tools-15.4.16-150400.3.8.1.src.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="x86_64" src="x86_64/suse-module-tools-15.4.16-150400.3.8.1.x86_64.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="aarch64" src="aarch64/suse-module-tools-15.4.16-150400.3.8.1.aarch64.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-488</id>
    <title>Security update for the Linux-RT Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677146911"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1166486" id="1166486" title="Deactivating/Activating of Octane namespaces leads to unbootable system" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185861" id="1185861" title="VUL-0: CVE-2020-24588: kernel-source: ath10k: drop MPDU which has discard flag set by firmware for SDIO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185863" id="1185863" title="VUL-0: kernel-source: various 802.11 security issues aka &quot;FRAGATTACKS&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186449" id="1186449" title="acpi-cpufreq: Skip initializtion if a cpufreq driver exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191256" id="1191256" title="kernel: FIPS 140-3: SP800-56Arev3 for DH" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192868" id="1192868" title="[EAR - NOT FOR USA Citizens] PTF request to fix CVE-2021-34693, CVE-2020-36386, CVE-2020-24588, CVE-2020-24586, CVE-2020-26139, CVE-2020-24587 about kernel-source in SLES11 SP3 DT LTSS - ATAE ref:_00D1igLOd._5001ilwoM3:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195175" id="1195175" title="L3-Question: VM Fails to Initialize CX4 VF due to Mem Fragmentation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195655" id="1195655" title="SLES15 SP4 - [P8][P9][P10]- Hard lockups are observed while running stress-ng and LPAR hangs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196058" id="1196058" title="System enters emergency mode with device timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199701" id="1199701" title="ath11k: arbitrary packet injection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203332" id="1203332" title="VUL-0: CVE-2022-36280: kernel: out-of-bounds memory access vulnerability found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204063" id="1204063" title="Kernel 5.19.8 appears to be missing lpuart earlycon and console" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204356" id="1204356" title="udev device scanning slow in Xen - processing SEQNUM=* is taking a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204662" id="1204662" title="[15SP5][XEN] Entry into maintenance mode after boot up 15SP5 XEN kernel for AMD Zen3 test machine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205495" id="1205495" title="L3: Server rebooted - dump generated - need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206006" id="1206006" title="[Azure] scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206036" id="1206036" title="btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206056" id="1206056" title="[PATCH] btrfs: fix processing of delayed data refs during backref  walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206057" id="1206057" title="[PATCH] btrfs: fix processing of delayed tree block refs during  backref walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206224" id="1206224" title="Dell notebook drains battery during sleep" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206258" id="1206258" title="VUL-0: CVE-2022-4382: kernel: use-after-free write in put_dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206363" id="1206363" title="VUL-0: CVE-2022-4382: kernel live patch: use-after-free write in put_dev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206459" id="1206459" title="[HPS Bug] SLES15-SP4 installation process is blocked due &quot;workqueue lockup&quot; caused by ipmi_ssif driver on HPE RL300 platforms." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206616" id="1206616" title="QEMU+KVM fails with &quot;failed to set MSR&quot; after kernel update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206640" id="1206640" title="[PATCH] quota: Check next/prev free block number after reading from  quota file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206677" id="1206677" title="VUL-0: kernel-source: sctp_diag: fix type confusion in inet_diag_msg_sctpasoc_fill()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206784" id="1206784" title="VUL-0: kernel-source: HID: drop assumptions on non-empty lists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206876" id="1206876" title="[PATCH] ext4: update s_overhead_clusters in the superblock during an  on-line resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206877" id="1206877" title="[PATCH] ext4: fix extent status tree race in writeback error recovery  path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206878" id="1206878" title="[PATCH] ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206880" id="1206880" title="[PATCH] ext4: avoid resizing to a partial cluster size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206881" id="1206881" title="[PATCH] ext4: fix bug in extents parsing when eh_entries == 0 and  eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206882" id="1206882" title="[PATCH] ext4: continue to expand file system when the target size  doesn't reach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206883" id="1206883" title="[PATCH] ext4: avoid crash when inline data creation follows DIO write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206884" id="1206884" title="[PATCH] ext4: fix null-ptr-deref in ext4_write_info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206885" id="1206885" title="[PATCH] ext4: make ext4_lazyinit_thread freezable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206886" id="1206886" title="[PATCH] ext4: fix BUG_ON() when directory entry has invalid rec_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206887" id="1206887" title="[PATCH] ext4: fix warning in 'ext4_da_release_space'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206888" id="1206888" title="[PATCH] ext4: fix use-after-free in ext4_ext_shift_extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206889" id="1206889" title="[PATCH] ext4: silence the warning when evicting inode with  dioread_nolock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206890" id="1206890" title="[PATCH] ext4: fix undefined behavior in bit shift for  ext4_check_flag_values" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206893" id="1206893" title="[PATCH] ext4: fix uninititialized value in 'ext4_evict_inode'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206894" id="1206894" title="[PATCH] ext4: fix kernel BUG in 'ext4_write_inline_data_end()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207010" id="1207010" title="Tunable vm.compaction_proactiveness doesn't work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207034" id="1207034" title="VUL-0: CVE-2023-0179: kernel: integer overflow vulnerability within the Netfilter (nftables) subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207036" id="1207036" title="VUL-0: CVE-2023-23454: kernel: type-confusion in the CBQ network scheduler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207050" id="1207050" title="VUL-0: CVE-2023-0122: kernel-source-rt,kernel-source,kernel-source-azure: NVME driver: null pointer dereference in drivers/nvme/target/auth.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207125" id="1207125" title="VUL-0: CVE-2023-23455: kernel: type-confusion in the ATM network scheduler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207134" id="1207134" title="VUL-0: CVE-2023-0266: kernel-source,kernel-source-rt,kernel-source-azure: Missing locks in SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 compat code causing UAF used in the wild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207149" id="1207149" title="brightness keys not working on Lenovo ideapad 3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207158" id="1207158" title="[FVTCR]SLES15 SP4 [5.14.21-150400.24.18-default] while running btrfs xfstest with 4k/64k gets stuck with open_ctree failed error and makes lpar unresponsive [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207184" id="1207184" title="FIPS 140-3: Kernel: valid FIPS PCT test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207186" id="1207186" title="VUL-0: kernel-source,kernel-source-rt,kernel-source-azure: HID: betop: check shape of output reports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207188" id="1207188" title="VUL-0: CVE-2023-23454: kernel live patch: type-confusion in the CBQ network scheduler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207189" id="1207189" title="VUL-0: CVE-2023-23455: kernel live patch: type-confusion in the ATM network scheduler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207190" id="1207190" title="VUL-0: CVE-2023-0266: kernel live patch: Missing locks in SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 compat code causing UAF used in the wild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207237" id="1207237" title="VUL-0: CVE-2022-47929: kernel-source,kernel-source-rt,kernel-source-azure: NULL pointer dereference bug in the traffic control subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207263" id="1207263" title="btrfs: backport several fsync related changes to SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207269" id="1207269" title="Kernel fails to build when CONFIG_PM_SLEEP is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207328" id="1207328" title="kernel: backport oops_limit hardening to prevent NULL pointer dereference exploitation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207497" id="1207497" title="&quot;modprobe diag288_wdt&quot; fails with &quot;could not insert 'diag288_wdt': Invalid argument&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207500" id="1207500" title="SLES15 SP5 [5.14.21-150500.35-default] btrfs/272 xfstest fails with error missing kernel patch [P10]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207501" id="1207501" title="SLES15 SP5 [5.14.21-150500.35-default] xfs/557 xfstest fails with error missing kernel patch [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207506" id="1207506" title="SLES15 SP5 [5.14.21-150500.35-default] btrfs/280 xfstest fails with error missing kernel patch [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207507" id="1207507" title="SLES15 SP5 [5.14.21-150500.35-default] btrfs/279 xfstest fails with error missing kernel patch [P10] [rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207588" id="1207588" title="[PATCH] ext4: drop ineligible txn start stop APIs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207589" id="1207589" title="[PATCH] ext4: simplify updating of fast commit stats" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207590" id="1207590" title="[PATCH] ext4: fast commit may not fallback for ineligible commit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207591" id="1207591" title="[PATCH] ext4: fast commit may miss file actions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207592" id="1207592" title="[PATCH] ext4: correct cluster len and clusters changed accounting in  ext4_mb_mark_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207593" id="1207593" title="[PATCH] ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207594" id="1207594" title="[PATCH] ext4: fix bug_on in start_this_handle during umount  filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207602" id="1207602" title="[PATCH] ext4: limit the number of retries after discarding  preallocations blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207603" id="1207603" title="[PATCH] ext4: don't run ext4lazyinit for read-only filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207605" id="1207605" title="[PATCH] ext4: don't increase iversion counter for ea_inodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207606" id="1207606" title="[PATCH] ext4: ext4_read_bh_lock() should submit IO if the buffer  isn't uptodate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207607" id="1207607" title="[PATCH] ext4: place buffer head allocation before handle start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207608" id="1207608" title="[PATCH] ext4: fix dir corruption when ext4_dx_add_entry() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207609" id="1207609" title="[PATCH] ext4: fix miss release buffer head in ext4_fc_write_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207610" id="1207610" title="[PATCH] ext4: goto right label 'failed_mount3a'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207611" id="1207611" title="[PATCH] ext4: fix potential memory leak in  ext4_fc_record_modified_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207612" id="1207612" title="[PATCH] ext4: fix potential memory leak in ext4_fc_record_regions()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207613" id="1207613" title="[PATCH] ext4: update 'state-&gt;fc_regions_size' after successful memory  allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207614" id="1207614" title="[PATCH] ext4: introduce EXT4_FC_TAG_BASE_LEN helper" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207615" id="1207615" title="[PATCH] ext4: factor out ext4_fc_get_tl()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207616" id="1207616" title="[PATCH] ext4: fix potential out of bound read in  ext4_fc_replay_scan()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207617" id="1207617" title="[PATCH] ext4: add inode table check in __ext4_get_inode_loc to aovid  possible infinite loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207618" id="1207618" title="[PATCH] ext4: add helper to check quota inums" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207619" id="1207619" title="[PATCH] ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207620" id="1207620" title="[PATCH] ext4: fix bug_on in __es_tree_search caused by bad boot  loader inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207621" id="1207621" title="[PATCH] ext4: don't allow journal inode to have encrypt flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207622" id="1207622" title="[PATCH] ext4: fix use-after-free in ext4_orphan_cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207623" id="1207623" title="[PATCH] ext4: disable fast-commit of encrypted dir operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207624" id="1207624" title="[PATCH] ext4: don't set up encryption key during jbd2 transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207625" id="1207625" title="[PATCH] ext4: fix leaking uninitialized memory in fast-commit journal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207626" id="1207626" title="[PATCH] ext4: add missing validation of fast-commit record lengths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207627" id="1207627" title="[PATCH] ext4: fix unaligned memory access in ext4_fc_reserve_space()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207628" id="1207628" title="[PATCH] ext4: fix off-by-one errors in fast-commit block filling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207629" id="1207629" title="[PATCH] ext4: init quota for 'old.inode' in 'ext4_rename'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207630" id="1207630" title="[PATCH] ext4: fix error code return to user-space in  ext4_get_branch()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207631" id="1207631" title="[PATCH] ext4: fix delayed allocation bug in ext4_clu_mapped for  bigalloc + inline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207632" id="1207632" title="[PATCH] fs: ext4: initialize fsdata in pagecache_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207633" id="1207633" title="[PATCH] ext4: initialize quota before expanding inode in setproject  ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207634" id="1207634" title="[PATCH] ext4: avoid unaccounted block allocation when expanding inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207635" id="1207635" title="[PATCH] ext4: allocate extended attribute value in vmalloc area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207636" id="1207636" title="[PATCH] ext4: fix inode leak in ext4_xattr_inode_create() on an error  path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207637" id="1207637" title="[PATCH] ext4: fix reserved cluster accounting in __es_remove_extent()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207638" id="1207638" title="[PATCH] writeback: avoid use-after-free after removing device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207639" id="1207639" title="[PATCH] quota: Prevent memory allocation recursion while holding  dq_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207640" id="1207640" title="[PATCH] ocfs2: fix crash when mount with quota enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207641" id="1207641" title="[PATCH] jbd2: fix a potential race while discarding reserved buffers  after an abort" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207642" id="1207642" title="[PATCH] vfs: Check the truncate maximum size in inode_newsize_ok()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207643" id="1207643" title="[PATCH] jbd2: wake up journal waiters in FIFO order, not LIFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207644" id="1207644" title="[PATCH] jbd2: fix potential buffer head reference count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207645" id="1207645" title="[PATCH] jbd2: fix potential use-after-free in jbd2_fc_wait_bufs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207646" id="1207646" title="[PATCH] jbd2: add miss release buffer head in fc_do_one_pass()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207647" id="1207647" title="[PATCH] mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207648" id="1207648" title="[PATCH] ext4,f2fs: fix readahead of verity data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207649" id="1207649" title="[PATCH] ocfs2: fix BUG when iput after ocfs2_mknod fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207650" id="1207650" title="[PATCH] ocfs2: clear dinode links count in case of error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207651" id="1207651" title="[PATCH] ocfs2: fix memory leak in ocfs2_stack_glue_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207652" id="1207652" title="[PATCH] ocfs2: fix memory leak in ocfs2_mount_volume()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207653" id="1207653" title="[PATCH] ext4: fix deadlock due to mbcache entry corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207734" id="1207734" title="AMDGPU related freeze when returning from monitor powersave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207768" id="1207768" title="[PATCH] ocfs2: quota_local: fix possible uninitialized-variable  access in ocfs2_local_read_info()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207769" id="1207769" title="VUL-0: kernel: NULL ptr in show_smaps_rollup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207770" id="1207770" title="[PATCH] ocfs2: ocfs2_mount_volume does cleanup job before return  error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207771" id="1207771" title="[PATCH] ocfs2: rewrite error handling of ocfs2_fill_super" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207773" id="1207773" title="VUL-0: CVE-2023-0045: kernel: missing Flush IBP in ib_prctl_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207795" id="1207795" title="VUL-0: CVE-2023-0590: kernel: use-after-free due to race condition in qdisc_graft()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207842" id="1207842" title="PVT:1030:XM:ITC:SUSE LPAR lost connection after doing PEC Injections on 4 port ethernet adapter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207875" id="1207875" title="[Azure][MANA][IRQ] Fix IRQ Name - Add PCI And Queue Number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207878" id="1207878" title="[ENA]  Back port DMA buffer fix in distros" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207933" id="1207933" title="SLE-15SP4 KOTD: Cannot set lz4 compression on zram device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208030" id="1208030" title="CVE-L3: [EAR - NOT FOR USA Citizens] PTF request to fix kernel for CVE-2023-23454, CVE-2022-3564, CVE-2022-4378, CVE-2022-4095, CVE-2022-43945 on sle11sp1 x86_64 - ATAE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208044" id="1208044" title="CVE-L3: [EAR - NOT FOR USA Citizens] PTF request to fix kernel for CVE-2022-3564,CVE-2023-23454,CVE-2022-3635,CVE-2022-3424,CVE-2022-42703,CVE-2022-3565,CVE-2022-3586,CVE-2022-2964 on sle12sp2 x86_64 - ATAE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208085" id="1208085" title="CVE-L3: [EAR - NOT FOR USA Citizens] PTF request to fix kernel for CVE-2023-23454, CVE-2022-3564, CVE-2022-4378, CVE-2022-4095, CVE-2022-43945 on sle11sp3 x86_64 - ATAE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208153" id="1208153" title="[MSFT][MANA][NET][Patch][SLES15] Fix accessing freed irq affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208183" id="1208183" title="fstests xfs/179 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208428" id="1208428" title="ceph: flush cap releases when the session is flushed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208429" id="1208429" title="fscache_cookie_enabled: check cookie is valid before accessing it" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" id="CVE-2022-36280" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" id="CVE-2023-0045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0590" id="CVE-2023-0590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0122" id="CVE-2023-0122" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0122" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23455" id="CVE-2023-23455" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23455" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23454" id="CVE-2023-23454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24588" id="CVE-2020-24588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0179" id="CVE-2023-0179" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0179" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4382" id="CVE-2022-4382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0266" id="CVE-2023-0266" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0266" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47929" id="CVE-2022-47929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47929" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3210" id="PED-3210" title="https://jira.suse.com/browse/PED-3210" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-21132" id="SLE-21132" title="https://jira.suse.com/browse/SLE-21132" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-36280: Fixed an out-of-bounds memory access vulnerability that was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c (bnc#1203332).
- CVE-2023-0045: Fixed flush IBP in ib_prctl_set() (bsc#1207773).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bnc#1207050).
- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036).
- CVE-2020-24588: Fixed injection of arbitrary network packets against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n) (bsc#1199701).
- CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034).
- CVE-2022-4382: Fixed a use-after-free flaw that was caused by a race condition among the superblock operations inside the gadgetfs code (bsc#1206258).
- CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 was missing locks that could have been used in a use-after-free that could have resulted in a priviledge escalation to gain ring0 access from the system user (bsc#1207134).
- CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bnc#1207237).


The following non-security bugs were fixed:

- ACPI: EC: Fix EC address space handler unregistration (bsc#1207149).
- ACPI: EC: Fix ECDT probe ordering issues (bsc#1207149).
- ACPI: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224).
- ACPI: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224).
- ACPI: PRM: Check whether EFI runtime is available (git-fixes).
- ACPI: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224).
- ACPI: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224).
- ACPI: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224).
- ACPI: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224).
- ACPI: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224).
- ACPI: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224).
- ACPI: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224).
- ACPI: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224).
- ACPI: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224).
- ACPI: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224).
- ACPI: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224).
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149).
- ACPICA: include/acpi/acpixf.h: Fix indentation (bsc#1207149).
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes).
- ALSA: hda/realtek: Add Acer Predator PH315-54 (git-fixes).
- ALSA: hda/realtek: Add Positivo N14KP6-TG (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes).
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes).
- ALSA: pci: lx6464es: fix a debug loop (git-fixes).
- ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 (git-fixes).
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (git-fixes).
- ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (git-fixes).
- ARM: dts: imx7d-pico: Use 'clock-frequency' (git-fixes).
- ARM: dts: imx: Fix pca9547 i2c-mux node name (git-fixes).
- ARM: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes).
- ARM: imx: add missing of_node_put() (git-fixes).
- ASoC: Intel: boards: fix spelling in comments (git-fixes).
- ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes).
- ASoC: Intel: bytcht_es8316: move comment to the right place (git-fixes).
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes).
- ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes).
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes).
- ASoC: fsl_micfil: Correct the number of steps on SX controls (git-fixes).
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes).
- ASoC: topology: Return -ENOMEM on memory allocation failure (git-fixes).
- Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (git-fixes).
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev (git-fixes).
- Fix page corruption caused by racy check in __free_pages (bsc#1208149).
- HID: betop: check shape of output reports (git-fixes).
- HID: betop: check shape of output reports (git-fixes, bsc#1207186).
- HID: check empty report_list in bigben_probe() (git-fixes).
- HID: check empty report_list in hid_validate_values() (git-fixes).
- HID: check empty report_list in hid_validate_values() (git-fixes, bsc#1206784).
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (git-fixes).
- HID: playstation: sanity check DualSense calibration data (git-fixes).
- HID: revert CHERRY_MOUSE_000C quirk (git-fixes).
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes)
- IB/hfi1: Fix expected receive setup error exit issues (git-fixes)
- IB/hfi1: Immediately remove invalid memory from hardware (git-fixes)
- IB/hfi1: Reject a zero-length user expected buffer (git-fixes)
- IB/hfi1: Remove user expected buffer invalidate race (git-fixes)
- IB/hfi1: Reserve user expected TIDs (git-fixes)
- IB/hfi1: Restore allocated resources on failed copyout (git-fixes)
- IB/mad: Do not call to function that might sleep while in atomic context (git-fixes).
- KVM: x86: Check for existing Hyper-V vCPU in kvm_hv_vcpu_init() (bsc#1206616).
- Move upstreamed net patch into sorted section
- PCI/PM: Define pci_restore_standard_config() only for CONFIG_PM_SLEEP (bsc#1207269).
- PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() (git-fixes).
- RDMA/core: Fix ib block iterator counter overflow (bsc#1207878).
- RDMA/core: Fix ib block iterator counter overflow (git-fixes)
- RDMA/irdma: Fix potential NULL-ptr-dereference (git-fixes)
- RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes)
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes)
- RDMA/rxe: Prevent faulty rkey generation (git-fixes)
- RDMA/srp: Move large values to a new enum for gcc13 (git-fixes)
- RDMA/usnic: use iommu_map_atomic() under spin_lock() (git-fixes)
- Remove duplicate Git-commit tag in patch file
- Revert &quot;ARM: dts: armada-38x: Fix compatible string for gpios&quot; (git-fixes).
- Revert &quot;ARM: dts: armada-39x: Fix compatible string for gpios&quot; (git-fixes).
- Revert &quot;Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode&quot; (git-fixes).
- Revert &quot;Revert &quot;block, bfq: honor already-setup queue merges&quot;&quot; (git-fixes).
- Revert &quot;arm64: dts: meson-sm1-odroid-hc4: disable unused USB PHY0&quot; (git-fixes).
- Revert &quot;wifi: mac80211: fix memory leak in ieee80211_if_add()&quot; (git-fixes).
- SUNRPC: Do not dereference xprt-&gt;snd_task if it's a cookie (git-fixes).
- SUNRPC: Use BIT() macro in rpc_show_xprt_state() (git-fixes).
- USB: gadget: Fix use-after-free during usb config switch (git-fixes).
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (git-fixes).
- USB: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes).
- USB: serial: option: add Quectel EC200U modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (CS) modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (GR) modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (RS) modem (git-fixes).
- USB: serial: option: add Quectel EM05CN (SG) modem (git-fixes).
- USB: serial: option: add Quectel EM05CN modem (git-fixes).
- arm64: Fix Freescale LPUART dependency (boo#1204063). 
- arm64: atomics: format whitespace consistently (git-fixes).
- arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (git-fixes).
- arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (git-fixes).
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes).
- arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes).
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes).
- arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes).
- arm64: dts: qcom: msm8992: Do not use sfpb mutex (git-fixes).
- arm64: efi: Execute runtime services from a dedicated stack (git-fixes).
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes).
- ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes).
- bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes).
- bfq: fix use-after-free in bfq_dispatch_request (git-fixes).
- bfq: fix waker_bfqq inconsistency crash (git-fixes).
- blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes).
- blk-mq: fix possible memleak when register 'hctx' failed (git-fixes).
- blk-throttle: prevent overflow while calculating wait time (git-fixes).
- blk-wbt: fix that 'rwb-&gt;wc' is always set to 1 in wbt_init() (git-fixes).
- blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes).
- block, bfq: do not move oom_bfqq (git-fixes).
- block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes).
- block, bfq: fix possible uaf for 'bfqq-&gt;bic' (git-fixes).
- block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes).
- block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes).
- block, bfq: protect 'bfqd-&gt;queued' by 'bfqd-&gt;lock' (git-fixes).
- block/bfq-iosched.c: use &quot;false&quot; rather than &quot;BLK_RW_ASYNC&quot; (git-fixes).
- block/bfq_wf2q: correct weight to ioprio (git-fixes).
- block/bio: remove duplicate append pages code (git-fixes).
- block: check minor range in device_add_disk() (git-fixes).
- block: clear -&gt;slave_dir when dropping the main slave_dir reference (git-fixes).
- block: do not allow splitting of a REQ_NOWAIT bio (git-fixes).
- block: ensure iov_iter advances for added pages (git-fixes).
- block: fix and cleanup bio_check_ro (git-fixes).
- block: fix infinite loop for invalid zone append (git-fixes).
- block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes).
- block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes).
- block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes).
- block: use bdev_get_queue() in bio.c (git-fixes).
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (git-fixes).
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (git-fixes).
- bnxt_en: Remove debugfs when pci_register_driver failed (git-fixes).
- bnxt_en: add dynamic debug support for HWRM messages (git-fixes).
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (git-fixes).
- bnxt_en: fix the handling of PCIE-AER (git-fixes).
- bnxt_en: refactor bnxt_cancel_reservations() (git-fixes).
- bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes).
- bpf: Skip task with pid=1 in send_signal_common() (git-fixes).
- btrfs: add helper to delete a dir entry from a log tree (bsc#1207263).
- btrfs: avoid inode logging during rename and link when possible (bsc#1207263).
- btrfs: avoid logging all directory changes during renames (bsc#1207263).
- btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5 (bsc#1206036 bsc#1207500 ltc#201363).
- btrfs: do not log unnecessary boundary keys when logging directory (bsc#1207263).
- btrfs: fix assertion failure when logging directory key range item (bsc#1207263).
- btrfs: fix processing of delayed data refs during backref walking (bsc#1206056 bsc#1207507 ltc#201367).
- btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057 bsc#1207506 ltc#201368).
- btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158).
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158).
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes).
- btrfs: join running log transaction when logging new name (bsc#1207263).
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158).
- btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (bsc#1207263).
- btrfs: prepare extents to be logged before locking a log tree path (bsc#1207263).
- btrfs: put initial index value of a directory in a constant (bsc#1207263).
- btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158).
- btrfs: qgroup: remove outdated TODO comments (bsc#1207158).
- btrfs: remove unnecessary NULL check for the new inode during rename exchange (bsc#1207263).
- btrfs: remove useless path release in the fast fsync path (bsc#1207263).
- btrfs: remove write and wait of struct walk_control (bsc#1207263).
- btrfs: stop copying old dir items when logging a directory (bsc#1207263).
- btrfs: stop doing unnecessary log updates during a rename (bsc#1207263).
- btrfs: stop trying to log subdirectories created in past transactions (bsc#1207263).
- btrfs: use single variable to track return value at btrfs_log_inode() (bsc#1207263).
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes).
- can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes).
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes).
- ceph: flush cap releases when the session is flushed (bsc#1208428).
- cifs: Fix uninitialized memory read for smb311 posix symlink create (git-fixes).
- cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629).
- cifs: do not include page data when checking signature (git-fixes).
- cifs: do not query ifaces on smb1 mounts (git-fixes).
- cifs: do not take exclusive lock for updating target hints (bsc#1193629).
- cifs: fix double free on failed kerberos auth (git-fixes).
- cifs: fix file info setting in cifs_open_file() (git-fixes).
- cifs: fix file info setting in cifs_query_path_info() (git-fixes).
- cifs: fix potential memory leaks in session setup (bsc#1193629).
- cifs: fix race in assemble_neg_contexts() (bsc#1193629).
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629).
- cifs: handle cache lookup errors different than -ENOENT (bsc#1193629).
- cifs: ignore ipc reconnect failures during dfs failover (bsc#1193629).
- cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (bsc#1193629).
- cifs: remove duplicate code in __refresh_tcon() (bsc#1193629).
- cifs: remove redundant assignment to the variable match (bsc#1193629).
- cifs: remove unused function (bsc#1193629).
- comedi: adv_pci1760: Fix PWM instruction handling (git-fixes).
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes).
- cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes).
- crypto: fixed DH and ECDH implemention for FIPS PCT (jsc#SLE-21132,bsc#1191256,bsc#1207184).
- dm btree: add a defensive bounds check to insert_at() (git-fixes).
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes).
- dm cache: Fix UAF in destroy() (git-fixes).
- dm cache: set needs_check flag after aborting metadata (git-fixes).
- dm clone: Fix UAF in clone_dtr() (git-fixes).
- dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes).
- dm integrity: clear the journal on suspend (git-fixes).
- dm integrity: flush the journal on suspend (git-fixes).
- dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes).
- dm ioctl: prevent potential spectre v1 gadget (git-fixes).
- dm raid: fix address sanitizer warning in raid_resume (git-fixes).
- dm raid: fix address sanitizer warning in raid_status (git-fixes).
- dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes).
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes).
- dm thin: Fix UAF in run_timer_softirq() (git-fixes).
- dm thin: Use last transaction's pmd-&gt;root when commit failed (git-fixes).
- dm thin: resume even if in FAIL mode (git-fixes).
- dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes).
- dm: fix alloc_dax error handling in alloc_dev (git-fixes).
- dm: requeue IO if mapping table not yet available (git-fixes).
- dmaengine: Fix double increment of client_count in dma_chan_get() (git-fixes).
- dmaengine: idxd: Do not call DMX TX callbacks during workqueue disable (git-fixes).
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled (git-fixes).
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes).
- dmaengine: lgm: Move DT parsing after initialization (git-fixes).
- dmaengine: tegra210-adma: fix global intr clear (git-fixes).
- dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (git-fixes).
- dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (git-fixes).
- docs: Fix the docs build with Sphinx 6.0 (git-fixes).
- driver core: Fix test_async_probe_init saves device in wrong array (git-fixes).
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes).
- drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (git-fixes).
- drivers:md:fix a potential use-after-free bug (git-fixes).
- drm/amd/display: Calculate output_color_space after pixel encoding adjustment (git-fixes).
- drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes).
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (git-fixes).
- drm/amd/display: Fix set scaling doesn's work (git-fixes).
- drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes).
- drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734).
- drm/amd/display: fix issues with driver unload (git-fixes).
- drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes).
- drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes).
- drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes).
- drm/amdgpu: drop experimental flag on aldebaran (git-fixes).
- drm/hyperv: Add error message for fb size greater than allocated (git-fixes).
- drm/i915/adlp: Fix typo for reference clock (git-fixes).
- drm/i915/display: Check source height is &gt; 0 (git-fixes).
- drm/i915/gt: Reset twice (git-fixes).
- drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes).
- drm/i915: Fix VBT DSI DVO port handling (git-fixes).
- drm/i915: Fix potential bit_17 double-free (git-fixes).
- drm/i915: Initialize the obj flags for shmem objects (git-fixes).
- drm/i915: re-disable RC6p on Sandy Bridge (git-fixes).
- drm/panfrost: fix GENERIC_ATOMIC64 dependency (git-fixes).
- drm/vc4: hdmi: make CEC adapter name unique (git-fixes).
- drm/virtio: exbuf-&gt;fence_fd unmodified on interrupted wait (git-fixes).
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes).
- efi: Accept version 2 of memory attributes table (git-fixes).
- efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes).
- efi: rt-wrapper: Add missing include (git-fixes).
- efi: tpm: Avoid READ_ONCE() for accessing the event log (git-fixes).
- exit: Add and use make_task_dead (bsc#1207328).
- exit: Allow oops_limit to be disabled (bsc#1207328).
- exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328).
- exit: Move force_uaccess back into do_exit (bsc#1207328).
- exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328).
- exit: Put an upper limit on how often we can oops (bsc#1207328).
- exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328).
- exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328).
- ext4,f2fs: fix readahead of verity data (bsc#1207648).
- ext4: Fixup pages without buffers (bsc#1205495).
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619).
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- ext4: add helper to check quota inums (bsc#1207618).
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617).
- ext4: add missing validation of fast-commit record lengths (bsc#1207626).
- ext4: allocate extended attribute value in vmalloc area (bsc#1207635).
- ext4: avoid crash when inline data creation follows DIO write (bsc#1206883).
- ext4: avoid resizing to a partial cluster size (bsc#1206880).
- ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634).
- ext4: continue to expand file system when the target size does not reach (bsc#1206882).
- ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592).
- ext4: correct max_inline_xattr_value_size computing (bsc#1206878).
- ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878).
- ext4: disable fast-commit of encrypted dir operations (bsc#1207623).
- ext4: do not allow journal inode to have encrypt flag (bsc#1207621).
- ext4: do not increase iversion counter for ea_inodes (bsc#1207605).
- ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603).
- ext4: do not set up encryption key during jbd2 transaction (bsc#1207624).
- ext4: drop ineligible txn start stop APIs (bsc#1207588).
- ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606).
- ext4: factor out ext4_fc_get_tl() (bsc#1207615).
- ext4: fast commit may miss file actions (bsc#1207591).
- ext4: fast commit may not fallback for ineligible commit (bsc#1207590).
- ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886).
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0 (bsc#1206881).
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620).
- ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594).
- ext4: fix deadlock due to mbcache entry corruption (bsc#1207653).
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631).
- ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608).
- ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630).
- ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593).
- ext4: fix extent status tree race in writeback error recovery path (bsc#1206877).
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636).
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894).
- ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625).
- ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609).
- ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884).
- ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628).
- ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611).
- ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612).
- ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616).
- ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637).
- ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627).
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890).
- ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893).
- ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888).
- ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622).
- ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878).
- ext4: fix warning in 'ext4_da_release_space' (bsc#1206887).
- ext4: goto right label 'failed_mount3a' (bsc#1207610).
- ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629).
- ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633).
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614).
- ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602).
- ext4: make ext4_lazyinit_thread freezable (bsc#1206885).
- ext4: place buffer head allocation before handle start (bsc#1207607).
- ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889).
- ext4: simplify updating of fast commit stats (bsc#1207589).
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation (bsc#1207613).
- ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876).
- extcon: usbc-tusb320: fix kernel-doc warning (git-fixes).
- fbcon: Check font dimension limits (git-fixes).
- fbdev: omapfb: avoid stack overflow warning (git-fixes).
- fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes).
- firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes).
- firmware: arm_scmi: Harden shared memory access in fetch_notification (git-fixes).
- firmware: arm_scmi: Harden shared memory access in fetch_response (git-fixes).
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes).
- fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632).
- fs: remove __sync_filesystem (git-fixes).
- fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429).
- ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes).
- ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes).
- genirq: Provide new interfaces for affinity hints (bsc#1208153).
- git_sort: add usb-linus branch for gregkh/usb
- gsmi: fix null-deref in gsmi_get_variable (git-fixes).
- hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes).
- i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes).
- i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes).
- i2c: mv64xxx: Remove shutdown method from driver (git-fixes).
- i2c: mxs: suppress probe-deferral error message (git-fixes).
- i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes).
- i40e: Disallow ip4 and ip6 l4_4_bytes (git-fixes).
- i40e: Fix error handling in i40e_init_module() (git-fixes).
- i40e: Fix not setting default xps_cpus after reset (git-fixes).
- igb: Allocate MSI-X vector when testing (git-fixes).
- iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes).
- iio: adc: stm32-dfsdm: fill module aliases (git-fixes).
- iio: hid: fix the retval in accel_3d_capture_sample (git-fixes).
- iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes).
- iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes).
- iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes).
- iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes).
- iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes).
- iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes).
- iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes).
- iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes).
- iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes).
- iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes).
- iio:adc:twl6030: Enable measurement of VAC (git-fixes).
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes).
- ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459).
- ipmi:ssif: Add a timer between request retries (bsc#1206459).
- ipmi:ssif: Increase the message retry time (bsc#1206459).
- ipmi:ssif: Remove rtc_us_timer (bsc#1206459).
- ipmi:ssif: resend_msg() cannot fail (bsc#1206459).
- ipmi_ssif: Rename idle state and check (bsc#1206459).
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (git-fixes).
- ixgbevf: Fix resource leak in ixgbevf_init_module() (git-fixes).
- jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590).
- jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646).
- jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641).
- jbd2: fix potential buffer head reference count leak (bsc#1207644).
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645).
- jbd2: use the correct print format (git-fixes).
- jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643).
- kABI workaround for struct acpi_ec (bsc#1207149).
- kABI: Preserve TRACE_EVENT_FL values (git-fixes).
- kabi/severities: add mlx5 internal symbols
- kasan: no need to unset panic_on_warn in end_report() (bsc#1207328).
- l2tp: Do not sleep and disable BH under writer-side sk_callback_lock (git-fixes).
- loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes).
- mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks (bsc#1207647).
- mbcache: Fixup kABI of mb_cache_entry (bsc#1207653).
- md/bitmap: Fix bitmap chunk size overflow issues (git-fixes).
- md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes).
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes).
- md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes).
- md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes).
- md: fix a crash in mempool_free (git-fixes).
- md: protect md_unregister_thread from reentrancy (git-fixes).
- mei: me: add meteor lake point M DID (git-fixes).
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (git-fixes).
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (git-fixes).
- memory: tegra: Remove clients SID override programming (git-fixes).
- misc: fastrpc: Do not remove map on creater_process and device_release (git-fixes).
- misc: fastrpc: Fix use-after-free race condition for maps (git-fixes).
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769).
- mm: compaction: kABI: avoid pglist_data kABI breakage (bsc#1207010).
- mm: compaction: support triggering of proactive compaction by user (bsc#1207010).
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (git-fixes).
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (git-fixes).
- module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662).
- mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes).
- mt76: mt7921: avoid unnecessary spin_lock/spin_unlock in mt7921_mcu_tx_done_event (git-fixes).
- nbd: Fix hung on disconnect request if socket is closed before (git-fixes).
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes).
- nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes).
- nbd: fix io hung while disconnecting device (git-fixes).
- nbd: fix race between nbd_alloc_config() and module removal (git-fixes).
- net/mlx4: Check retval of mlx4_bitmap_init (git-fixes).
- net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175).
- net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842).
- net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes).
- net/x25: Fix to not accept on connected socket (git-fixes).
- net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes).
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (git-fixes).
- net: ena: Fix error handling in ena_init() (git-fixes).
- net: liquidio: release resources when liquidio driver open failed (git-fixes).
- net: liquidio: simplify if expression (git-fixes).
- net: macvlan: Use built-in RCU list checking (git-fixes).
- net: macvlan: fix memory leaks of macvlan_common_newlink (git-fixes).
- net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153).
- net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
- net: mana: Fix accessing freed irq affinity_hint (bsc#1208153).
- net: mdio: validate parameter addr in mdiobus_get_phy() (git-fixes).
- net: nfc: Fix use-after-free in local_cleanup() (git-fixes).
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes).
- net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes).
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes).
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes).
- net: tun: Fix memory leaks of napi_get_frags (git-fixes).
- net: tun: Fix use-after-free in tun_detach() (git-fixes).
- net: tun: call napi_schedule_prep() to ensure we own a napi (git-fixes).
- net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes).
- net: usb: sr9700: Handle negative len (git-fixes).
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (git-fixes).
- netrom: Fix use-after-free caused by accept on already connected socket (git-fixes).
- netrom: Fix use-after-free of a listening socket (git-fixes).
- nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes).
- null_blk: fix ida error handling in null_add_dev() (git-fixes).
- nvdimm: disable namespace on error (bsc#1166486).
- objtool: Add a missing comma to avoid string concatenation (bsc#1207328).
- ocfs2: clear dinode links count in case of error (bsc#1207650).
- ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649).
- ocfs2: fix crash when mount with quota enabled (bsc#1207640).
- ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652).
- ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651).
- ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770).
- ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768).
- ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771).
- octeontx2-af: Fix reference count issue in rvu_sdp_init() (jsc#SLE-24682).
- octeontx2-af: debugsfs: fix pci device refcount leak (git-fixes).
- octeontx2-pf: Add check for devm_kcalloc (git-fixes).
- octeontx2-pf: Fix potential memory leak in otx2_init_tc() (jsc#SLE-24682).
- of/address: Return an error when no valid dma-ranges are found (git-fixes).
- panic: Consolidate open-coded panic_on_warn checks (bsc#1207328).
- panic: Introduce warn_limit (bsc#1207328).
- panic: unset panic_on_warn inside panic() (bsc#1207328).
- phy: Revert &quot;phy: qualcomm: usb28nm: Add MDM9607 init sequence&quot; (git-fixes).
- phy: phy-can-transceiver: Skip warning if no &quot;max-bitrate&quot; (git-fixes).
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (git-fixes).
- phy: ti: fix Kconfig warning and operator precedence (git-fixes).
- pinctrl: amd: Add dynamic debugging for active GPIOs (git-fixes).
- pinctrl: aspeed: Fix confusing types in return value (git-fixes).
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes).
- pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes).
- pinctrl: rockchip: fix mux route data for rk3568 (git-fixes).
- pinctrl: single: fix potential NULL dereference (git-fixes).
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes).
- platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes).
- platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes).
- powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869).
- powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869).
- powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes).
- powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869).
- powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869).
- powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869).
- powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869).
- powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869).
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep (git-fixes).
- quota: Check next/prev free block number after reading from quota file (bsc#1206640).
- quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639).
- r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes).
- r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes).
- regulator: da9211: Use irq handler when ready (git-fixes).
- rpm/mkspec-dtb: add riscv64 dtb-renesas subpackage
- s390/qeth: fix various format strings (git-fixes).
- sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes)
- sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes)
- sched/core: Introduce sched_asym_cpucap_active() (git-fixes)
- sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes)
- sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes)
- sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes)
- sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes)
- scsi: Revert &quot;scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT&quot; (git-fixes).
- scsi: core: Fix a race between scsi_done() and scsi_timeout() (git-fixes).
- scsi: efct: Fix possible memleak in efct_device_init() (git-fixes).
- scsi: elx: libefc: Fix second parameter type in state callbacks (git-fixes).
- scsi: fcoe: Fix possible name leak when device_register() fails (git-fixes).
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (git-fixes).
- scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes).
- scsi: hpsa: Fix error handling in hpsa_add_sas_host() (git-fixes).
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (git-fixes).
- scsi: hpsa: Fix possible memory leak in hpsa_init_one() (git-fixes).
- scsi: ipr: Fix WARNING in ipr_init() (git-fixes).
- scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile (git-fixes).
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (git-fixes).
- scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_report_zones() (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_verify() (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_write_scat() (git-fixes).
- scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (git-fixes).
- scsi: snic: Fix possible UAF in snic_tgt_create() (git-fixes).
- scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes).
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (bsc#1206006).
- scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes).
- scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes).
- scsi: ufs: core: Enable link lost interrupt (git-fixes).
- sctp: fail if no bound addresses can be used for a given scope (bsc#1206677).
- selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes).
- selftests: Provide local define of __cpuid_count() (git-fixes).
- selftests: forwarding: lib: quote the sysctl values (git-fixes).
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes).
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes).
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes).
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes).
- serial: 8250_dma: Fix DMA Rx rearm race (git-fixes).
- serial: atmel: fix incorrect baudrate setup (git-fixes).
- serial: pch_uart: Pass correct sg to dma_unmap_sg() (git-fixes).
- sfc: fix potential memleak in __ef100_hard_start_xmit() (git-fixes).
- signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes).
- soc: imx8m: Fix incorrect check for of_clk_get_by_name() (git-fixes).
- spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes).
- spi: spidev: remove debug messages that access spidev-&gt;spi without locking (git-fixes).
- staging: mt7621-dts: change some node hex addresses to lower case (git-fixes).
- staging: vchiq_arm: fix enum vchiq_status return types (git-fixes).
- swim3: add missing major.h include (git-fixes).
- sysctl: add a new register_sysctl_init() interface (bsc#1207328).
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (git-fixes).
- thermal/core: Remove duplicate information when an error occurs (git-fixes).
- thunderbolt: Do not call PM runtime functions in tb_retimer_scan() (git-fixes).
- thunderbolt: Do not report errors if on-board retimers are found (git-fixes).
- thunderbolt: Use correct function to calculate maximum USB3 link rate (git-fixes).
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation.
- tick/sched: Fix non-kernel-doc comment (git-fixes).
- tomoyo: fix broken dependency on *.conf.default (git-fixes).
- tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes).
- trace_events_hist: add check for return value of 'create_hist_field' (git-fixes).
- tracing/hist: Fix issue of losting command info in error_log (git-fixes).
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes).
- tracing/hist: Fix wrong return value in parse_action_params() (git-fixes).
- tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes).
- tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes).
- tracing/probes: Handle system names with hyphens (git-fixes).
- tracing: Add '__rel_loc' using trace event macros (git-fixes).
- tracing: Add DYNAMIC flag for dynamic events (git-fixes).
- tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes).
- tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes).
- tracing: Do not use out-of-sync va_list in event printing (git-fixes).
- tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes).
- tracing: Fix a kmemleak false positive in tracing_map (git-fixes).
- tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes).
- tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes).
- tracing: Fix issue of missing one synthetic field (git-fixes).
- tracing: Fix mismatched comment in __string_len (git-fixes).
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes).
- tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes).
- tracing: Fix race where histograms can be called before the event (git-fixes).
- tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes).
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes).
- tracing: Fix warning on variable 'struct trace_array' (git-fixes).
- tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes).
- tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes).
- tracing: Have type enum modifications copy the strings (git-fixes).
- tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes).
- tracing: Make tp_printk work on syscall tracepoints (git-fixes).
- tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes).
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes).
- tty: fix possible null-ptr-defer in spk_ttyio_release (git-fixes).
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (git-fixes).
- ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328).
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (git-fixes).
- usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes).
- usb: cdns3: remove fetched trb from cache before dequeuing (git-fixes).
- usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes).
- usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes).
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes).
- usb: fotg210-udc: Fix ages old endianness issues (git-fixes).
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (git-fixes).
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes).
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (git-fixes).
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes).
- usb: gadget: f_hid: fix refcount leak on error path (git-fixes).
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes).
- usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes).
- usb: gadget: g_webcam: Send color matching descriptor per frame (git-fixes).
- usb: gadget: udc: core: Print error code in usb_gadget_probe_driver() (git-fixes).
- usb: gadget: udc: core: Revise comments for USB ep enable/disable (git-fixes).
- usb: gadget: udc: core: Use pr_fmt() to prefix messages (git-fixes).
- usb: gadget: udc: core: remove usage of list iterator past the loop body (git-fixes).
- usb: host: ehci-fsl: Fix module alias (git-fixes).
- usb: typec: altmodes/displayport: Add pin assignment helper (git-fixes).
- usb: typec: altmodes/displayport: Fix pin assignment calculation (git-fixes).
- usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes).
- usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail (git-fixes).
- usb: xhci: Check endpoint is valid before dereferencing it (git-fixes).
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes).
- vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642).
- vfs: make sync_filesystem return errors from -&gt;sync_fs (git-fixes).
- virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes).
- virtio-net: correctly enable callback during start_xmit (git-fixes).
- virtio_pci: modify ENOENT to EINVAL (git-fixes).
- w1: fix WARNING after calling w1_process() (git-fixes).
- w1: fix deadloop in __w1_remove_master_device() (git-fixes).
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes)
- watchdog-diag288_wdt-fix-__diag288-inline-assembly.patch
- watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (jsc#PED-3210)
- watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497).
- watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497).
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (git-fixes).
- wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes).
- wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_sta_set_decap_offload (git-fixes).
- wifi: mt76: mt7921e: fix race issue between reset and suspend/resume (git-fixes).
- wifi: mt76: sdio: fix the deadlock caused by sdio-&gt;stat_work (git-fixes).
- wifi: mt76: sdio: poll sta stat when device transmits data (git-fixes).
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (git-fixes).
- writeback: avoid use-after-free after removing device (bsc#1207638).
- x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes).
- x86/asm: Fix an assembler warning with current binutils (git-fixes).
- x86/boot: Avoid using Intel mnemonics in AT&amp;T syntax asm (git-fixes).
- x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes).
- x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes).
- x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes).
- x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes).
- x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes).
- x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes).
- x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes).
- xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes).
- xfs: estimate post-merge refcounts correctly (bsc#1208183).
- xfs: fix incorrect error-out in xfs_remove (git-fixes).
- xfs: fix incorrect i_nlink caused by inode racing (git-fixes).
- xfs: fix maxlevels comparisons in the btree staging code (git-fixes).
- xfs: fix memory leak in xfs_errortag_init (git-fixes).
- xfs: get rid of assert from xfs_btree_islastblock (git-fixes).
- xfs: get root inode correctly at bulkstat (git-fixes).
- xfs: hoist refcount record merge predicates (bsc#1208183).
- xfs: initialize the check_owner object fully (git-fixes).
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes).
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes).
- xfs: return errors in xfs_fs_sync_fs (git-fixes).
- xfs: xfstest fails with error missing kernel patch (git-fixes bsc#1207501 ltc#201370).
- xhci-pci: set the dma max_seg_size (git-fixes).
- xhci: Fix null pointer dereference when host dies (git-fixes).
- zram: Delete patch for regression addressed (bsc#1207933).
- zram: do not lookup algorithm in backends table (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.11.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.11.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.11.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.11.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.11.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1881</id>
    <title>Recommended update for Mesa</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681809199"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208145" id="1208145" title="Intel graphics: Black Screen with Steam's 'Return to Monkey Island'" type="bugzilla"/>
    </references>
    <description>This update for Mesa fixes the following issues:

-Fixes blackscreen in Return To Monkey Island on Intel graphics (bsc#1208145)
</description>
    <pkglist>
      <collection>
        <package name="Mesa" epoch="0" version="21.2.4" release="150400.68.12.1" arch="src" src="src/Mesa-21.2.4-150400.68.12.1.src.rpm">
          <filename>Mesa-21.2.4-150400.68.12.1.src.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="21.2.4" release="150400.68.12.1" arch="x86_64" src="x86_64/libgbm1-21.2.4-150400.68.12.1.x86_64.rpm">
          <filename>libgbm1-21.2.4-150400.68.12.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="21.2.4" release="150400.68.12.1" arch="aarch64" src="aarch64/libgbm1-21.2.4-150400.68.12.1.aarch64.rpm">
          <filename>libgbm1-21.2.4-150400.68.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1665</id>
    <title>Security update for sudo</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680087326"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206483" id="1206483" title="sudo crashes in sssd module on empty RunAs list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206772" id="1206772" title="sudo asks for password for non-existing command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203201" id="1203201" title="L3-Question: sudo block in ppoll syscall while child process already gone" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209361" id="1209361" title="VUL-0: CVE-2023-28487: sudo: does not escape control characters in sudoreplay output." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208595" id="1208595" title="VUL-0: CVE-2023-27320: sudo: double free with per-command chroot sudoers rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209362" id="1209362" title="VUL-0: CVE-2023-28486: sudo: does not escape control characters in log messages." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27320" id="CVE-2023-27320" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27320" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28486" id="CVE-2023-28486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28487" id="CVE-2023-28487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28487" type="cve"/>
    </references>
    <description>This update for sudo fixes the following issue:

Security issues:

- CVE-2023-28486: Fixed sudo does not escape control characters in log messages. (bsc#1209362)
- CVE-2023-28487: Fixed sudo does not escape control characters in sudoreplay output. (bsc#1209361)
- CVE-2023-27320: Fixed a potential security issue with a double free with per-command chroot sudoers rules (bsc#1208595).

Bug fixes:

- Fix a situation where &quot;sudo -U otheruser -l&quot; would dereference a NULL pointer (bsc#1206483)
- If NOPASSWD is specified, don't ask for password if command is not found (bsc#1206772).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.26.1" arch="src" src="src/sudo-1.9.9-150400.4.26.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.26.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.26.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.26.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.26.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.26.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.26.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-557</id>
    <title>Security update for libxslt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677572965"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208574" id="1208574" title="VUL-0: CVE-2021-30560: libxslt: chromium-browser: Use after free in Blink XSLT" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30560" id="CVE-2021-30560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30560" type="cve"/>
    </references>
    <description>This update for libxslt fixes the following issues:

- CVE-2021-30560: Fixing a use after free vulnerability in Blink XSLT (bsc#1208574).
</description>
    <pkglist>
      <collection>
        <package name="libxslt" epoch="0" version="1.1.34" release="150400.3.3.1" arch="src" src="src/libxslt-1.1.34-150400.3.3.1.src.rpm">
          <filename>libxslt-1.1.34-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libxslt1" epoch="0" version="1.1.34" release="150400.3.3.1" arch="x86_64" src="x86_64/libxslt1-1.1.34-150400.3.3.1.x86_64.rpm">
          <filename>libxslt1-1.1.34-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1" epoch="0" version="1.1.34" release="150400.3.3.1" arch="aarch64" src="aarch64/libxslt1-1.1.34-150400.3.3.1.aarch64.rpm">
          <filename>libxslt1-1.1.34-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-549</id>
    <title>Security update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677515734"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208443" id="1208443" title="L3: Question about porting upstream python fix for email header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205244" id="1205244" title="VUL-0: CVE-2022-45061: python39,python3,python310,python36,python,python27: quadratic time IDNA decoding" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061" id="CVE-2022-45061" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

  - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244).

  Bugfixes:

  - Fixed issue where email.generator.py replaces a non-existent header (bsc#1208443).

</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.40.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.40.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.40.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.40.1" arch="src" src="src/python3-3.6.15-150300.10.40.1.src.rpm">
          <filename>python3-3.6.15-150300.10.40.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.40.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.40.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.40.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.40.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.40.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.40.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.40.1" arch="src" src="src/python3-core-3.6.15-150300.10.40.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.40.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.40.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.40.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.40.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.40.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.40.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.40.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.40.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.40.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.40.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1689</id>
    <title>Security update for ldb, samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680107675"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" id="CVE-2022-32746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0922" id="CVE-2023-0922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0922" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0225" id="CVE-2023-0225" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0225" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0614" id="CVE-2023-0614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0614" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201490" id="1201490" title="VUL-0: CVE-2022-32746: samba,ldb: Use-after-free occurring in database audit logging module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207416" id="1207416" title="PANIC (pid 12062): Signal 11: Segmentation fault in 4.15.13-git.482.1ac2c665c73.74.1-SUSE-SLE_12-x86_64 | samba" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207723" id="1207723" title="samba-libs package dependency missing for package samba-client-libs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207996" id="1207996" title="samba-winbind-libs-32bit package missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209481" id="1209481" title="VUL-0: EMBARGOED: CVE-2023-0922: samba: AD DC admin tool samba-tool sends passwords in cleartext" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209483" id="1209483" title="VUL-0: EMBARGOED: CVE-2023-0225: samba: AD DC &quot;dnsHostname&quot; attribute can be deleted by unprivileged authenticated users." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209485" id="1209485" title="VUL-0: EMBARGOED: CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered" type="bugzilla"/>
    </references>
    <description>This update for ldb, samba fixes the following issues:

ldb: 
    
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).

samba:

- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC &quot;dnsHostname&quot; attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).

The following non-security bug were fixed:

- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Ship missing samba-winbind-libs-32bit package (bsc#1207996)
- Ship missing samba-libs to SLE Micro 5.3 (bsc#1207723)
</description>
    <pkglist>
      <collection>
        <package name="ldb" epoch="0" version="2.4.4" release="150400.4.11.1" arch="src" src="src/ldb-2.4.4-150400.4.11.1.src.rpm">
          <filename>ldb-2.4.4-150400.4.11.1.src.rpm</filename>
        </package>
        <package name="libldb2" epoch="0" version="2.4.4" release="150400.4.11.1" arch="x86_64" src="x86_64/libldb2-2.4.4-150400.4.11.1.x86_64.rpm">
          <filename>libldb2-2.4.4-150400.4.11.1.x86_64.rpm</filename>
        </package>
        <package name="samba" epoch="0" version="4.15.13+git.636.53d93c5b9d6" release="150400.3.23.1" arch="src" src="src/samba-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.src.rpm">
          <filename>samba-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.636.53d93c5b9d6" release="150400.3.23.1" arch="x86_64" src="x86_64/samba-client-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.x86_64.rpm">
          <filename>samba-client-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.636.53d93c5b9d6" release="150400.3.23.1" arch="x86_64" src="x86_64/samba-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.x86_64.rpm">
          <filename>samba-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libldb2" epoch="0" version="2.4.4" release="150400.4.11.1" arch="aarch64" src="aarch64/libldb2-2.4.4-150400.4.11.1.aarch64.rpm">
          <filename>libldb2-2.4.4-150400.4.11.1.aarch64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.636.53d93c5b9d6" release="150400.3.23.1" arch="aarch64" src="aarch64/samba-client-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.aarch64.rpm">
          <filename>samba-client-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.636.53d93c5b9d6" release="150400.3.23.1" arch="aarch64" src="aarch64/samba-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.aarch64.rpm">
          <filename>samba-libs-4.15.13+git.636.53d93c5b9d6-150400.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-776</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678984216"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2030" id="PED-2030" title="https://jira.suse.com/browse/PED-2030" type="jira"/>
    </references>
    <description>This update for gcc12 fixes the following issues:

This update ships gcc12 also to the SUSE Linux Enterprise 15 SP1 LTSS and 15 SP2 LTSS products.

SUSE Linux Enterprise 15 SP3 and SP4 get only refreshed builds without changes


This update ship the GCC 12 compiler suite and its base libraries.

The compiler baselibraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 11 ones.

The new compilers for C, C++, and Fortran are provided in the SUSE Linux
Enterprise Module for Development Tools.

To use gcc12 compilers use:

- install &quot;gcc12&quot; or &quot;gcc12-c++&quot; or one of the other &quot;gcc12-COMPILER&quot; frontend packages.
- override your makefile to use CC=gcc12, CXX=g++12 and similar overrides for the other languages.

For a full changelog with all new GCC12 features, check out

	https://gcc.gnu.org/gcc-12/changes.html

</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.2.1+git416" release="150000.1.7.1" arch="src" src="src/gcc12-12.2.1+git416-150000.1.7.1.src.rpm">
          <filename>gcc12-12.2.1+git416-150000.1.7.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.7.1" arch="x86_64" src="x86_64/libgcc_s1-12.2.1+git416-150000.1.7.1.x86_64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.7.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.7.1" arch="x86_64" src="x86_64/libstdc++6-12.2.1+git416-150000.1.7.1.x86_64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.7.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.7.1" arch="aarch64" src="aarch64/libgcc_s1-12.2.1+git416-150000.1.7.1.aarch64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.7.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.7.1" arch="aarch64" src="aarch64/libstdc++6-12.2.1+git416-150000.1.7.1.aarch64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1564</id>
    <title>Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679647732"/>
    <references/>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

- Fix SEV device exposure
- Cleanup node labels properly
- Install ncat and curl (required for network tests)
- Symlink virtiofsd to /usr/libexec/virtiofsd
- Install only libvirt-daemon-driver-qemu and do not pull unneeded deps
- Do not install libguestfs-devel
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.10.4" arch="src" src="src/kubevirt-0.54.0-150400.3.10.4.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.10.4.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.10.4" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.10.4.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.10.4.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.10.4" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.10.4.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.10.4.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1565</id>
    <title>Recommended update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679647766"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

- Build tools/cdi-containerimage-server with CGO_ENABLED=0
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.10.4" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.10.4.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.10.4.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.10.4" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.10.4.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.10.4.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-807</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679326024"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208691" id="1208691" title="Onboarding fail in detecting ptf packages" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Fix problem with detecting PTF packages (bsc#1208691)
- Fix pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/python3-salt-3004-150400.8.25.1.x86_64.rpm">
          <filename>python3-salt-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="src" src="src/salt-3004-150400.8.25.1.src.rpm">
          <filename>salt-3004-150400.8.25.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/salt-3004-150400.8.25.1.x86_64.rpm">
          <filename>salt-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/salt-minion-3004-150400.8.25.1.x86_64.rpm">
          <filename>salt-minion-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/salt-transactional-update-3004-150400.8.25.1.x86_64.rpm">
          <filename>salt-transactional-update-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/python3-salt-3004-150400.8.25.1.aarch64.rpm">
          <filename>python3-salt-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/salt-3004-150400.8.25.1.aarch64.rpm">
          <filename>salt-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/salt-minion-3004-150400.8.25.1.aarch64.rpm">
          <filename>salt-minion-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/salt-transactional-update-3004-150400.8.25.1.aarch64.rpm">
          <filename>salt-transactional-update-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-671</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678272944"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203788" id="1203788" title="VUL-0: CVE-2022-3165: qemu,kvm: integer underflow in vnc_client_cut_text_ext() leads to CPU exhaustion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205808" id="1205808" title="VUL-0: CVE-2022-4144: kvm,qemu: qxl_phys2virt unsafe address translation can lead to out-of-bounds read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202364" id="1202364" title="qemu  &quot;block limits&quot; VPD emulation broken in SLES15 SP3 [ref:_00D1igLOd._5005q9eCWF:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206527" id="1206527" title="SLES 15 SP4 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197653" id="1197653" title="VUL-0: CVE-2022-1050: qemu,kvm: pvrdma: use-after-free issue in pvrdma_exec_cmd()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3165" id="CVE-2022-3165" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3165" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4144" id="CVE-2022-4144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4144" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1050" id="CVE-2022-1050" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1050" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

  - CVE-2022-4144: Fixed qxl_phys2virt unsafe address translation that can lead to out-of-bounds read (bsc#1205808).
  - CVE-2022-3165: Fixed integer underflow in vnc_client_cut_text_ext() (bsc#1203788).
  - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653).

  Bugfixes:

  - Fixed deviation of guest clock (bsc#1206527).
  - Fixed broken &quot;block limits&quot; VPD emulation (bsc#1202364).

</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.11.1" arch="src" src="src/qemu-6.2.0-150400.37.11.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.11.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.11.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.11.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.11.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.11.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.11.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.11.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.11.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.11.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.11.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.11.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.11.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.11.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1661</id>
    <title>Recommended update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680078303"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207868" id="1207868" title="mdadm update breaks previous PTF" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issue:

- Update the enable Intel Alderlake RSTe-configuration patca (bsc#1207868)
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.24.2" arch="src" src="src/mdadm-4.1-150300.24.24.2.src.rpm">
          <filename>mdadm-4.1-150300.24.24.2.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.24.2" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.24.2.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.24.2.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.24.2" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.24.2.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.24.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1880</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681809101"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208079" id="1208079" title="When uninstalling some rpm packages, the message &quot;rm: cannot remove '/var/lib/systemd/migrated/...'&quot; is displayed." type="bugzilla"/>
    </references>
    <description>This update for systemd-rpm-macros fixes the following issue:

- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not present as it's expected (bsc#1208079).
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="12" release="150000.7.30.1" arch="noarch" src="noarch/systemd-rpm-macros-12-150000.7.30.1.noarch.rpm">
          <filename>systemd-rpm-macros-12-150000.7.30.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="12" release="150000.7.30.1" arch="src" src="src/systemd-rpm-macros-12-150000.7.30.1.src.rpm">
          <filename>systemd-rpm-macros-12-150000.7.30.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1696</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680168950"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208099" id="1208099" title="[TRACKERBUG] cloud-regionsrv-client fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207133" id="1207133" title="cloud-regionsrv client needs log rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208097" id="1208097" title="[TRACKERBUG] cloud-regionsrv-client fixes" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099)
- Removes a warning about system_token entry present in the credentials file.
- Adds logrotate configuration for log rotation.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.0" release="150000.6.89.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.0-150000.6.89.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.0-150000.6.89.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.0" release="150000.6.89.1" arch="src" src="src/cloud-regionsrv-client-10.1.0-150000.6.89.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.0-150000.6.89.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.89.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.89.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.89.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.89.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.89.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.89.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.89.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.89.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.89.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.89.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.89.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.89.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.89.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.89.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.89.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-588</id>
    <title>Recommended update for kdump</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1677676787"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196335" id="1196335" title="[Build C.520.1] kdump failed to start: device or resource busy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186745" id="1186745" title="SLES 15 SP3 - [P9] kdump and fadump over NFS is working only when ip, ifname and bootdev parameters are set for GlacierParkIB ports (mlx5_core) (kdump?)" type="bugzilla"/>
    </references>
    <description>This update for kdump fixes the following issues:

- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
</description>
    <pkglist>
      <collection>
        <package name="kdump" epoch="0" version="1.0.2+git20.g64239cc" release="150400.3.11.1" arch="src" src="src/kdump-1.0.2+git20.g64239cc-150400.3.11.1.src.rpm">
          <filename>kdump-1.0.2+git20.g64239cc-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git20.g64239cc" release="150400.3.11.1" arch="x86_64" src="x86_64/kdump-1.0.2+git20.g64239cc-150400.3.11.1.x86_64.rpm">
          <filename>kdump-1.0.2+git20.g64239cc-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="kdump" epoch="0" version="1.0.2+git20.g64239cc" release="150400.3.11.1" arch="aarch64" src="aarch64/kdump-1.0.2+git20.g64239cc-150400.3.11.1.aarch64.rpm">
          <filename>kdump-1.0.2+git20.g64239cc-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1954</id>
    <title>Recommended update for xmlsec1</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682327473"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201617" id="1201617" title="L3: xmlsec1 package missing in PackageHub after update to 15-SP4" type="bugzilla"/>
    </references>
    <description>This update for xmlsec1 fixes the following issue:

- Ship missing xmlsec1 to synchronize its version across different products (bsc#1201617)
</description>
    <pkglist>
      <collection>
        <package name="libxmlsec1-1" epoch="0" version="1.2.28" release="150100.7.13.4" arch="x86_64" src="x86_64/libxmlsec1-1-1.2.28-150100.7.13.4.x86_64.rpm">
          <filename>libxmlsec1-1-1.2.28-150100.7.13.4.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1" epoch="0" version="1.2.28" release="150100.7.13.4" arch="x86_64" src="x86_64/libxmlsec1-openssl1-1.2.28-150100.7.13.4.x86_64.rpm">
          <filename>libxmlsec1-openssl1-1.2.28-150100.7.13.4.x86_64.rpm</filename>
        </package>
        <package name="xmlsec1" epoch="0" version="1.2.28" release="150100.7.13.4" arch="src" src="src/xmlsec1-1.2.28-150100.7.13.4.src.rpm">
          <filename>xmlsec1-1.2.28-150100.7.13.4.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1686</id>
    <title>Security update for libmicrohttpd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680101784"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208745" id="1208745" title="VUL-0: CVE-2023-27371: libmicrohttpd: parser bug that could be used to crash servers using the MHD_PostProcessor" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371" id="CVE-2023-27371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371" type="cve"/>
    </references>
    <description>This update for libmicrohttpd fixes the following issues:

- CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745).
</description>
    <pkglist>
      <collection>
        <package name="libmicrohttpd" epoch="0" version="0.9.57" release="150000.3.3.1" arch="src" src="src/libmicrohttpd-0.9.57-150000.3.3.1.src.rpm">
          <filename>libmicrohttpd-0.9.57-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="x86_64" src="x86_64/libmicrohttpd12-0.9.57-150000.3.3.1.x86_64.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="aarch64" src="aarch64/libmicrohttpd12-0.9.57-150000.3.3.1.aarch64.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1718</id>
    <title>Security update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680270485"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0687" id="CVE-2023-0687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0687" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207571" id="1207571" title="possible regression to bcs#1166106 on SLES15SP4 - ref:_00D1igLOd._5005qK8Bxu:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207975" id="1207975" title="VUL-1: CVE-2023-0687: glibc: gmon memory corruption due wrong calculation of required buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208358" id="1208358" title="L3: glibc-2.31-150300.*: possible bug in __strncmp_avx2_rtm+0x1b3 when strncmp length parameter is over 128" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207957" id="1207957" title="AMD Cache Computation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975)

Other issues fixed:

- Fix avx2 strncmp offset compare condition check (bsc#1208358)
- elf: Allow dlopen of filter object to work (bsc#1207571)
- powerpc: Fix unrecognized instruction errors with recent GCC
- x86: Cache computation for AMD architecture (bsc#1207957)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="src" src="src/glibc-2.31-150300.46.1.src.rpm">
          <filename>glibc-2.31-150300.46.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-668</id>
    <title>Security update for libX11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678270670"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555" id="CVE-2022-3555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208881" id="1208881" title="L3: Matlab segfaults since libX11-6 updated to 1.6.2-12.24.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204425" id="1204425" title="VUL-0: CVE-2022-3555: libX11,xorg-x11-libX11: memory leak in _XFreeX11XCBStructure()" type="bugzilla"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- Fixed a regression introduced with security update for CVE-2022-3555 (bsc#1204425, bsc#1208881)
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.27.1" arch="src" src="src/libX11-1.6.5-150000.3.27.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.27.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.27.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.27.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.27.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.27.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.27.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.27.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.27.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-868</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679474544"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203355" id="1203355" title="Partner-L3: [HPS Bug] Python3 crashes with message of &quot;libgcc_s.so.1 must be installed for pthread_cancel to work&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208471" id="1208471" title="VUL-0: CVE-2023-24329: python,python3,python27,python36,python39,python310: blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" id="CVE-2023-24329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="src" src="src/python3-3.6.15-150300.10.45.1.src.rpm">
          <filename>python3-3.6.15-150300.10.45.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.45.1" arch="src" src="src/python3-core-3.6.15-150300.10.45.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.45.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1298</id>
    <title>Recommended update for ndctl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679567821"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208548" id="1208548" title="ndctl command stuck in sles lpar with vpmem setup" type="bugzilla"/>
    </references>
    <description>This update for ndctl fixes the following issues:

- Fix parsing of environment variable NDCTL_TIMEOUT (bsc#1208548)
</description>
    <pkglist>
      <collection>
        <package name="libndctl6" epoch="0" version="71.1" release="150400.10.3.1" arch="x86_64" src="x86_64/libndctl6-71.1-150400.10.3.1.x86_64.rpm">
          <filename>libndctl6-71.1-150400.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="ndctl" epoch="0" version="71.1" release="150400.10.3.1" arch="src" src="src/ndctl-71.1-150400.10.3.1.src.rpm">
          <filename>ndctl-71.1-150400.10.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-790</id>
    <title>Recommended update for kexec-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679026812"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203410" id="1203410" title="Unable to take the kdump when LMB is set to 4GB." type="bugzilla"/>
    </references>
    <description>This update for kexec-tools fixes the following issues:

- Remove ram_top restriction (bsc#1203410)
</description>
    <pkglist>
      <collection>
        <package name="kexec-tools" epoch="0" version="2.0.20" release="150400.16.3.1" arch="src" src="src/kexec-tools-2.0.20-150400.16.3.1.src.rpm">
          <filename>kexec-tools-2.0.20-150400.16.3.1.src.rpm</filename>
        </package>
        <package name="kexec-tools" epoch="0" version="2.0.20" release="150400.16.3.1" arch="x86_64" src="x86_64/kexec-tools-2.0.20-150400.16.3.1.x86_64.rpm">
          <filename>kexec-tools-2.0.20-150400.16.3.1.x86_64.rpm</filename>
        </package>
        <package name="kexec-tools" epoch="0" version="2.0.20" release="150400.16.3.1" arch="aarch64" src="aarch64/kexec-tools-2.0.20-150400.16.3.1.aarch64.rpm">
          <filename>kexec-tools-2.0.20-150400.16.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-781</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678990050"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207780" id="1207780" title="VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208959" id="1208959" title="VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208828" id="1208828" title="VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208957" id="1208957" title="VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0512" id="CVE-2023-0512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0512" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" id="CVE-2023-1127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1170" id="CVE-2023-1170" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1170" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1175" id="CVE-2023-1175" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1175" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).
- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).
- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).
- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

Updated to version 9.0 with patch level 1386.

- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="src" src="src/vim-9.0.1386-150000.5.37.1.src.rpm">
          <filename>vim-9.0.1386-150000.5.37.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="noarch" src="noarch/vim-data-common-9.0.1386-150000.5.37.1.noarch.rpm">
          <filename>vim-data-common-9.0.1386-150000.5.37.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="x86_64" src="x86_64/vim-small-9.0.1386-150000.5.37.1.x86_64.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="aarch64" src="aarch64/vim-small-9.0.1386-150000.5.37.1.aarch64.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-782</id>
    <title>Recommended update for libgcrypt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678990128"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208926" id="1208926" title="FIPS: Libgcrypt: PBKDF2 minimal iteration count and salt length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208925" id="1208925" title="FIPS: Libgcrypt: Transition to error-state if PCT fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208924" id="1208924" title="FIPS: Libgcrypt: Avoid no-keytest in ECDSA keygen" type="bugzilla"/>
    </references>
    <description>This update for libgcrypt fixes the following issues:

- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
- FIPS: PBKDF2: Added additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  FIPS indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
</description>
    <pkglist>
      <collection>
        <package name="libgcrypt" epoch="0" version="1.9.4" release="150400.6.8.1" arch="src" src="src/libgcrypt-1.9.4-150400.6.8.1.src.rpm">
          <filename>libgcrypt-1.9.4-150400.6.8.1.src.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="x86_64" src="x86_64/libgcrypt20-1.9.4-150400.6.8.1.x86_64.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="x86_64" src="x86_64/libgcrypt20-hmac-1.9.4-150400.6.8.1.x86_64.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="aarch64" src="aarch64/libgcrypt20-1.9.4-150400.6.8.1.aarch64.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="aarch64" src="aarch64/libgcrypt20-hmac-1.9.4-150400.6.8.1.aarch64.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1810</id>
    <title>Recommended update for cups</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681207597"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191467" id="1191467" title="lpr reports &quot;No such file or directory&quot; for missing catalogue files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198932" id="1198932" title="/usr/bin/lpr: No such file or directory - ref:_00D1igLOd._5001itrzcD:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191525" id="1191525" title="L3-Question: Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200321" id="1200321" title="CUPS may not always start if sssd is in use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203446" id="1203446" title="/usr/bin/lpr: Error - The printer or class does not exist.  - ref:_00D1igLOd._5005qBtITt:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201234" id="1201234" title="Missing network dependency in systemd unit for cups-2.2.7" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- Fix print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable) (bsc#1191525)
- Fix &quot;/usr/bin/lpr: Error - The printer or class does not exist (bsc#1203446)
- Improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error (bsc#1191467, bsc#1198932)
- Add &quot;After=network.target sssd.service&quot; to the systemd unit (bsc#1201234, bsc#1200321)    
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.40.1" arch="src" src="src/cups-2.2.7-150000.3.40.1.src.rpm">
          <filename>cups-2.2.7-150000.3.40.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.40.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.40.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.40.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.40.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.40.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.40.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.40.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.40.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.40.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.40.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.40.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.40.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1882</id>
    <title>Recommended update for makedumpfile</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681809244"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201209" id="1201209" title="Unable to collect vmcore with Xen" type="bugzilla"/>
    </references>
    <description>This update for makedumpfile fixes the following issues:

- Fix memory leak issue in init_xen_crash_info (bsc#1201209)
</description>
    <pkglist>
      <collection>
        <package name="makedumpfile" epoch="0" version="1.7.0" release="150400.4.3.1" arch="src" src="src/makedumpfile-1.7.0-150400.4.3.1.src.rpm">
          <filename>makedumpfile-1.7.0-150400.4.3.1.src.rpm</filename>
        </package>
        <package name="makedumpfile" epoch="0" version="1.7.0" release="150400.4.3.1" arch="x86_64" src="x86_64/makedumpfile-1.7.0-150400.4.3.1.x86_64.rpm">
          <filename>makedumpfile-1.7.0-150400.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="makedumpfile" epoch="0" version="1.7.0" release="150400.4.3.1" arch="aarch64" src="aarch64/makedumpfile-1.7.0-150400.4.3.1.aarch64.rpm">
          <filename>makedumpfile-1.7.0-150400.4.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-796</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679157386"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1166486" id="1166486" title="Deactivating/Activating of Octane namespaces leads to unbootable system" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203331" id="1203331" title="VUL-0: CVE-2022-38096: kernel: NULL pointer dereference found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203332" id="1203332" title="VUL-0: CVE-2022-36280: kernel: out-of-bounds memory access vulnerability found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204993" id="1204993" title="SLES15SP4 [Everest]: Failures observed after running ftrace selftests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205544" id="1205544" title="L3: potential NFS client performance degradation SLES 15 SP4 (vs 12 SP5)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206224" id="1206224" title="Dell notebook drains battery during sleep" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206232" id="1206232" title="SLES15-SP4 : [P10] [denali] [max-config: 240c / 64TB] : KSELFTEST : perf-hwbreak execution comes out with errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206459" id="1206459" title="[HPS Bug] SLES15-SP4 installation process is blocked due &quot;workqueue lockup&quot; caused by ipmi_ssif driver on HPE RL300 platforms." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206640" id="1206640" title="[PATCH] quota: Check next/prev free block number after reading from  quota file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206876" id="1206876" title="[PATCH] ext4: update s_overhead_clusters in the superblock during an  on-line resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206877" id="1206877" title="[PATCH] ext4: fix extent status tree race in writeback error recovery  path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206878" id="1206878" title="[PATCH] ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206880" id="1206880" title="[PATCH] ext4: avoid resizing to a partial cluster size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206881" id="1206881" title="[PATCH] ext4: fix bug in extents parsing when eh_entries == 0 and  eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206882" id="1206882" title="[PATCH] ext4: continue to expand file system when the target size  doesn't reach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206883" id="1206883" title="[PATCH] ext4: avoid crash when inline data creation follows DIO write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206884" id="1206884" title="[PATCH] ext4: fix null-ptr-deref in ext4_write_info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206885" id="1206885" title="[PATCH] ext4: make ext4_lazyinit_thread freezable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206886" id="1206886" title="[PATCH] ext4: fix BUG_ON() when directory entry has invalid rec_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206889" id="1206889" title="[PATCH] ext4: silence the warning when evicting inode with  dioread_nolock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206894" id="1206894" title="[PATCH] ext4: fix kernel BUG in 'ext4_write_inline_data_end()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207051" id="1207051" title="Vul-0: CVE-2023-23559: kernel-source,kernel-rt,kernel-azure: Integer overflow in rndis_wlan that leads to a buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207270" id="1207270" title="Partner-L3: Backport Request for locking/rwsem commits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207328" id="1207328" title="kernel: backport oops_limit hardening to prevent NULL pointer dereference exploitation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207588" id="1207588" title="[PATCH] ext4: drop ineligible txn start stop APIs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207589" id="1207589" title="[PATCH] ext4: simplify updating of fast commit stats" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207590" id="1207590" title="[PATCH] ext4: fast commit may not fallback for ineligible commit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207591" id="1207591" title="[PATCH] ext4: fast commit may miss file actions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207592" id="1207592" title="[PATCH] ext4: correct cluster len and clusters changed accounting in  ext4_mb_mark_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207593" id="1207593" title="[PATCH] ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207594" id="1207594" title="[PATCH] ext4: fix bug_on in start_this_handle during umount  filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207603" id="1207603" title="[PATCH] ext4: don't run ext4lazyinit for read-only filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207605" id="1207605" title="[PATCH] ext4: don't increase iversion counter for ea_inodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207606" id="1207606" title="[PATCH] ext4: ext4_read_bh_lock() should submit IO if the buffer  isn't uptodate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207607" id="1207607" title="[PATCH] ext4: place buffer head allocation before handle start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207608" id="1207608" title="[PATCH] ext4: fix dir corruption when ext4_dx_add_entry() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207609" id="1207609" title="[PATCH] ext4: fix miss release buffer head in ext4_fc_write_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207610" id="1207610" title="[PATCH] ext4: goto right label 'failed_mount3a'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207613" id="1207613" title="[PATCH] ext4: update 'state-&gt;fc_regions_size' after successful memory  allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207615" id="1207615" title="[PATCH] ext4: factor out ext4_fc_get_tl()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207617" id="1207617" title="[PATCH] ext4: add inode table check in __ext4_get_inode_loc to aovid  possible infinite loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207618" id="1207618" title="[PATCH] ext4: add helper to check quota inums" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207619" id="1207619" title="[PATCH] ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207620" id="1207620" title="[PATCH] ext4: fix bug_on in __es_tree_search caused by bad boot  loader inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207621" id="1207621" title="[PATCH] ext4: don't allow journal inode to have encrypt flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207623" id="1207623" title="[PATCH] ext4: disable fast-commit of encrypted dir operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207624" id="1207624" title="[PATCH] ext4: don't set up encryption key during jbd2 transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207625" id="1207625" title="[PATCH] ext4: fix leaking uninitialized memory in fast-commit journal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207626" id="1207626" title="[PATCH] ext4: add missing validation of fast-commit record lengths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207628" id="1207628" title="[PATCH] ext4: fix off-by-one errors in fast-commit block filling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207630" id="1207630" title="[PATCH] ext4: fix error code return to user-space in  ext4_get_branch()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207631" id="1207631" title="[PATCH] ext4: fix delayed allocation bug in ext4_clu_mapped for  bigalloc + inline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207632" id="1207632" title="[PATCH] fs: ext4: initialize fsdata in pagecache_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207634" id="1207634" title="[PATCH] ext4: avoid unaccounted block allocation when expanding inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207635" id="1207635" title="[PATCH] ext4: allocate extended attribute value in vmalloc area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207636" id="1207636" title="[PATCH] ext4: fix inode leak in ext4_xattr_inode_create() on an error  path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207638" id="1207638" title="[PATCH] writeback: avoid use-after-free after removing device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207639" id="1207639" title="[PATCH] quota: Prevent memory allocation recursion while holding  dq_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207641" id="1207641" title="[PATCH] jbd2: fix a potential race while discarding reserved buffers  after an abort" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207642" id="1207642" title="[PATCH] vfs: Check the truncate maximum size in inode_newsize_ok()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207643" id="1207643" title="[PATCH] jbd2: wake up journal waiters in FIFO order, not LIFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207644" id="1207644" title="[PATCH] jbd2: fix potential buffer head reference count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207645" id="1207645" title="[PATCH] jbd2: fix potential use-after-free in jbd2_fc_wait_bufs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207646" id="1207646" title="[PATCH] jbd2: add miss release buffer head in fc_do_one_pass()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207647" id="1207647" title="[PATCH] mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207648" id="1207648" title="[PATCH] ext4,f2fs: fix readahead of verity data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207651" id="1207651" title="[PATCH] ocfs2: fix memory leak in ocfs2_stack_glue_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207653" id="1207653" title="[PATCH] ext4: fix deadlock due to mbcache entry corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207770" id="1207770" title="[PATCH] ocfs2: ocfs2_mount_volume does cleanup job before return  error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207773" id="1207773" title="VUL-0: CVE-2023-0045: kernel: missing Flush IBP in ib_prctl_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207845" id="1207845" title="VUL-0: CVE-2023-0597: kernel: x86/mm: Randomize per-cpu entry area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207875" id="1207875" title="[Azure][MANA][IRQ] Fix IRQ Name - Add PCI And Queue Number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208153" id="1208153" title="[MSFT][MANA][NET][Patch][SLES15] Fix accessing freed irq affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208183" id="1208183" title="fstests xfs/179 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208212" id="1208212" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208290" id="1208290" title="Panic loop in SLE-15SP4 KOTD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208420" id="1208420" title="Intel: Backport  ISST: PUNIT device mapping with Sub-NUMA clustering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208428" id="1208428" title="ceph: flush cap releases when the session is flushed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208429" id="1208429" title="fscache_cookie_enabled: check cookie is valid before accessing it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208449" id="1208449" title="/dev/sev-guest is missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208534" id="1208534" title="Inbox lpfc version 14.2.0.9 crashes during Link Reset testing in Pt2Pt Direct Attached topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208541" id="1208541" title="When DM-MP is enabled in the OS and DIX/T10 is engaged with lpfc BlockGuard = 1, all Read and Write IOs fail when the target device is a DM device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208570" id="1208570" title="qla2xxx: update driver to 10.02.08.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208607" id="1208607" title="Update Broadcom Emulex lpfc driver to 14.2.0.10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208628" id="1208628" title="[SLE15-SP5 Beta3]ice: Call Trace after rmmod ice on SLE 15 SP5 Beta3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208700" id="1208700" title="VUL-0: CVE-2023-26545: kernel-source-rt,kernel-source,kernel-source-azure: double free in net/mpls/af_mpls.c upon an allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208741" id="1208741" title="VUL-0: CVE-2023-22995: kernel-source-azure,kernel-source-rt,kernel-source: error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208759" id="1208759" title="fuse: add inode/permission checks to fileattr_get/fileattr_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208784" id="1208784" title="SLES15 SP4 - system hang during 6th EEH (using lpfc/Broadcom)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208787" id="1208787" title="VUL-0: CVE-2023-0461: kernel: use-after-free in icsk_ulp_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209436" id="1209436" title="I915 hangs on Kernel vmlinuz-5.14.21-150400.24.49" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" id="CVE-2023-0461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" id="CVE-2023-22995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" id="CVE-2023-26545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" id="CVE-2023-0597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" id="CVE-2023-23559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" id="CVE-2022-38096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" id="CVE-2022-36280" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" id="CVE-2023-0045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" type="cve"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

NOTE: This update was retracted due to a serious regression in the i915 graphics card driver.

- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773).
- CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787).
- CVE-2023-0597: Fixed lack of randomization of  per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).

The following non-security bugs were fixed:

- [infiniband] READ is &quot;data destination&quot;, not source... (git-fixes)
- [xen] fix &quot;direction&quot; argument of iov_iter_kvec() (git-fixes).
- acpi/x86: Add support for LPS0 callback handler (git-fixes).
- acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes).
- acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224).
- acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224).
- acpi: battery: Fix missing NUL-termination with large strings (git-fixes).
- acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224).
- acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224).
- acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224).
- acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224).
- acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224).
- acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224).
- acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224).
- acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224).
- acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224).
- acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224).
- acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224).
- acpica: Drop port I/O validation for some regions (git-fixes).
- acpica: nsrepair: handle cases without a return value correctly (git-fixes).
- alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes).
- alsa: hda/ca0132: minor fix for allocation size (git-fixes).
- alsa: hda/conexant: add a new hda codec SN6180 (git-fixes).
- alsa: hda/realtek - fixed wrong gpio assigned (git-fixes).
- alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes).
- alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes).
- alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- alsa: hda: Do not unset preset when cleaning up codec (git-fixes).
- alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes).
- alsa: ice1712: Do not left ice-&gt;gpio_mutex locked in aureon_add_controls() (git-fixes).
- alsa: pci: lx6464es: fix a debug loop (git-fixes).
- applicom: Fix PCI device refcount leak in applicom_init() (git-fixes).
- arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes).
- arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes).
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes).
- arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes).
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes).
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes).
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes).
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes).
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes).
- arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes).
- arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes).
- arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes).
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes).
- arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes).
- arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes).
- arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes).
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes).
- arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes).
- arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes).
- arm: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes).
- arm: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes).
- arm: bcm2835_defconfig: Enable the framebuffer (git-fixes).
- arm: dts: am5748: keep usb4_tm disabled (git-fixes)
- arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes).
- arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes).
- arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes)
- arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes).
- arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes)
- arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes).
- arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes).
- arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes).
- arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes)
- arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes)
- arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes).
- arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes).
- arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes)
- arm: omap: remove debug-leds driver (git-fixes)
- arm: remove some dead code (git-fixes)
- arm: renumber bits related to _TIF_WORK_MASK (git-fixes)
- arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes).
- arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes)
- arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes).
- asoc: Intel: boards: fix spelling in comments (git-fixes).
- asoc: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes).
- asoc: Intel: bytcht_es8316: move comment to the right place (git-fixes).
- asoc: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes).
- asoc: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes).
- asoc: adau7118: do not disable regulators on device unbind (git-fixes).
- asoc: cs42l56: fix DT probe (git-fixes).
- asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes).
- asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes).
- asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes).
- asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes).
- asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes).
- asoc: rsnd: fixup #endif position (git-fixes).
- asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes).
- asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes).
- asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes).
- asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes).
- asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes).
- auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes).
- avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529).
- backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes).
- blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes).
- blk-mq: fix possible memleak when register 'hctx' failed (git-fixes).
- block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes).
- block/bfq-iosched.c: use &quot;false&quot; rather than &quot;BLK_RW_ASYNC&quot; (git-fixes).
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541).
- block: clear -&gt;slave_dir when dropping the main slave_dir reference (git-fixes).
- block: do not allow splitting of a REQ_NOWAIT bio (git-fixes).
- block: fix and cleanup bio_check_ro (git-fixes).
- block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes).
- block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes).
- bluetooth: L2CAP: Fix potential user-after-free (git-fixes).
- bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes).
- bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes).
- bpf: Skip task with pid=1 in send_signal_common() (git-fixes).
- can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes).
- ceph: flush cap releases when the session is flushed (bsc#1208428).
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes).
- clk: imx: avoid memory leak (git-fixes).
- clk: mxl: Add option to override gate clks (git-fixes).
- clk: mxl: Fix a clk entry by adding relevant flags (git-fixes).
- clk: mxl: Remove redundant spinlocks (git-fixes).
- clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes).
- clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes).
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes).
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes).
- clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes).
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes).
- clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes).
- comedi: use menuconfig for main Comedi menu (git-fixes).
- crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes).
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes).
- crypto: crypto4xx - Call dma_unmap_page when done (git-fixes).
- crypto: essiv - Handle EBUSY correctly (git-fixes).
- crypto: qat - fix out-of-bounds read (git-fixes).
- crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes).
- crypto: seqiv - Handle EBUSY correctly (git-fixes).
- crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes).
- crypto: xts - Handle EBUSY correctly (git-fixes).
- dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes).
- dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes).
- dmaengine: dw-edma: Drop chancnt initialization (git-fixes).
- dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes).
- dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes).
- dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes).
- dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes).
- dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes).
- docs: ftrace: fix a issue with duplicated subtitle number (git-fixes).
- docs: gdbmacros: print newest record (git-fixes).
- documentation: simplify and clarify DCO contribution example language (git-fixes).
- driver core: fix potential null-ptr-deref in device_add() (git-fixes).
- driver core: fix resource leak in device_add() (git-fixes).
- driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes).
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes).
- drivers: base: transport_class: fix possible memory leak (git-fixes).
- drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes).
- drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes).
- drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes).
- drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes).
- drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes).
- drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes).
- drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes).
- drm/bridge: lt8912b: Add hot plug detection (git-fixes).
- drm/bridge: lt9611: fix HPD reenablement (git-fixes).
- drm/bridge: lt9611: fix clock calculation (git-fixes).
- drm/bridge: lt9611: fix polarity programming (git-fixes).
- drm/bridge: lt9611: fix programming of video modes (git-fixes).
- drm/bridge: lt9611: fix sleep mode setup (git-fixes).
- drm/bridge: lt9611: pass a pointer to the of node (git-fixes).
- drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes).
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes).
- drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes).
- drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes).
- drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes).
- drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Fix VBT DSI DVO port handling (git-fixes).
- drm/i915: Initialize the obj flags for shmem objects (git-fixes).
- drm/mediatek: Clean dangling pointer on bind error path (git-fixes).
- drm/mediatek: Drop unbalanced obj unref (git-fixes).
- drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes).
- drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes).
- drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes).
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes).
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes).
- drm/msm/dpu: Add check for cstate (git-fixes).
- drm/msm/dpu: Add check for pstates (git-fixes).
- drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes).
- drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes).
- drm/msm/dpu: set pdpu-&gt;is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes).
- drm/msm/gem: Add check for kmalloc (git-fixes).
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm/msm/mdp5: Add check for kzalloc (git-fixes).
- drm/msm: clean event_thread-&gt;worker in case of an error (git-fixes).
- drm/msm: use strscpy instead of strncpy (git-fixes).
- drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes).
- drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes).
- drm/vc4: hdmi: Correct interlaced timings again (git-fixes).
- drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes).
- drm/vc4: hvs: Set AXI panic modes (git-fixes).
- drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes).
- drm/virtio: exbuf-&gt;fence_fd unmodified on interrupted wait (git-fixes).
- drm/vkms: Fix memory leak in vkms_init() (git-fixes).
- drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes).
- drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes).
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes).
- drm: tidss: Fix pixel format definition (git-fixes).
- dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes).
- dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes).
- dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes).
- dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes).
- dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes).
- dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes).
- dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes).
- eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes).
- efi: Accept version 2 of memory attributes table (git-fixes).
- exit: Add and use make_task_dead (bsc#1207328).
- exit: Allow oops_limit to be disabled (bsc#1207328).
- exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328).
- exit: Move force_uaccess back into do_exit (bsc#1207328).
- exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328).
- exit: Put an upper limit on how often we can oops (bsc#1207328).
- exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328).
- exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328).
- ext4,f2fs: fix readahead of verity data (bsc#1207648).
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619).
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- ext4: add helper to check quota inums (bsc#1207618).
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617).
- ext4: add missing validation of fast-commit record lengths (bsc#1207626).
- ext4: allocate extended attribute value in vmalloc area (bsc#1207635).
- ext4: avoid crash when inline data creation follows DIO write (bsc#1206883).
- ext4: avoid resizing to a partial cluster size (bsc#1206880).
- ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634).
- ext4: continue to expand file system when the target size does not reach (bsc#1206882).
- ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592).
- ext4: correct max_inline_xattr_value_size computing (bsc#1206878).
- ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878).
- ext4: disable fast-commit of encrypted dir operations (bsc#1207623).
- ext4: do not allow journal inode to have encrypt flag (bsc#1207621).
- ext4: do not increase iversion counter for ea_inodes (bsc#1207605).
- ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603).
- ext4: do not set up encryption key during jbd2 transaction (bsc#1207624).
- ext4: drop ineligible txn start stop APIs (bsc#1207588).
- ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606).
- ext4: factor out ext4_fc_get_tl() (bsc#1207615).
- ext4: fast commit may miss file actions (bsc#1207591).
- ext4: fast commit may not fallback for ineligible commit (bsc#1207590).
- ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886).
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0 (bsc#1206881).
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620).
- ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594).
- ext4: fix deadlock due to mbcache entry corruption (bsc#1207653).
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631).
- ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608).
- ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630).
- ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593).
- ext4: fix extent status tree race in writeback error recovery path (bsc#1206877).
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636).
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894).
- ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625).
- ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609).
- ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884).
- ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628).
- ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611).
- ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612).
- ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616).
- ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637).
- ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627).
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890).
- ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893).
- ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888).
- ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622).
- ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878).
- ext4: fix warning in 'ext4_da_release_space' (bsc#1206887).
- ext4: goto right label 'failed_mount3a' (bsc#1207610).
- ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629).
- ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633).
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614).
- ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602).
- ext4: make ext4_lazyinit_thread freezable (bsc#1206885).
- ext4: place buffer head allocation before handle start (bsc#1207607).
- ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889).
- ext4: simplify updating of fast commit stats (bsc#1207589).
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation (bsc#1207613).
- ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876).
- fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes).
- firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes).
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes).
- firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes).
- fix page corruption caused by racy check in __free_pages (bsc#1208149).
- fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632).
- fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429).
- fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759).
- genirq: Provide new interfaces for affinity hints (bsc#1208153).
- gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes).
- gpio: vf610: connect GPIO label to dev name (git-fixes).
- gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes).
- gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes).
- hid: asus: use spinlock to protect concurrent accesses (git-fixes).
- hid: asus: use spinlock to safely schedule workers (git-fixes).
- hid: bigben: use spinlock to protect concurrent accesses (git-fixes).
- hid: bigben: use spinlock to safely schedule workers (git-fixes).
- hid: bigben_probe(): validate report count (git-fixes).
- hid: bigben_worker() remove unneeded check on report_field (git-fixes).
- hid: core: Fix deadloop in hid_apply_multiplier (git-fixes).
- hid: elecom: add support for TrackBall 056E:011C (git-fixes).
- hv: fix comment typo in vmbus_channel/low_latency (git-fixes).
- hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes).
- hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes).
- hwmon: (ftsteutates) Fix scaling of measurements (git-fixes).
- hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes).
- hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes).
- i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes).
- i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes).
- i2c: mxs: suppress probe-deferral error message (git-fixes).
- i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes).
- ib/hfi1: Restore allocated resources on failed copyout (git-fixes)
- ib/ipoib: Fix legacy IPoIB due to wrong number of queues (git-fixes)
- iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes).
- input: ads7846 - always set last command to PWRDOWN (git-fixes).
- input: ads7846 - do not check penirq immediately for 7845 (git-fixes).
- input: ads7846 - do not report pressure for ads7845 (git-fixes).
- input: iqs269a - configure device with a single block write (git-fixes).
- input: iqs269a - drop unused device node references (git-fixes).
- input: iqs269a - increase interrupt handler return delay (git-fixes).
- input: iqs626a - drop unused device node references (git-fixes).
- iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes).
- ipmi:ssif: Add a timer between request retries (bsc#1206459).
- ipmi:ssif: Remove rtc_us_timer (bsc#1206459).
- ipmi:ssif: resend_msg() cannot fail (bsc#1206459).
- ipmi_ssif: Rename idle state and check (bsc#1206459).
- irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes)
- jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590).
- jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646).
- jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641).
- jbd2: fix potential buffer head reference count leak (bsc#1207644).
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645).
- jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643).
- kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544).
- kasan: no need to unset panic_on_warn in end_report() (bsc#1207328).
- leds: led-class: Add missing put_device() to led_put() (git-fixes).
- leds: led-core: Fix refcount leak in of_led_get() (git-fixes).
- lib/mpi: Fix buffer overrun when SG is too long (git-fixes).
- lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes).
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270).
- locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270).
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270).
- locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270).
- locking/rwsem: Make handoff bit handling more consistent (bsc#1207270).
- locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270).
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270).
- locking: Add missing __sched attributes (bsc#1207270).
- mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks (bsc#1207647).
- mbcache: Fixup kABI of mb_cache_entry (bsc#1207653).
- md/bitmap: Fix bitmap chunk size overflow issues (git-fixes).
- md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes).
- md: fix a crash in mempool_free (git-fixes).
- media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes).
- media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes).
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes).
- media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes).
- media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes).
- media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes).
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes).
- media: saa7134: Use video_unregister_device for radio_dev (git-fixes).
- media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes).
- media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes).
- media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes).
- mfd: cs5535: Do not build on UML (git-fixes).
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes).
- misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes).
- misc: enclosure: Fix doc for enclosure_find() (git-fixes).
- mmc: jz4740: Work around bug on JZ4760(B) (git-fixes).
- mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes).
- mmc: sdio: fix possible resource leaks in some error paths (git-fixes).
- move upstreamed i915 and media fixes into sorted section
- mtd: dataflash: remove duplicate SPI ID table (git-fixes).
- mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes).
- mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes).
- mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes).
- mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes).
- mtd: spi-nor: core: fix implicit declaration warning (git-fixes).
- mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes).
- mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes).
- net/rose: Fix to not accept on connected socket (git-fixes).
- net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes).
- net/x25: Fix to not accept on connected socket (git-fixes).
- net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes).
- net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153).
- net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
- net: mana: Fix accessing freed irq affinity_hint (bsc#1208153).
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes).
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes).
- nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes).
- nfcv3: handle out-of-order write replies (bsc#1205544).
- nvdimm: disable namespace on error (bsc#1166486).
- nvme-fabrics: show well known discovery name (bsc#1200054).
- objtool: Add a missing comma to avoid string concatenation (bsc#1207328).
- ocfs2: Fix data corruption after failed write (bsc#1208542).
- ocfs2: clear dinode links count in case of error (bsc#1207650).
- ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649).
- ocfs2: fix crash when mount with quota enabled (bsc#1207640).
- ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652).
- ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651).
- ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770).
- ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768).
- ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771).
- panic: Consolidate open-coded panic_on_warn checks (bsc#1207328).
- panic: Introduce warn_limit (bsc#1207328).
- panic: unset panic_on_warn inside panic() (bsc#1207328).
- pci/iov: Enlarge virtfn sysfs name buffer (git-fixes).
- pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes).
- pci: Fix dropping valid root bus resources with .end = zero (git-fixes).
- pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes).
- pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes).
- phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes).
- pinctrl: aspeed: Fix confusing types in return value (git-fixes).
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes).
- pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes).
- pinctrl: mediatek: Initialize variable *buf to zero (git-fixes).
- pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes).
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes).
- pinctrl: single: fix potential NULL dereference (git-fixes).
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes).
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420).
- platform/x86: amd-pmc: Correct usage of SMU version (git-fixes).
- platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes).
- platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes).
- platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes).
- platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes).
- platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes).
- powercap: fix possible name leak in powercap_register_zone() (git-fixes).
- powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612).
- printf: fix errname.c list (git-fixes).
- quota: Check next/prev free block number after reading from quota file (bsc#1206640).
- quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639).
- rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes)
- rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes)
- remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes).
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes).
- revert &quot;HID: logitech-hidpp: add a module parameter to keep firmware gestures&quot; (git-fixes).
- revert &quot;char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol&quot; (git-fixes).
- revert &quot;crypto: rsa-pkcs1pad - Replace GFP_ATOMIC with GFP_KERNEL in pkcs1pad_encrypt_sign_complete&quot; (git-fixes).
- revert &quot;usb: dwc3: qcom: Keep power domain on to retain controller status&quot; (git-fixes).
- rtc: allow rtc_read_alarm without read_alarm callback (git-fixes).
- rtc: pm8xxx: fix set-alarm race (git-fixes).
- rtc: sun6i: Always export the internal oscillator (git-fixes).
- s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes).
- scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607).
- scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607).
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607).
- scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607).
- scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607).
- scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534).
- scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607).
- scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607).
- scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607).
- scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607).
- scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607).
- scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570).
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570).
- scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570).
- scsi: qla2xxx: Fix erroneous link down (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570).
- scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570).
- scsi: qla2xxx: Fix printk() format string (bsc#1208570).
- scsi: qla2xxx: Fix stalled login (bsc#1208570).
- scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570).
- scsi: qla2xxx: Relocate/rename vp map (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (bsc#1208570).
- scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570).
- scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570).
- scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570).
- scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570).
- scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570).
- scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570).
- scsi: qla2xxx: edif: Fix clang warning (bsc#1208570).
- scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570).
- scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570).
- scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570).
- sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes).
- selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes).
- selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103).
- selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103).
- selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Move perror closer to its use (bsc#1206232).
- selftests: forwarding: lib: quote the sysctl values (git-fixes).
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes).
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes).
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes).
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes).
- serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes).
- serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes).
- signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes).
- soundwire: cadence: Do not overflow the command FIFOs (git-fixes).
- spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes).
- spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes).
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes).
- spi: tegra210-quad: Fix validate combined sequence (git-fixes).
- staging: mt7621-dts: change palmbus address to lower case (git-fixes).
- sysctl: add a new register_sysctl_init() interface (bsc#1207328).
- thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes).
- thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes).
- thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes).
- thermal/drivers/tsens: fix slope values for msm8939 (git-fixes).
- thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes).
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes).
- thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes).
- thermal: intel: quark_dts: fix error pointer dereference (git-fixes).
- trace_events_hist: add check for return value of 'create_hist_field' (git-fixes).
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes).
- tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes).
- tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes).
- tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes).
- tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes).
- tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes).
- ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328).
- usb: core: Do not hold device lock while reading the &quot;descriptors&quot; sysfs file (git-fixes).
- usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes).
- usb: dwc3: core: Host wake up support from system suspend (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes).
- usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes).
- usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes).
- usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes).
- usb: dwc3: qcom: clean up icc init (git-fixes).
- usb: dwc3: qcom: clean up suspend callbacks (git-fixes).
- usb: dwc3: qcom: fix gadget-only builds (git-fixes).
- usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes).
- usb: dwc3: qcom: fix wakeup implementation (git-fixes).
- usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes).
- usb: dwc3: qcom: suppress unused-variable warning (git-fixes).
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes).
- usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes).
- usb: max-3421: Fix setting of I/O pins (git-fixes).
- usb: musb: Add and use inline function musb_otg_state_string (git-fixes).
- usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes).
- usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes).
- usb: musb: remove schedule work called after flush (git-fixes).
- usb: serial: option: add support for VW/Skoda &quot;Carstick LTE&quot; (git-fixes).
- usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes).
- vc_screen: do not clobber return value in vcs_read (git-fixes).
- vc_screen: modify vcs_size() handling in vcs_read() (git-fixes).
- vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes).
- vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642).
- virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449).
- virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449).
- virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449).
- virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449).
- virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449).
- virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449).
- vmci: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes).
- vmxnet3: move rss code block under eop descriptor (bsc#1208212).
- watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (jsc#PED-3210) Also enable module in aarch64 default configuration.
- watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes).
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes).
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes).
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes).
- wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes).
- wifi: ath11k: allow system suspend to survive ath11k (git-fixes).
- wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes).
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes).
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes).
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes).
- wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes).
- wifi: cfg80211: Fix use after free for wext (git-fixes).
- wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes).
- wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes).
- wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes).
- wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes).
- wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes).
- wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes).
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes).
- wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes).
- wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes).
- wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes).
- wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes).
- wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtw89: Add missing check for alloc_workqueue (git-fixes).
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes).
- wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- writeback: avoid use-after-free after removing device (bsc#1207638).
- x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes).
- x86/asm: Fix an assembler warning with current binutils (git-fixes).
- x86/boot: Avoid using Intel mnemonics in AT&amp;T syntax asm (git-fixes).
- x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes).
- x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes).
- x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes).
- x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes).
- x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes).
- x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes).
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes).
- x86: acpi: cstate: Optimize C3 entry on AMD CPUs (git-fixes).
- xen-netfront: Fix NULL sring after live migration (git-fixes).
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes).
- xen/arm: Fix race in RB-tree based P2M accounting (git-fixes)
- xen/netback: do some code cleanup (git-fixes).
- xen/netback: fix build warning (git-fixes).
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes).
- xen/platform-pci: add missing free_irq() in error path (git-fixes).
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes).
- xfs: estimate post-merge refcounts correctly (bsc#1208183).
- xfs: hoist refcount record merge predicates (bsc#1208183).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.49.3" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.49.3.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.49.3.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.49.3" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.49.3.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.49.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.49.3.150400.24.19.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.49.3.150400.24.19.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.49.3.150400.24.19.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.49.3.150400.24.19.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.49.3.150400.24.19.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.49.3.150400.24.19.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.49.3" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.49.3.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.49.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.49.3.150400.24.19.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.49.3.150400.24.19.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.49.3.150400.24.19.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-870</id>
    <title>Security update for slirp4netns</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679474663"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29129" id="CVE-2020-29129" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29129" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29130" id="CVE-2020-29130" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29130" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179467" id="1179467" title="VUL-0: CVE-2020-29130: kvm,qemu,slirp4netns: out-of-bounds access while processing ARP packets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179466" id="1179466" title="VUL-1: CVE-2020-29129: kvm,qemu,slirp4netns: out-of-bounds access while processing NCSI packets" type="bugzilla"/>
    </references>
    <description>This update for slirp4netns fixes the following issues:

- CVE-2020-29129: Fixed out-of-bounds access while processing NCSI packets (bsc#1179466).
- CVE-2020-29130: Fixed out-of-bounds access while processing ARP packets (bsc#1179467).
</description>
    <pkglist>
      <collection>
        <package name="slirp4netns" epoch="0" version="0.4.7" release="150100.3.18.1" arch="src" src="src/slirp4netns-0.4.7-150100.3.18.1.src.rpm">
          <filename>slirp4netns-0.4.7-150100.3.18.1.src.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="0.4.7" release="150100.3.18.1" arch="x86_64" src="x86_64/slirp4netns-0.4.7-150100.3.18.1.x86_64.rpm">
          <filename>slirp4netns-0.4.7-150100.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="0.4.7" release="150100.3.18.1" arch="aarch64" src="aarch64/slirp4netns-0.4.7-150100.3.18.1.aarch64.rpm">
          <filename>slirp4netns-0.4.7-150100.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-879</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679558399"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180207" id="1180207" title="VUL-1: CVE-2020-14394: qemu, kvm:  infinite loop in xhci_ring_chain_length()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185000" id="1185000" title="VUL-0: CVE-2021-3507: qemu,kvm: fdc: heap buffer overflow in DMA read data transfers" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3507" id="CVE-2021-3507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14394" id="CVE-2020-14394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14394" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000).
- CVE-2020-14394: Fixed infinite loop in xhci_ring_chain_length() (bsc#1180207).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="src" src="src/qemu-6.2.0-150400.37.14.2.src.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.14.2" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.14.2.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.14.2" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.14.2" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.14.2.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.14.2" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-783</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1678990159"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208998" id="1208998" title="FIPS 140-3: PBKDF2 requirements for openssl" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

FIPS: Service-level indicator changes [bsc#1208998]

* Add additional checks required by FIPS 140-3. Minimum values for
  PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
  iteration count and 20 characters for password.
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.28.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.28.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.28.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.28.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.28.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.28.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.28.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.28.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.28.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.28.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.28.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.28.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.28.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.28.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.28.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.28.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.28.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.28.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-848</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679401724"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209019" id="1209019" title="VUL-0: EMBARGOED: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209017" id="1209017" title="VUL-0: EMBARGOED: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209018" id="1209018" title="VUL-0: EMBARGOED: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42333" id="CVE-2022-42333" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42333" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42332" id="CVE-2022-42332" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42332" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42331" id="CVE-2022-42331" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42331" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42334" id="CVE-2022-42334" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42334" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode (bsc#1209017).
- CVE-2022-42333,CVE-2022-42334: Fixed x86/HVM pinned cache attributes mis-handling (bsc#1209018).
- CVE-2022-42331: Fixed speculative vulnerability in 32bit SYSCALL path on x86 (bsc#1209019).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.3_06" release="150400.4.25.1" arch="src" src="src/xen-4.16.3_06-150400.4.25.1.src.rpm">
          <filename>xen-4.16.3_06-150400.4.25.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.3_06" release="150400.4.25.1" arch="x86_64" src="x86_64/xen-libs-4.16.3_06-150400.4.25.1.x86_64.rpm">
          <filename>xen-libs-4.16.3_06-150400.4.25.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-749</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679318838"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197534" id="1197534" title="symlinkat call fails with incorrect error code on nfs file systems with latest coreutils package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198438" id="1198438" title="qla2xxx doesn't report SAN device changes to the upper SCSI layers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200054" id="1200054" title="[NetApp SLES15 SP4 Bug]: Host always displays unique discovery NQN, instead of the actual NQN used for the connect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202633" id="1202633" title="[NetApp SLES15 SP4 Bug] Inconsistent reconnect behavior for auth_failure2 across NVMe transports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203331" id="1203331" title="VUL-0: CVE-2022-38096: kernel: NULL pointer dereference found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204363" id="1204363" title="VUL-0: CVE-2022-3523: kernel: use after free related to device private page handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204993" id="1204993" title="SLES15SP4 [Everest]: Failures observed after running ftrace selftests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205544" id="1205544" title="L3: potential NFS client performance degradation SLES 15 SP4 (vs 12 SP5)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205846" id="1205846" title="L3: NFS-client has higher latency compared to SLES15SP3 on Skylake-platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206103" id="1206103" title="L3: scsi tape Error 18 (driver bt 0x0, host bt 0x0)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206232" id="1206232" title="SLES15-SP4 : [P10] [denali] [max-config: 240c / 64TB] : KSELFTEST : perf-hwbreak execution comes out with errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206935" id="1206935" title="15.4 kernel 5.14.21-150400.24.38-default not respecting vers=1.0 for OS/2 LAN connectivity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207051" id="1207051" title="Vul-0: CVE-2023-23559: kernel-source,kernel-rt,kernel-azure: Integer overflow in rndis_wlan that leads to a buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207270" id="1207270" title="Partner-L3: Backport Request for locking/rwsem commits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207560" id="1207560" title="VUL-0: CVE-2023-25012: kernel: hid: Use-After-Free in bigben_set_led()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207845" id="1207845" title="VUL-0: CVE-2023-0597: kernel: x86/mm: Randomize per-cpu entry area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207846" id="1207846" title="VUL-0: CVE-2023-25012: The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain regist" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208212" id="1208212" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208420" id="1208420" title="Intel: Backport  ISST: PUNIT device mapping with Sub-NUMA clustering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208449" id="1208449" title="/dev/sev-guest is missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208534" id="1208534" title="Inbox lpfc version 14.2.0.9 crashes during Link Reset testing in Pt2Pt Direct Attached topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208541" id="1208541" title="When DM-MP is enabled in the OS and DIX/T10 is engaged with lpfc BlockGuard = 1, all Read and Write IOs fail when the target device is a DM device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208542" id="1208542" title="ocfs2: part of the file is corrupted upon write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208570" id="1208570" title="qla2xxx: update driver to 10.02.08.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208607" id="1208607" title="Update Broadcom Emulex lpfc driver to 14.2.0.10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208628" id="1208628" title="[SLE15-SP5 Beta3]ice: Call Trace after rmmod ice on SLE 15 SP5 Beta3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208700" id="1208700" title="VUL-0: CVE-2023-26545: kernel-source-rt,kernel-source,kernel-source-azure: double free in net/mpls/af_mpls.c upon an allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208741" id="1208741" title="VUL-0: CVE-2023-22995: kernel-source-azure,kernel-source-rt,kernel-source: error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208759" id="1208759" title="fuse: add inode/permission checks to fileattr_get/fileattr_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208776" id="1208776" title="VUL-0: CVE-2023-22998: kernel-source,kernel-source-azure,kernel-source-rt: dereference of error pointer in virtio_gpu_object_shmem_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208784" id="1208784" title="SLES15 SP4 - system hang during 6th EEH (using lpfc/Broadcom)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208787" id="1208787" title="VUL-0: CVE-2023-0461: kernel: use-after-free in icsk_ulp_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208816" id="1208816" title="VUL-0: CVE-2023-23000: kernel: drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208837" id="1208837" title="VUL-0: CVE-2023-1118: kernel-source,kernel-source-azure,kernel-source-rt: UAF drivers/media/rc directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208843" id="1208843" title="VUL-0: CVE-2023-23004: kernel-source-azure,kernel-source-rt,kernel-source: drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209436" id="1209436" title="I915 hangs on Kernel vmlinuz-5.14.21-150400.24.49" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" id="CVE-2023-25012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" id="CVE-2023-23004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22998" id="CVE-2023-22998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" id="CVE-2023-23000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" id="CVE-2023-1118" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" id="CVE-2023-0461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" id="CVE-2023-22995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" id="CVE-2023-26545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" id="CVE-2023-0597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" id="CVE-2023-23559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" id="CVE-2022-38096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" id="CVE-2022-3523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

NOTE: This kernel was retracted due to a serious regression in the Intel I915 graphics card driver. (bsc#1209436)

- CVE-2022-3523: Fixed use after free related to device private page handling (bsc#1204363).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787).
- CVE-2023-0597: Fixed lack of randomization of  per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741).
- CVE-2023-22998: Fixed misinterpretation of the irtio_gpu_object_shmem_init() return value (bsc#1208776).
- CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816).
- CVE-2023-23004: Fixed misinterpretation of the get_sg_table return value in arm/malidp_planes.c (bsc#1208843).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-25012: Fixed a use-After-Free in bigben_set_led() in hid (bsc#1207560).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).

The following non-security bugs were fixed:

- [xen] fix &quot;direction&quot; argument of iov_iter_kvec() (git-fixes).
- acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes).
- acpi: battery: Fix missing NUL-termination with large strings (git-fixes).
- acpica: Drop port I/O validation for some regions (git-fixes).
- acpica: nsrepair: handle cases without a return value correctly (git-fixes).
- alsa: hda/ca0132: minor fix for allocation size (git-fixes).
- alsa: hda/conexant: add a new hda codec SN6180 (git-fixes).
- alsa: hda/realtek - fixed wrong gpio assigned (git-fixes).
- alsa: hda: Do not unset preset when cleaning up codec (git-fixes).
- alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes).
- alsa: ice1712: Do not left ice-&gt;gpio_mutex locked in aureon_add_controls() (git-fixes).
- applicom: Fix PCI device refcount leak in applicom_init() (git-fixes).
- arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes).
- arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes).
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes).
- arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes).
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes).
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes).
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes).
- arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes).
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes).
- arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes).
- arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes).
- arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes).
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes).
- arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes).
- arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes).
- arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes).
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes).
- arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes).
- arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes).
- arm: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes).
- arm: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes).
- arm: bcm2835_defconfig: Enable the framebuffer (git-fixes).
- arm: dts: am5748: keep usb4_tm disabled (git-fixes)
- arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes).
- arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes).
- arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes)
- arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes).
- arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes)
- arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes).
- arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes).
- arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes).
- arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes)
- arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes)
- arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes).
- arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes).
- arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes)
- arm: omap: remove debug-leds driver (git-fixes)
- arm: remove some dead code (git-fixes)
- arm: renumber bits related to _TIF_WORK_MASK (git-fixes)
- arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes).
- arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes)
- arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes).
- ascpi / x86: Add support for LPS0 callback handler (git-fixes).
- asoc: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes).
- asoc: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes).
- asoc: adau7118: do not disable regulators on device unbind (git-fixes).
- asoc: cs42l56: fix DT probe (git-fixes).
- asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes).
- asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes).
- asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes).
- asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes).
- asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes).
- asoc: rsnd: fixup #endif position (git-fixes).
- asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes).
- asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes).
- asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes).
- asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes).
- auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes).
- avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529).
- backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes).
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541).
- bluetooth: L2CAP: Fix potential user-after-free (git-fixes).
- bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes).
- cifs: Check the lease context if we actually got a lease (bsc#1193629).
- cifs: Convert struct fealist away from 1-element array (bsc#1193629).
- cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes).
- cifs: Fix oops due to uncleared server-&gt;smbd_conn in reconnect (git-fixes).
- cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629).
- cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629).
- cifs: Fix use-after-free in rdata-&gt;read_into_pages() (git-fixes).
- cifs: Fix warning and UAF when destroy the MR list (git-fixes).
- cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629).
- cifs: Replace remaining 1-element arrays (bsc#1193629).
- cifs: Replace zero-length arrays with flexible-array members (bsc#1193629).
- cifs: Use kstrtobool() instead of strtobool() (bsc#1193629).
- cifs: do not try to use rdma offload on encrypted connections (bsc#1193629).
- cifs: fix mount on old smb servers (boo#1206935).
- cifs: get rid of dns resolve worker (bsc#1193629).
- cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629).
- cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes).
- cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629).
- cifs: match even the scope id for ipv6 addresses (bsc#1193629).
- cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629).
- cifs: prevent data race in smb2_reconnect() (bsc#1193629).
- cifs: print last update time for interface list (bsc#1193629).
- cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629).
- cifs: return a single-use cfid if we did not get a lease (bsc#1193629).
- cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629).
- cifs: split out smb3_use_rdma_offload() helper (bsc#1193629).
- cifs: update ip_addr for ses only for primary chan setup (bsc#1193629).
- cifs: use tcon allocation functions even for dummy tcon (git-fixes).
- cifs: use the least loaded channel for sending requests (bsc#1193629).
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes).
- clk: imx: avoid memory leak (git-fixes).
- clk: mxl: Add option to override gate clks (git-fixes).
- clk: mxl: Fix a clk entry by adding relevant flags (git-fixes).
- clk: mxl: Remove redundant spinlocks (git-fixes).
- clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes).
- clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes).
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes).
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes).
- clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes).
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes).
- clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes).
- comedi: use menuconfig for main Comedi menu (git-fixes).
- crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes).
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes).
- crypto: crypto4xx - Call dma_unmap_page when done (git-fixes).
- crypto: essiv - Handle EBUSY correctly (git-fixes).
- crypto: qat - fix out-of-bounds read (git-fixes).
- crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes).
- crypto: seqiv - Handle EBUSY correctly (git-fixes).
- crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes).
- crypto: xts - Handle EBUSY correctly (git-fixes).
- dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes).
- dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes).
- dmaengine: dw-edma: Drop chancnt initialization (git-fixes).
- dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes).
- dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes).
- dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes).
- dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes).
- dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes).
- docs: ftrace: fix a issue with duplicated subtitle number (git-fixes).
- docs: gdbmacros: print newest record (git-fixes).
- documentation: simplify and clarify DCO contribution example language (git-fixes).
- driver core: fix potential null-ptr-deref in device_add() (git-fixes).
- driver core: fix resource leak in device_add() (git-fixes).
- driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes).
- drivers: base: transport_class: fix possible memory leak (git-fixes).
- drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes).
- drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes).
- drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes).
- drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes).
- drm/bridge: lt8912b: Add hot plug detection (git-fixes).
- drm/bridge: lt9611: fix HPD reenablement (git-fixes).
- drm/bridge: lt9611: fix clock calculation (git-fixes).
- drm/bridge: lt9611: fix polarity programming (git-fixes).
- drm/bridge: lt9611: fix programming of video modes (git-fixes).
- drm/bridge: lt9611: fix sleep mode setup (git-fixes).
- drm/bridge: lt9611: pass a pointer to the of node (git-fixes).
- drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes).
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes).
- drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes).
- drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes).
- drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes).
- drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/mediatek: Clean dangling pointer on bind error path (git-fixes).
- drm/mediatek: Drop unbalanced obj unref (git-fixes).
- drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes).
- drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes).
- drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes).
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes).
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes).
- drm/msm/dpu: Add check for cstate (git-fixes).
- drm/msm/dpu: Add check for pstates (git-fixes).
- drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes).
- drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes).
- drm/msm/dpu: set pdpu-&gt;is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes).
- drm/msm/gem: Add check for kmalloc (git-fixes).
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm/msm/mdp5: Add check for kzalloc (git-fixes).
- drm/msm: clean event_thread-&gt;worker in case of an error (git-fixes).
- drm/msm: use strscpy instead of strncpy (git-fixes).
- drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes).
- drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes).
- drm/vc4: hdmi: Correct interlaced timings again (git-fixes).
- drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes).
- drm/vc4: hvs: Set AXI panic modes (git-fixes).
- drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes).
- drm/vkms: Fix memory leak in vkms_init() (git-fixes).
- drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes).
- drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes).
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes).
- drm: tidss: Fix pixel format definition (git-fixes).
- dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes).
- dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes).
- dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes).
- dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes).
- dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes).
- dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes).
- dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes).
- eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes).
- firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes).
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes).
- firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes).
- fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759).
- gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes).
- gpio: vf610: connect GPIO label to dev name (git-fixes).
- gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes).
- gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes).
- hid: asus: use spinlock to protect concurrent accesses (git-fixes).
- hid: asus: use spinlock to safely schedule workers (git-fixes).
- hid: bigben: use spinlock to protect concurrent accesses (git-fixes).
- hid: bigben: use spinlock to safely schedule workers (git-fixes).
- hid: bigben_probe(): validate report count (git-fixes).
- hid: bigben_worker() remove unneeded check on report_field (git-fixes).
- hid: core: Fix deadloop in hid_apply_multiplier (git-fixes).
- hid: elecom: add support for TrackBall 056E:011C (git-fixes).
- hv: fix comment typo in vmbus_channel/low_latency (git-fixes).
- hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes).
- hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes).
- hwmon: (ftsteutates) Fix scaling of measurements (git-fixes).
- hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes).
- hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes).
- i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes).
- iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes).
- input: ads7846 - always set last command to PWRDOWN (git-fixes).
- input: ads7846 - do not check penirq immediately for 7845 (git-fixes).
- input: ads7846 - do not report pressure for ads7845 (git-fixes).
- input: iqs269a - configure device with a single block write (git-fixes).
- input: iqs269a - drop unused device node references (git-fixes).
- input: iqs269a - increase interrupt handler return delay (git-fixes).
- input: iqs626a - drop unused device node references (git-fixes).
- iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes).
- irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes)
- kabi fix for: nfs: Further optimisations for 'ls -l' (git-fixes).
- kabi fix for: nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
- kabi fix for: nfsv3: handle out-of-order write replies (bsc#1205544).
- kabi fix for: nfsv4.1 query for fs_location attr on a new file system (Never, kabi).
- kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too.
- leds: led-class: Add missing put_device() to led_put() (git-fixes).
- leds: led-core: Fix refcount leak in of_led_get() (git-fixes).
- lib/mpi: Fix buffer overrun when SG is too long (git-fixes).
- lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes).
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270).
- locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270).
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270).
- locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270).
- locking/rwsem: Make handoff bit handling more consistent (bsc#1207270).
- locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270).
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270).
- locking: Add missing __sched attributes (bsc#1207270).
- media: coda: Add check for dcoda_iram_alloc (git-fixes).
- media: coda: Add check for kmalloc (git-fixes).
- media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes).
- media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes).
- media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes).
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes).
- media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes).
- media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes).
- media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes).
- media: platform: ti: Add missing check for devm_regulator_get (git-fixes).
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes).
- media: saa7134: Use video_unregister_device for radio_dev (git-fixes).
- media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes).
- media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes).
- media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes).
- media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes).
- media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes).
- mfd: cs5535: Do not build on UML (git-fixes).
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes).
- misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes).
- misc: enclosure: Fix doc for enclosure_find() (git-fixes).
- mmc: jz4740: Work around bug on JZ4760(B) (git-fixes).
- mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes).
- mmc: sdio: fix possible resource leaks in some error paths (git-fixes).
- move upstreamed i915 and media fixes into sorted section
- mtd: dataflash: remove duplicate SPI ID table (git-fixes).
- mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes).
- mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes).
- mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes).
- mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes).
- mtd: spi-nor: core: fix implicit declaration warning (git-fixes).
- mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes).
- mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes).
- net/rose: Fix to not accept on connected socket (git-fixes).
- net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes).
- nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes).
- nfs: Always initialise fattr-&gt;label in nfs_fattr_alloc() (git-fixes).
- nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes).
- nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes).
- nfs: Further optimisations for 'ls -l' (git-fixes).
- nfs: nfs4clinet: check the return value of kstrdup() (git-fixes).
- nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes).
- nfsd: De-duplicate net_generic(nf-&gt;nf_net, nfsd_net_id) (git-fixes).
- nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes).
- nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
- nfsv3: handle out-of-order write replies (bsc#1205544).
- nfsv4 expose nfs_parse_server_name function (git-fixes).
- nfsv4 handle port presence in fs_location server string (git-fixes).
- nfsv4 only print the label when its queried (git-fixes).
- nfsv4 remove zero number of fs_locations entries error check (git-fixes).
- nfsv4 store server support for fs_location attribute (git-fixes).
- nfsv4.1 query for fs_location attr on a new file system (git-fixes).
- nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes).
- nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes).
- nfsv4: Protect the state recovery thread against direct reclaim (git-fixes).
- nvme-auth: check chap ctrl_key once constructed (bsc#1202633).
- nvme-auth: clear sensitive info right after authentication completes (bsc#1202633).
- nvme-auth: convert dhchap_auth_list to an array (bsc#1202633).
- nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633).
- nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633).
- nvme-auth: do not override ctrl keys before validation (bsc#1202633).
- nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633).
- nvme-auth: do not use NVMe status codes (bsc#1202633).
- nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633).
- nvme-auth: fix smatch warning complaints (bsc#1202633).
- nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633).
- nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633).
- nvme-auth: mark nvme_auth_wq static (bsc#1202633).
- nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633).
- nvme-auth: remove redundant auth_work flush (bsc#1202633).
- nvme-auth: remove redundant buffer deallocations (bsc#1202633).
- nvme-auth: remove redundant deallocations (bsc#1202633).
- nvme-auth: remove redundant if statement (bsc#1202633).
- nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633).
- nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633).
- nvme-auth: rename authentication work elements (bsc#1202633).
- nvme-auth: use workqueue dedicated to authentication (bsc#1202633).
- nvme-fabrics: show well known discovery name (bsc#1200054).
- ocfs2: Fix data corruption after failed write (bsc#1208542).
- pci/ioc: Enlarge virtfn sysfs name buffer (git-fixes).
- pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes).
- pci: Fix dropping valid root bus resources with .end = zero (git-fixes).
- pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes).
- pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes).
- pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes).
- phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes).
- pinctrl: mediatek: Initialize variable *buf to zero (git-fixes).
- pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes).
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes).
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes).
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420).
- platform/x86: amd-pmc: Correct usage of SMU version (git-fixes).
- platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes).
- platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes).
- platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes).
- platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes).
- powercap: fix possible name leak in powercap_register_zone() (git-fixes).
- powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612).
- printf: fix errname.c list (git-fixes).
- qede: avoid uninitialized entries in coal_entry array (bsc#1205846).
- qede: fix interrupt coalescing configuration (bsc#1205846).
- refresh patches.suse/ice-clear-stale-Tx-queue-settings-before-configuring.patch. Fix bug introduced by broken backport (bsc#1208628).
- remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes).
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes).
- revert &quot;char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol&quot; (git-fixes).
- revert &quot;crypto: rsa-pkcs1pad - Replace GFP_ATOMIC with GFP_KERNEL in pkcs1pad_encrypt_sign_complete&quot; (git-fixes).
- revert &quot;hid: logitech-hidpp: add a module parameter to keep firmware gestures&quot; (git-fixes).
- revert &quot;usb: dwc3: qcom: Keep power domain on to retain controller status&quot; (git-fixes).
- rtc: allow rtc_read_alarm without read_alarm callback (git-fixes).
- rtc: pm8xxx: fix set-alarm race (git-fixes).
- rtc: sun6i: Always export the internal oscillator (git-fixes).
- s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607).
- scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607).
- scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607).
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607).
- scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607).
- scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607).
- scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534).
- scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607).
- scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607).
- scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607).
- scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607).
- scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607).
- scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103).
- scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570).
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570).
- scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570).
- scsi: qla2xxx: Fix erroneous link down (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570).
- scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570).
- scsi: qla2xxx: Fix printk() format string (bsc#1208570).
- scsi: qla2xxx: Fix stalled login (bsc#1208570).
- scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570).
- scsi: qla2xxx: Relocate/rename vp map (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (bsc#1208570).
- scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570).
- scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570).
- scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570).
- scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570).
- scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570).
- scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570).
- scsi: qla2xxx: edif: Fix clang warning (bsc#1208570).
- scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570).
- scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570).
- scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570).
- sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes).
- selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes).
- selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103).
- selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103).
- selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Move perror closer to its use (bsc#1206232).
- serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes).
- serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes).
- smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629).
- soundwire: cadence: Do not overflow the command FIFOs (git-fixes).
- spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes).
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes).
- spi: tegra210-quad: Fix validate combined sequence (git-fixes).
- staging: mt7621-dts: change palmbus address to lower case (git-fixes).
- struct uvc_device move flush_status new member to end (git-fixes).
- sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes).
- sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes).
- sunrpc: Fix socket waits for write buffer space (git-fixes).
- thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes).
- thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes).
- thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes).
- thermal/drivers/tsens: fix slope values for msm8939 (git-fixes).
- thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes).
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes).
- thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes).
- thermal: intel: quark_dts: fix error pointer dereference (git-fixes).
- tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes).
- tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes).
- tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes).
- tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes).
- update internal module version number for cifs.ko (bsc#1193629).
- usb: core: Do not hold device lock while reading the &quot;descriptors&quot; sysfs file (git-fixes).
- usb: dwc3: core: Host wake up support from system suspend (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes).
- usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes).
- usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes).
- usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes).
- usb: dwc3: qcom: clean up icc init (git-fixes).
- usb: dwc3: qcom: clean up suspend callbacks (git-fixes).
- usb: dwc3: qcom: fix gadget-only builds (git-fixes).
- usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes).
- usb: dwc3: qcom: fix wakeup implementation (git-fixes).
- usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes).
- usb: dwc3: qcom: suppress unused-variable warning (git-fixes).
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes).
- usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes).
- usb: max-3421: Fix setting of I/O pins (git-fixes).
- usb: musb: Add and use inline function musb_otg_state_string (git-fixes).
- usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes).
- usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes).
- usb: musb: remove schedule work called after flush (git-fixes).
- usb: serial: option: add support for VW/Skoda &quot;Carstick LTE&quot; (git-fixes).
- vc_screen: do not clobber return value in vcs_read (git-fixes).
- vc_screen: modify vcs_size() handling in vcs_read() (git-fixes).
- vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes).
- vfs: filename_create(): fix incorrect intent (bsc#1197534).
- virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449).
- virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449).
- virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449).
- virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449).
- virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449).
- virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449).
- vmci: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes).
- vmxnet3: move rss code block under eop descriptor (bsc#1208212).
- watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes).
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes).
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes).
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes).
- wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes).
- wifi: ath11k: allow system suspend to survive ath11k (git-fixes).
- wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes).
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes).
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes).
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes).
- wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes).
- wifi: cfg80211: Fix use after free for wext (git-fixes).
- wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes).
- wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes).
- wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes).
- wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes).
- wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes).
- wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes).
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes).
- wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes).
- wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes).
- wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes).
- wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes).
- wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtw89: Add missing check for alloc_workqueue (git-fixes).
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes).
- wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes).
- x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes).
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes).
- xen-netfront: Fix NULL sring after live migration (git-fixes).
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes).
- xen/arm: Fix race in RB-tree based P2M accounting (git-fixes)
- xen/netback: do some code cleanup (git-fixes).
- xen/netback: fix build warning (git-fixes).
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes).
- xen/platform-pci: add missing free_irq() in error path (git-fixes).
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.14.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.14.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.14.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.14.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.14.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.14.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1758</id>
    <title>Security update for drbd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680607952"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
    </references>
    <description>
This update of drbd fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
</description>
    <pkglist>
      <collection>
        <package name="drbd" epoch="0" version="9.0.30~1+git.10bee2d5" release="150400.3.4.1" arch="src" src="src/drbd-9.0.30~1+git.10bee2d5-150400.3.4.1.src.rpm">
          <filename>drbd-9.0.30~1+git.10bee2d5-150400.3.4.1.src.rpm</filename>
        </package>
        <package name="drbd" epoch="0" version="9.0.30~1+git.10bee2d5" release="150400.3.4.1" arch="x86_64" src="x86_64/drbd-9.0.30~1+git.10bee2d5-150400.3.4.1.x86_64.rpm">
          <filename>drbd-9.0.30~1+git.10bee2d5-150400.3.4.1.x86_64.rpm</filename>
        </package>
        <package name="drbd" epoch="0" version="9.0.30~1+git.10bee2d5" release="150400.3.4.1" arch="aarch64" src="aarch64/drbd-9.0.30~1+git.10bee2d5-150400.3.4.1.aarch64.rpm">
          <filename>drbd-9.0.30~1+git.10bee2d5-150400.3.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1779</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680761835"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208432" id="1208432" title="disabling SysVinit might return non-zero code" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- Fix return non-zero value when disabling SysVinit service (bsc#1208432)
- Drop build requirement on libpci, it's not no longer needed
- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package, so they aren't installed in systemd based containers
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/libsystemd0-249.16-150400.8.25.7.x86_64.rpm">
          <filename>libsystemd0-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/libudev1-249.16-150400.8.25.7.x86_64.rpm">
          <filename>libudev1-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.25.7" arch="src" src="src/systemd-249.16-150400.8.25.7.src.rpm">
          <filename>systemd-249.16-150400.8.25.7.src.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/systemd-249.16-150400.8.25.7.x86_64.rpm">
          <filename>systemd-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/systemd-container-249.16-150400.8.25.7.x86_64.rpm">
          <filename>systemd-container-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/systemd-journal-remote-249.16-150400.8.25.7.x86_64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/systemd-sysvinit-249.16-150400.8.25.7.x86_64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.25.7" arch="x86_64" src="x86_64/udev-249.16-150400.8.25.7.x86_64.rpm">
          <filename>udev-249.16-150400.8.25.7.x86_64.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/libsystemd0-249.16-150400.8.25.7.aarch64.rpm">
          <filename>libsystemd0-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/libudev1-249.16-150400.8.25.7.aarch64.rpm">
          <filename>libudev1-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/systemd-249.16-150400.8.25.7.aarch64.rpm">
          <filename>systemd-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/systemd-container-249.16-150400.8.25.7.aarch64.rpm">
          <filename>systemd-container-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/systemd-journal-remote-249.16-150400.8.25.7.aarch64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/systemd-sysvinit-249.16-150400.8.25.7.aarch64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.25.7" arch="aarch64" src="aarch64/udev-249.16-150400.8.25.7.aarch64.rpm">
          <filename>udev-249.16-150400.8.25.7.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1628</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679999363"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" id="CVE-2022-23471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206235" id="1206235" title="VUL-0: CVE-2022-23471: containerd, kubernetes, kubernetes1.18, kubernetes1.23: host memory exhaustion through Terminal resize goroutine leak" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

- CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).

- Re-build containerd to use updated golang-packaging (jsc#1342).
- Update to containerd v1.6.16 for Docker v23.0.0-ce.
  * https://github.com/containerd/containerd/releases/tag/v1.6.16

</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.16" release="150000.82.2" arch="src" src="src/containerd-1.6.16-150000.82.2.src.rpm">
          <filename>containerd-1.6.16-150000.82.2.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.16" release="150000.82.2" arch="x86_64" src="x86_64/containerd-1.6.16-150000.82.2.x86_64.rpm">
          <filename>containerd-1.6.16-150000.82.2.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.16" release="150000.82.2" arch="aarch64" src="aarch64/containerd-1.6.16-150000.82.2.aarch64.rpm">
          <filename>containerd-1.6.16-150000.82.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1774</id>
    <title>Recommended update for libcontainers-common</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680693209"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1175821" id="1175821" title="Update podman to 2.0.x release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1171578" id="1171578" title="podman search does not list opensuse results" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207509" id="1207509" title="[Build 20230124] buildah is not happy with the etc/containers/storage.conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197093" id="1197093" title="rootless podman 3.4.4 fails if /home is in different filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200524" id="1200524" title="libcontainers-common: RPM installation fails unless bash is present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205536" id="1205536" title="/etc/containers/registries.conf is using deprecated syntax" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182998" id="1182998" title="libcontainers-common seems to miss prerequires" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-12122" id="SLE-12122" title="https://jira.suse.com/browse/SLE-12122" type="jira"/>
      <reference href="https://jira.suse.com/browse/SMO-143" id="SMO-143" title="https://jira.suse.com/browse/SMO-143" type="jira"/>
    </references>
    <description>This update for libcontainers-common fixes the following issues:

- Add registry.suse.com to the unqualified-search-registries (bsc#1205536)
- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  - add commented out options containers.read_only, engine.platform_to_oci_runtime,
engine.events_container_create_inspect_data, network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  - remove deprecated setting containers.userns_size
  - add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0
- Changes introduced to c/storage's storage.conf which adds a driver_priority attribute would break consumers of
libcontainer-common as long as those packages are vendoring an older c/storage version. (bsc#1207509)
- storage.conf: Unset 'driver' and set 'driver_priority' to allow podman to use 'btrfs' if available and fallback to
'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver in storage.conf
- Remove registry.suse.com from search unqualified-search-registries
- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- add container-storage-driver.sh (bsc#1197093)
- postinstall script: slight cleanup, no functional change
- set detached sigstore attachments for the SUSE controlled registries
- Fix obvious typo in containers.conf
- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and add 000-shortnames.conf to it.
- Use $() again in %post, but with a space for POSIX compliance
- Add missing Requires(post): sed (bsc#1200524)
- Make %post compatible with dash
- Switch registries.conf to v2 format
- Reintroduce SLE specific mounts config, to avoid errors on non-SLE systems
- Require util-linux-systemd for %post scripts (bsc#1182998, jsc#SLE-12122, bsc#1175821)
- Update default registry (bsc#1171578)</description>
    <pkglist>
      <collection>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.5.2" arch="noarch" src="noarch/libcontainers-common-20230214-150400.3.5.2.noarch.rpm">
          <filename>libcontainers-common-20230214-150400.3.5.2.noarch.rpm</filename>
        </package>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.5.2" arch="src" src="src/libcontainers-common-20230214-150400.3.5.2.src.rpm">
          <filename>libcontainers-common-20230214-150400.3.5.2.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1813</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681213194"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208880" id="1208880" title="Unable to locate open-vm-tools-salt-minion package" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/MSC-590" id="MSC-590" title="https://jira.suse.com/browse/MSC-590" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issue:

- Ship missing open-vm-tools-salt-minion package. (bsc#1208880)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.1.0" release="150300.23.5" arch="x86_64" src="x86_64/libvmtools0-12.1.0-150300.23.5.x86_64.rpm">
          <filename>libvmtools0-12.1.0-150300.23.5.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.23.5" arch="src" src="src/open-vm-tools-12.1.0-150300.23.5.src.rpm">
          <filename>open-vm-tools-12.1.0-150300.23.5.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.23.5" arch="x86_64" src="x86_64/open-vm-tools-12.1.0-150300.23.5.x86_64.rpm">
          <filename>open-vm-tools-12.1.0-150300.23.5.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1582</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679905922"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209212" id="1209212" title="VUL-0: EMBARGOED: CVE-2023-27536: curl: GSS delegation too eager connection re-use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209209" id="1209209" title="VUL-0: EMBARGOED: CVE-2023-27533: curl: TELNET option IAC injection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209214" id="1209214" title="VUL-0: EMBARGOED: CVE-2023-27538: curl: SSH connection too eager reuse still" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209211" id="1209211" title="VUL-0: EMBARGOED: CVE-2023-27535: curl: FTP too eager connection reuse" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209210" id="1209210" title="VUL-0: EMBARGOED: CVE-2023-27534: curl: SFTP path ~ resolving discrepancy" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535" id="CVE-2023-27535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27534" id="CVE-2023-27534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536" id="CVE-2023-27536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27538" id="CVE-2023-27538" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27538" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533" id="CVE-2023-27533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:
  
- CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209).
- CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210).
- CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211).
- CVE-2023-27536: Fixed GSS delegation too eager connection reuse (bsc#1209212).
- CVE-2023-27538: Fixed SSH connection too eager reuse still (bsc#1209214).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.18.1" arch="src" src="src/curl-7.79.1-150400.5.18.1.src.rpm">
          <filename>curl-7.79.1-150400.5.18.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.18.1" arch="x86_64" src="x86_64/curl-7.79.1-150400.5.18.1.x86_64.rpm">
          <filename>curl-7.79.1-150400.5.18.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.79.1" release="150400.5.18.1" arch="x86_64" src="x86_64/libcurl4-7.79.1-150400.5.18.1.x86_64.rpm">
          <filename>libcurl4-7.79.1-150400.5.18.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.79.1" release="150400.5.18.1" arch="aarch64" src="aarch64/curl-7.79.1-150400.5.18.1.aarch64.rpm">
          <filename>curl-7.79.1-150400.5.18.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.79.1" release="150400.5.18.1" arch="aarch64" src="aarch64/libcurl4-7.79.1-150400.5.18.1.aarch64.rpm">
          <filename>libcurl4-7.79.1-150400.5.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1796</id>
    <title>Security update for conmon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680858415"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209307" id="1209307" title="VUL-0: conmon: build against EOL go1.18" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

- rebuild against supported go 1.19 (bsc#1209307)
- no functional changes.
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="src" src="src/conmon-2.1.5-150400.3.6.1.src.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="x86_64" src="x86_64/conmon-2.1.5-150400.3.6.1.x86_64.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="aarch64" src="aarch64/conmon-2.1.5-150400.3.6.1.aarch64.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1814</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681216844"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209495" id="1209495" title="podman 4.4.2 update causes regression - ping: permission denied (are you root?)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208510" id="1208510" title="podman/quadlet generating services with wrong podman binary path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197093" id="1197093" title="rootless podman 3.4.4 fails if /home is in different filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208364" id="1208364" title="VUL-0: CVE-2023-0778: podman: symlink exchange attack in podman export volume" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0778" id="CVE-2023-0778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0778" type="cve"/>
    </references>
    <description>This update for podman fixes the following issues:

Update to version 4.4.4:

  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed

- podman.spec: Bump required version for libcontainers-common (bsc#1209495)

Update to version 4.4.3:

  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix &quot;podman logs --since --follow&quot; flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime

Update to version 4.4.2:

  * Revert &quot;CI: Temporarily disable all AWS EC2-based tasks&quot;
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes

- podman.spec: add `crun` requirement for quadlet
- podman.spec: set PREFIX at build stage (bsc#1208510)

- CVE-2023-0778: Fixed symlink exchange attack in podman export volume  (bsc#1208364)

Update to version 4.4.1:

  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test

Update to version 4.4.0:

  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output &quot;ago&quot; when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip &quot;Local forwarder, IPv4&quot; test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support &quot;die&quot; filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable &quot;podman run with ipam none driver&quot; for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support &quot;-o parent=XXX&quot; for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of &quot;--pids-limit&quot; option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with &quot;.&quot; suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert &quot;Add checkpoint image tests&quot;
  * Revert &quot;cmd/podman: add support for checkpoint images&quot;
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill

- Make the priority for picking the storage driver configurable (bsc#1197093)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.16.1" arch="src" src="src/podman-4.4.4-150400.4.16.1.src.rpm">
          <filename>podman-4.4.4-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.16.1" arch="x86_64" src="x86_64/podman-4.4.4-150400.4.16.1.x86_64.rpm">
          <filename>podman-4.4.4-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="podman-cni-config" epoch="0" version="4.4.4" release="150400.4.16.1" arch="noarch" src="noarch/podman-cni-config-4.4.4-150400.4.16.1.noarch.rpm">
          <filename>podman-cni-config-4.4.4-150400.4.16.1.noarch.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.16.1" arch="aarch64" src="aarch64/podman-4.4.4-150400.4.16.1.aarch64.rpm">
          <filename>podman-4.4.4-150400.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1717</id>
    <title>Security update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680268731"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
    </references>
    <description>
This update of grub2 fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.25.1" arch="src" src="src/grub2-2.06-150400.11.25.1.src.rpm">
          <filename>grub2-2.06-150400.11.25.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.25.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.25.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.25.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.25.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.25.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.25.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.25.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.25.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.25.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.25.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.25.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.25.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.25.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.25.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.25.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.25.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.25.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.25.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.25.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.25.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.25.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1920</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681914226"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- Update pci, usb and vendor ids
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.368" release="150000.3.57.1" arch="noarch" src="noarch/hwdata-0.368-150000.3.57.1.noarch.rpm">
          <filename>hwdata-0.368-150000.3.57.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.368" release="150000.3.57.1" arch="src" src="src/hwdata-0.368-150000.3.57.1.src.rpm">
          <filename>hwdata-0.368-150000.3.57.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1938</id>
    <title>Recommended update for NetworkManager</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682009099"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204549" id="1204549" title="cloud-netconfig does not support NetworkManager" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205529" id="1205529" title="ModemManager does not intitialize the modem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194715" id="1194715" title="ifconfig is deprecated but still rp-pppoe rpm is still using it" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SMO-202" id="SMO-202" title="https://jira.suse.com/browse/SMO-202" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24004" id="SLE-24004" title="https://jira.suse.com/browse/SLE-24004" type="jira"/>
    </references>
    <description>This update for NetworkManager fixes the following issue:

- Adds missing NetworkManager and dependencies to Micro 5.3 (bsc#1204549, bsc#1205529)
- rp-pppoe: replace deprecated ifconfig dependency with iproute2. (bsc#1194715, jsc#SLE-24004)
</description>
    <pkglist>
      <collection>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.2.3" arch="src" src="src/NetworkManager-1.38.2-150400.3.2.3.src.rpm">
          <filename>NetworkManager-1.38.2-150400.3.2.3.src.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/NetworkManager-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>NetworkManager-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/NetworkManager-bluetooth-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>NetworkManager-bluetooth-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/NetworkManager-pppoe-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>NetworkManager-pppoe-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/NetworkManager-tui-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>NetworkManager-tui-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/NetworkManager-wwan-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>NetworkManager-wwan-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="bluez" epoch="0" version="5.62" release="150400.4.10.3" arch="src" src="src/bluez-5.62-150400.4.10.3.src.rpm">
          <filename>bluez-5.62-150400.4.10.3.src.rpm</filename>
        </package>
        <package name="libatm1" epoch="0" version="2.5.2" release="150400.14.2.3" arch="x86_64" src="x86_64/libatm1-2.5.2-150400.14.2.3.x86_64.rpm">
          <filename>libatm1-2.5.2-150400.14.2.3.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.10.3" arch="x86_64" src="x86_64/libbluetooth3-5.62-150400.4.10.3.x86_64.rpm">
          <filename>libbluetooth3-5.62-150400.4.10.3.x86_64.rpm</filename>
        </package>
        <package name="libnewt0_52" epoch="0" version="0.52.20" release="150000.7.2.3" arch="x86_64" src="x86_64/libnewt0_52-0.52.20-150000.7.2.3.x86_64.rpm">
          <filename>libnewt0_52-0.52.20-150000.7.2.3.x86_64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/libnm0-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>libnm0-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="libslang2" epoch="0" version="2.3.1a" release="150000.5.2.3" arch="x86_64" src="x86_64/libslang2-2.3.1a-150000.5.2.3.x86_64.rpm">
          <filename>libslang2-2.3.1a-150000.5.2.3.x86_64.rpm</filename>
        </package>
        <package name="linux-atm" epoch="0" version="2.5.2" release="150400.14.2.3" arch="src" src="src/linux-atm-2.5.2-150400.14.2.3.src.rpm">
          <filename>linux-atm-2.5.2-150400.14.2.3.src.rpm</filename>
        </package>
        <package name="newt" epoch="0" version="0.52.20" release="150000.7.2.3" arch="src" src="src/newt-0.52.20-150000.7.2.3.src.rpm">
          <filename>newt-0.52.20-150000.7.2.3.src.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.10.3" arch="src" src="src/ppp-2.4.7-150000.5.10.3.src.rpm">
          <filename>ppp-2.4.7-150000.5.10.3.src.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.10.3" arch="x86_64" src="x86_64/ppp-2.4.7-150000.5.10.3.x86_64.rpm">
          <filename>ppp-2.4.7-150000.5.10.3.x86_64.rpm</filename>
        </package>
        <package name="rp-pppoe" epoch="0" version="3.12" release="150000.6.6.2" arch="src" src="src/rp-pppoe-3.12-150000.6.6.2.src.rpm">
          <filename>rp-pppoe-3.12-150000.6.6.2.src.rpm</filename>
        </package>
        <package name="rp-pppoe" epoch="0" version="3.12" release="150000.6.6.2" arch="x86_64" src="x86_64/rp-pppoe-3.12-150000.6.6.2.x86_64.rpm">
          <filename>rp-pppoe-3.12-150000.6.6.2.x86_64.rpm</filename>
        </package>
        <package name="slang" epoch="0" version="2.3.1a" release="150000.5.2.3" arch="src" src="src/slang-2.3.1a-150000.5.2.3.src.rpm">
          <filename>slang-2.3.1a-150000.5.2.3.src.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.2" release="150400.3.2.3" arch="x86_64" src="x86_64/typelib-1_0-NM-1_0-1.38.2-150400.3.2.3.x86_64.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.2-150400.3.2.3.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.2" release="150400.3.2.3" arch="s390x" src="s390x/NetworkManager-bluetooth-1.38.2-150400.3.2.3.s390x.rpm">
          <filename>NetworkManager-bluetooth-1.38.2-150400.3.2.3.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.2" release="150400.3.2.3" arch="s390x" src="s390x/NetworkManager-cloud-setup-1.38.2-150400.3.2.3.s390x.rpm">
          <filename>NetworkManager-cloud-setup-1.38.2-150400.3.2.3.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.2" release="150400.3.2.3" arch="s390x" src="s390x/NetworkManager-pppoe-1.38.2-150400.3.2.3.s390x.rpm">
          <filename>NetworkManager-pppoe-1.38.2-150400.3.2.3.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.2" release="150400.3.2.3" arch="s390x" src="s390x/NetworkManager-tui-1.38.2-150400.3.2.3.s390x.rpm">
          <filename>NetworkManager-tui-1.38.2-150400.3.2.3.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.2" release="150400.3.2.3" arch="s390x" src="s390x/NetworkManager-wwan-1.38.2-150400.3.2.3.s390x.rpm">
          <filename>NetworkManager-wwan-1.38.2-150400.3.2.3.s390x.rpm</filename>
        </package>
        <package name="libatm1" epoch="0" version="2.5.2" release="150400.14.2.3" arch="s390x" src="s390x/libatm1-2.5.2-150400.14.2.3.s390x.rpm">
          <filename>libatm1-2.5.2-150400.14.2.3.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.10.3" arch="s390x" src="s390x/libbluetooth3-5.62-150400.4.10.3.s390x.rpm">
          <filename>libbluetooth3-5.62-150400.4.10.3.s390x.rpm</filename>
        </package>
        <package name="libnewt0_52" epoch="0" version="0.52.20" release="150000.7.2.3" arch="s390x" src="s390x/libnewt0_52-0.52.20-150000.7.2.3.s390x.rpm">
          <filename>libnewt0_52-0.52.20-150000.7.2.3.s390x.rpm</filename>
        </package>
        <package name="libslang2" epoch="0" version="2.3.1a" release="150000.5.2.3" arch="s390x" src="s390x/libslang2-2.3.1a-150000.5.2.3.s390x.rpm">
          <filename>libslang2-2.3.1a-150000.5.2.3.s390x.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.10.3" arch="s390x" src="s390x/ppp-2.4.7-150000.5.10.3.s390x.rpm">
          <filename>ppp-2.4.7-150000.5.10.3.s390x.rpm</filename>
        </package>
        <package name="rp-pppoe" epoch="0" version="3.12" release="150000.6.6.2" arch="s390x" src="s390x/rp-pppoe-3.12-150000.6.6.2.s390x.rpm">
          <filename>rp-pppoe-3.12-150000.6.6.2.s390x.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/NetworkManager-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>NetworkManager-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/NetworkManager-bluetooth-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>NetworkManager-bluetooth-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/NetworkManager-cloud-setup-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>NetworkManager-cloud-setup-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/NetworkManager-pppoe-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>NetworkManager-pppoe-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/NetworkManager-tui-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>NetworkManager-tui-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/NetworkManager-wwan-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>NetworkManager-wwan-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="libatm1" epoch="0" version="2.5.2" release="150400.14.2.3" arch="aarch64" src="aarch64/libatm1-2.5.2-150400.14.2.3.aarch64.rpm">
          <filename>libatm1-2.5.2-150400.14.2.3.aarch64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.10.3" arch="aarch64" src="aarch64/libbluetooth3-5.62-150400.4.10.3.aarch64.rpm">
          <filename>libbluetooth3-5.62-150400.4.10.3.aarch64.rpm</filename>
        </package>
        <package name="libnewt0_52" epoch="0" version="0.52.20" release="150000.7.2.3" arch="aarch64" src="aarch64/libnewt0_52-0.52.20-150000.7.2.3.aarch64.rpm">
          <filename>libnewt0_52-0.52.20-150000.7.2.3.aarch64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/libnm0-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>libnm0-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
        <package name="libslang2" epoch="0" version="2.3.1a" release="150000.5.2.3" arch="aarch64" src="aarch64/libslang2-2.3.1a-150000.5.2.3.aarch64.rpm">
          <filename>libslang2-2.3.1a-150000.5.2.3.aarch64.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.10.3" arch="aarch64" src="aarch64/ppp-2.4.7-150000.5.10.3.aarch64.rpm">
          <filename>ppp-2.4.7-150000.5.10.3.aarch64.rpm</filename>
        </package>
        <package name="rp-pppoe" epoch="0" version="3.12" release="150000.6.6.2" arch="aarch64" src="aarch64/rp-pppoe-3.12-150000.6.6.2.aarch64.rpm">
          <filename>rp-pppoe-3.12-150000.6.6.2.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.2" release="150400.3.2.3" arch="aarch64" src="aarch64/typelib-1_0-NM-1_0-1.38.2-150400.3.2.3.aarch64.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.2-150400.3.2.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1688</id>
    <title>Security update for zstd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680106769"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4899" id="CVE-2022-4899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4899" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209533" id="1209533" title="VUL-0: CVE-2022-4899: zstd: buffer overrun in util.c" type="bugzilla"/>
    </references>
    <description>This update for zstd fixes the following issues:

- CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533).
</description>
    <pkglist>
      <collection>
        <package name="libzstd1" epoch="0" version="1.5.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libzstd1-1.5.0-150400.3.3.1.x86_64.rpm">
          <filename>libzstd1-1.5.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="zstd" epoch="0" version="1.5.0" release="150400.3.3.1" arch="src" src="src/zstd-1.5.0-150400.3.3.1.src.rpm">
          <filename>zstd-1.5.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="zstd" epoch="0" version="1.5.0" release="150400.3.3.1" arch="x86_64" src="x86_64/zstd-1.5.0-150400.3.3.1.x86_64.rpm">
          <filename>zstd-1.5.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libzstd1" epoch="0" version="1.5.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libzstd1-1.5.0-150400.3.3.1.aarch64.rpm">
          <filename>libzstd1-1.5.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="zstd" epoch="0" version="1.5.0" release="150400.3.3.1" arch="aarch64" src="aarch64/zstd-1.5.0-150400.3.3.1.aarch64.rpm">
          <filename>zstd-1.5.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1710</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680261730"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1166486" id="1166486" title="Deactivating/Activating of Octane namespaces leads to unbootable system" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197534" id="1197534" title="symlinkat call fails with incorrect error code on nfs file systems with latest coreutils package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197617" id="1197617" title="watch_queue IOC_WATCH_QUEUE_SET_SIZE memory allocation errors not propagated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198438" id="1198438" title="qla2xxx doesn't report SAN device changes to the upper SCSI layers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202353" id="1202353" title="kernel: replace mkinitrd wrapper with native dracut" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202633" id="1202633" title="[NetApp SLES15 SP4 Bug] Inconsistent reconnect behavior for auth_failure2 across NVMe transports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203331" id="1203331" title="VUL-0: CVE-2022-38096: kernel: NULL pointer dereference found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203332" id="1203332" title="VUL-0: CVE-2022-36280: kernel: out-of-bounds memory access vulnerability found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204363" id="1204363" title="VUL-0: CVE-2022-3523: kernel: use after free related to device private page handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204993" id="1204993" title="SLES15SP4 [Everest]: Failures observed after running ftrace selftests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205544" id="1205544" title="L3: potential NFS client performance degradation SLES 15 SP4 (vs 12 SP5)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205846" id="1205846" title="L3: NFS-client has higher latency compared to SLES15SP3 on Skylake-platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206103" id="1206103" title="scsi tape Error 18 (driver bt 0x0, host bt 0x0)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206224" id="1206224" title="Dell notebook drains battery during sleep" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206232" id="1206232" title="SLES15-SP4 : [P10] [denali] [max-config: 240c / 64TB] : KSELFTEST : perf-hwbreak execution comes out with errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206459" id="1206459" title="[HPS Bug] SLES15-SP4 installation process is blocked due &quot;workqueue lockup&quot; caused by ipmi_ssif driver on HPE RL300 platforms." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206492" id="1206492" title="[SLE15 SP5] Workaround the discovery table issue of UPI on SPR MCC." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206493" id="1206493" title="[SLE15 SP4] Workaround the discovery table issue of UPI on SPR MCC." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206640" id="1206640" title="[PATCH] quota: Check next/prev free block number after reading from  quota file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206824" id="1206824" title="[HPS Bug] intel_uncore_has_discovery_tables issue on Intel Sapphire Rapids MCC with SLES15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206876" id="1206876" title="[PATCH] ext4: update s_overhead_clusters in the superblock during an  on-line resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206877" id="1206877" title="[PATCH] ext4: fix extent status tree race in writeback error recovery  path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206878" id="1206878" title="[PATCH] ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206880" id="1206880" title="[PATCH] ext4: avoid resizing to a partial cluster size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206881" id="1206881" title="[PATCH] ext4: fix bug in extents parsing when eh_entries == 0 and  eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206882" id="1206882" title="[PATCH] ext4: continue to expand file system when the target size  doesn't reach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206883" id="1206883" title="[PATCH] ext4: avoid crash when inline data creation follows DIO write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206884" id="1206884" title="[PATCH] ext4: fix null-ptr-deref in ext4_write_info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206885" id="1206885" title="[PATCH] ext4: make ext4_lazyinit_thread freezable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206886" id="1206886" title="[PATCH] ext4: fix BUG_ON() when directory entry has invalid rec_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206889" id="1206889" title="[PATCH] ext4: silence the warning when evicting inode with  dioread_nolock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206894" id="1206894" title="[PATCH] ext4: fix kernel BUG in 'ext4_write_inline_data_end()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206935" id="1206935" title="15.4 kernel 5.14.21-150400.24.38-default not respecting vers=1.0 for OS/2 LAN connectivity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207051" id="1207051" title="Vul-0: CVE-2023-23559: kernel-source,kernel-rt,kernel-azure: Integer overflow in rndis_wlan that leads to a buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207270" id="1207270" title="Partner-L3: Backport Request for locking/rwsem commits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207328" id="1207328" title="kernel: backport oops_limit hardening to prevent NULL pointer dereference exploitation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207529" id="1207529" title="SLES 15 SP4 - s390/kexec: fix ipl report address for kdump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207560" id="1207560" title="VUL-0: CVE-2023-25012: kernel: hid: Use-After-Free in bigben_set_led()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207588" id="1207588" title="[PATCH] ext4: drop ineligible txn start stop APIs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207589" id="1207589" title="[PATCH] ext4: simplify updating of fast commit stats" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207590" id="1207590" title="[PATCH] ext4: fast commit may not fallback for ineligible commit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207591" id="1207591" title="[PATCH] ext4: fast commit may miss file actions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207592" id="1207592" title="[PATCH] ext4: correct cluster len and clusters changed accounting in  ext4_mb_mark_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207593" id="1207593" title="[PATCH] ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207594" id="1207594" title="[PATCH] ext4: fix bug_on in start_this_handle during umount  filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207603" id="1207603" title="[PATCH] ext4: don't run ext4lazyinit for read-only filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207605" id="1207605" title="[PATCH] ext4: don't increase iversion counter for ea_inodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207606" id="1207606" title="[PATCH] ext4: ext4_read_bh_lock() should submit IO if the buffer  isn't uptodate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207607" id="1207607" title="[PATCH] ext4: place buffer head allocation before handle start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207608" id="1207608" title="[PATCH] ext4: fix dir corruption when ext4_dx_add_entry() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207609" id="1207609" title="[PATCH] ext4: fix miss release buffer head in ext4_fc_write_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207610" id="1207610" title="[PATCH] ext4: goto right label 'failed_mount3a'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207613" id="1207613" title="[PATCH] ext4: update 'state-&gt;fc_regions_size' after successful memory  allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207615" id="1207615" title="[PATCH] ext4: factor out ext4_fc_get_tl()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207617" id="1207617" title="[PATCH] ext4: add inode table check in __ext4_get_inode_loc to aovid  possible infinite loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207618" id="1207618" title="[PATCH] ext4: add helper to check quota inums" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207619" id="1207619" title="[PATCH] ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207620" id="1207620" title="[PATCH] ext4: fix bug_on in __es_tree_search caused by bad boot  loader inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207621" id="1207621" title="[PATCH] ext4: don't allow journal inode to have encrypt flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207623" id="1207623" title="[PATCH] ext4: disable fast-commit of encrypted dir operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207624" id="1207624" title="[PATCH] ext4: don't set up encryption key during jbd2 transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207625" id="1207625" title="[PATCH] ext4: fix leaking uninitialized memory in fast-commit journal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207626" id="1207626" title="[PATCH] ext4: add missing validation of fast-commit record lengths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207628" id="1207628" title="[PATCH] ext4: fix off-by-one errors in fast-commit block filling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207630" id="1207630" title="[PATCH] ext4: fix error code return to user-space in  ext4_get_branch()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207631" id="1207631" title="[PATCH] ext4: fix delayed allocation bug in ext4_clu_mapped for  bigalloc + inline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207632" id="1207632" title="[PATCH] fs: ext4: initialize fsdata in pagecache_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207634" id="1207634" title="[PATCH] ext4: avoid unaccounted block allocation when expanding inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207635" id="1207635" title="[PATCH] ext4: allocate extended attribute value in vmalloc area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207636" id="1207636" title="[PATCH] ext4: fix inode leak in ext4_xattr_inode_create() on an error  path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207638" id="1207638" title="[PATCH] writeback: avoid use-after-free after removing device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207639" id="1207639" title="[PATCH] quota: Prevent memory allocation recursion while holding  dq_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207641" id="1207641" title="[PATCH] jbd2: fix a potential race while discarding reserved buffers  after an abort" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207642" id="1207642" title="[PATCH] vfs: Check the truncate maximum size in inode_newsize_ok()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207643" id="1207643" title="[PATCH] jbd2: wake up journal waiters in FIFO order, not LIFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207644" id="1207644" title="[PATCH] jbd2: fix potential buffer head reference count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207645" id="1207645" title="[PATCH] jbd2: fix potential use-after-free in jbd2_fc_wait_bufs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207646" id="1207646" title="[PATCH] jbd2: add miss release buffer head in fc_do_one_pass()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207647" id="1207647" title="[PATCH] mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207648" id="1207648" title="[PATCH] ext4,f2fs: fix readahead of verity data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207651" id="1207651" title="[PATCH] ocfs2: fix memory leak in ocfs2_stack_glue_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207653" id="1207653" title="[PATCH] ext4: fix deadlock due to mbcache entry corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207770" id="1207770" title="[PATCH] ocfs2: ocfs2_mount_volume does cleanup job before return  error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207773" id="1207773" title="VUL-0: CVE-2023-0045: kernel: missing Flush IBP in ib_prctl_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207845" id="1207845" title="VUL-0: CVE-2023-0597: kernel: x86/mm: Randomize per-cpu entry area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207875" id="1207875" title="[Azure][MANA][IRQ] Fix IRQ Name - Add PCI And Queue Number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208153" id="1208153" title="[MSFT][MANA][NET][Patch][SLES15] Fix accessing freed irq affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208179" id="1208179" title="Uninstall of RPM fails in %preun section" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208183" id="1208183" title="fstests xfs/179 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208212" id="1208212" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208290" id="1208290" title="Panic loop in SLE-15SP4 KOTD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208420" id="1208420" title="Intel: Backport  ISST: PUNIT device mapping with Sub-NUMA clustering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208428" id="1208428" title="ceph: flush cap releases when the session is flushed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208429" id="1208429" title="fscache_cookie_enabled: check cookie is valid before accessing it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208449" id="1208449" title="/dev/sev-guest is missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208534" id="1208534" title="Inbox lpfc version 14.2.0.9 crashes during Link Reset testing in Pt2Pt Direct Attached topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208541" id="1208541" title="When DM-MP is enabled in the OS and DIX/T10 is engaged with lpfc BlockGuard = 1, all Read and Write IOs fail when the target device is a DM device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208570" id="1208570" title="qla2xxx: update driver to 10.02.08.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208598" id="1208598" title="VUL-0: CVE-2023-1075: kernel: Type Confusion in tls_is_tx_ready" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208599" id="1208599" title="VUL-0: CVE-2023-1076: kernel: incorrect UID assigned to tun/tap sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208601" id="1208601" title="VUL-0: CVE-2023-1078: kernel: heap out-of-bounds write in rds_rm_zerocopy_callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208603" id="1208603" title="VUL-0: CVE-2023-1078: kernel: Resource leak (leading to memory exhaustion) in rds_rm_zerocopy_callback()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208605" id="1208605" title="kernel: heap out-of-bounds write in bigben_worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208607" id="1208607" title="Update Broadcom Emulex lpfc driver to 14.2.0.10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208628" id="1208628" title="[SLE15-SP5 Beta3]ice: Call Trace after rmmod ice on SLE 15 SP5 Beta3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208700" id="1208700" title="VUL-0: CVE-2023-26545: kernel-source-rt,kernel-source,kernel-source-azure: double free in net/mpls/af_mpls.c upon an allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208741" id="1208741" title="VUL-0: CVE-2023-22995: kernel-source-azure,kernel-source-rt,kernel-source: error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208759" id="1208759" title="fuse: add inode/permission checks to fileattr_get/fileattr_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208776" id="1208776" title="VUL-0: CVE-2023-22998: kernel-source,kernel-source-azure,kernel-source-rt: dereference of error pointer in virtio_gpu_object_shmem_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208777" id="1208777" title="VUL-0: CVE-2023-1095: kernel: netfilter - NULL pointer dereference in nf_tables due to zeroed list head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208784" id="1208784" title="SLES15 SP4 - system hang during 6th EEH (using lpfc/Broadcom)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208787" id="1208787" title="VUL-0: CVE-2023-0461: kernel: use-after-free in icsk_ulp_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208816" id="1208816" title="VUL-0: CVE-2023-23000: kernel: drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208837" id="1208837" title="VUL-0: CVE-2023-1118: kernel-source,kernel-source-azure,kernel-source-rt: UAF drivers/media/rc directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208843" id="1208843" title="VUL-0: CVE-2023-23004: kernel-source-azure,kernel-source-rt,kernel-source: drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208848" id="1208848" title="k10temp driver not up to date for Zen4 CPUs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209008" id="1209008" title="VUL-0: kernel-vanilla: signed by SUSE key not locked down" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209159" id="1209159" title="Partner-L3: L3-Question: false positive WARN_ON_ONCE condition in rcu_advance_cbs_nowake" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209258" id="1209258" title="fork: allow CLONE_NEWTIME in clone3 flags" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209262" id="1209262" title="mm: memcg: fix NULL pointer in  mem_cgroup_track_foreign_dirty_slowpath()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209291" id="1209291" title="VUL-0: CVE-2023-28328: kernel: A denial of service issue in  az6027 driver in drivers/media/usb/dev-usb/az6027.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209436" id="1209436" title="I915 hangs on Kernel vmlinuz-5.14.21-150400.24.49" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209457" id="1209457" title="NFSv4 broken after kernel update  (5.14.21-150400.24.46-default to 5.14.21-150400.24.49)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209504" id="1209504" title="ceph: update the time stamps and try to drop the suid/sgid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209436" id="1209436" title="I915 hangs on Kernel vmlinuz-5.14.21-150400.24.49" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" id="CVE-2022-3523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" id="CVE-2022-36280" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36280" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" id="CVE-2022-38096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" id="CVE-2023-0045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0045" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" id="CVE-2023-0461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" id="CVE-2023-0597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1075" id="CVE-2023-1075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1075" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1076" id="CVE-2023-1076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1078" id="CVE-2023-1078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1095" id="CVE-2023-1095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" id="CVE-2023-1118" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" id="CVE-2023-22995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22998" id="CVE-2023-22998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" id="CVE-2023-23000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" id="CVE-2023-23004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" id="CVE-2023-23559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" id="CVE-2023-25012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" id="CVE-2023-26545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28328" id="CVE-2023-28328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28328" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

- CVE-2022-3523: Fixed a use after free related to device private page handling (bsc#1204363).
- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773).
- CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787).
- CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741).
- CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776).
- CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816).
- CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).

The following non-security bugs were fixed:

- [infiniband] READ is &quot;data destination&quot;, not source... (git-fixes)
- [xen] fix &quot;direction&quot; argument of iov_iter_kvec() (git-fixes).
- acpi/x86: Add support for LPS0 callback handler (git-fixes).
- acpi: Do not build ACPICA with '-Os' (git-fixes).
- acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes).
- acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224).
- acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224).
- acpi: battery: Fix missing NUL-termination with large strings (git-fixes).
- acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes).
- acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes).
- acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224).
- acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224).
- acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224).
- acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224).
- acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224).
- acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224).
- acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224).
- acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224).
- acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224).
- acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224).
- acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224).
- acpica: Drop port I/O validation for some regions (git-fixes).
- acpica: nsrepair: handle cases without a return value correctly (git-fixes).
- add cherry-picked id for nouveau patch
- alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes).
- alsa: hda/ca0132: minor fix for allocation size (git-fixes).
- alsa: hda/conexant: add a new hda codec SN6180 (git-fixes).
- alsa: hda/realtek - fixed wrong gpio assigned (git-fixes).
- alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes).
- alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes).
- alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes).
- alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- alsa: hda: Do not unset preset when cleaning up codec (git-fixes).
- alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes).
- alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes).
- alsa: ice1712: Do not left ice-&gt;gpio_mutex locked in aureon_add_controls() (git-fixes).
- alsa: pci: lx6464es: fix a debug loop (git-fixes).
- applicom: Fix PCI device refcount leak in applicom_init() (git-fixes).
- arm64: Treat ESR_ELx as a 64-bit register (git-fixes)
- arm64: atomics: remove LL/SC trampolines (git-fixes)
- arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes)
- arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes)
- arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes).
- arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes).
- arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes).
- arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes).
- arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes).
- arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes).
- arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes).
- arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes).
- arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes).
- arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes).
- arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes).
- arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes)
- arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes).
- arm64: dts: juno: Add missing MHU secure-irq (git-fixes)
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes).
- arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes).
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes).
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes).
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes).
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes).
- arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes).
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes).
- arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes).
- arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes).
- arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes).
- arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes).
- arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes).
- arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes).
- arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes).
- arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes).
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes).
- arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes).
- arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes).
- arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes).
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes).
- arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes).
- arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes).
- arm64: make is_ttbrX_addr() noinstr-safe (git-fixes)
- arm64: mm: kfence: only handle translation faults (git-fixes)
- arm: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes).
- arm: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes).
- arm: bcm2835_defconfig: Enable the framebuffer (git-fixes).
- arm: dts: am5748: keep usb4_tm disabled (git-fixes)
- arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes).
- arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes).
- arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes).
- arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes)
- arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes).
- arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes)
- arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes).
- arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes).
- arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes).
- arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes)
- arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes)
- arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes).
- arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes).
- arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes)
- arm: omap: remove debug-leds driver (git-fixes)
- arm: remove some dead code (git-fixes)
- arm: renumber bits related to _TIF_WORK_MASK (git-fixes)
- arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes).
- arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes)
- arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes).
- asoc: Intel: boards: fix spelling in comments (git-fixes).
- asoc: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes).
- asoc: Intel: bytcht_es8316: move comment to the right place (git-fixes).
- asoc: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes).
- asoc: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes).
- asoc: adau7118: do not disable regulators on device unbind (git-fixes).
- asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes).
- asoc: codecs: lpass: fix incorrect mclk rate (git-fixes).
- asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes).
- asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes).
- asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes).
- asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes).
- asoc: cs42l56: fix DT probe (git-fixes).
- asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes).
- asoc: fsl_sai: Update to modern clocking terminology (git-fixes).
- asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes).
- asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes).
- asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes).
- asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes).
- asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes).
- asoc: rsnd: fixup #endif position (git-fixes).
- asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes).
- asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes).
- asoc: soc-compress: Reposition and add pcm_mutex (git-fixes).
- asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes).
- asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes).
- asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes).
- asoc: zl38060 add gpiolib dependency (git-fixes).
- asoc: zl38060: Remove spurious gpiolib select (git-fixes).
- ath9k: hif_usb: simplify if-if to if-else (git-fixes).
- ath9k: htc: clean up statistics macros (git-fixes).
- auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes).
- avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529).
- backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes).
- blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes).
- blk-mq: fix possible memleak when register 'hctx' failed (git-fixes).
- block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes).
- block/bfq-iosched.c: use &quot;false&quot; rather than &quot;BLK_RW_ASYNC&quot; (git-fixes).
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541).
- block: clear -&gt;slave_dir when dropping the main slave_dir reference (git-fixes).
- block: do not allow splitting of a REQ_NOWAIT bio (git-fixes).
- block: fix and cleanup bio_check_ro (git-fixes).
- block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes).
- block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes).
- bluetooth: L2CAP: Fix potential user-after-free (git-fixes).
- bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes).
- bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes).
- bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes).
- bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes).
- bpf, x64: Factor out emission of REX byte in more cases (git-fixes).
- bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes).
- bpf: Fix extable address check (git-fixes).
- bpf: Fix extable fixup offset (git-fixes).
- bpf: Skip task with pid=1 in send_signal_common() (git-fixes).
- can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes).
- ceph: flush cap releases when the session is flushed (bsc#1208428).
- ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504).
- cifs: Check the lease context if we actually got a lease (bsc#1193629).
- cifs: Convert struct fealist away from 1-element array (bsc#1193629).
- cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes).
- cifs: Fix oops due to uncleared server-&gt;smbd_conn in reconnect (git-fixes).
- cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629).
- cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629).
- cifs: Fix use-after-free in rdata-&gt;read_into_pages() (git-fixes).
- cifs: Fix warning and UAF when destroy the MR list (git-fixes).
- cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629).
- cifs: Replace remaining 1-element arrays (bsc#1193629).
- cifs: Replace zero-length arrays with flexible-array members (bsc#1193629).
- cifs: Use kstrtobool() instead of strtobool() (bsc#1193629).
- cifs: do not try to use rdma offload on encrypted connections (bsc#1193629).
- cifs: fix mount on old smb servers (boo#1206935).
- cifs: get rid of dns resolve worker (bsc#1193629).
- cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629).
- cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes).
- cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629).
- cifs: match even the scope id for ipv6 addresses (bsc#1193629).
- cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629).
- cifs: prevent data race in smb2_reconnect() (bsc#1193629).
- cifs: print last update time for interface list (bsc#1193629).
- cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629).
- cifs: return a single-use cfid if we did not get a lease (bsc#1193629).
- cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629).
- cifs: split out smb3_use_rdma_offload() helper (bsc#1193629).
- cifs: update ip_addr for ses only for primary chan setup (bsc#1193629).
- cifs: use tcon allocation functions even for dummy tcon (git-fixes).
- cifs: use the least loaded channel for sending requests (bsc#1193629).
- clk: HI655X: select REGMAP instead of depending on it (git-fixes).
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes).
- clk: imx: avoid memory leak (git-fixes).
- clk: mxl: Add option to override gate clks (git-fixes).
- clk: mxl: Fix a clk entry by adding relevant flags (git-fixes).
- clk: mxl: Remove redundant spinlocks (git-fixes).
- clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes).
- clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes).
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes).
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes).
- clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes).
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes).
- clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes).
- clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes).
- comedi: use menuconfig for main Comedi menu (git-fixes).
- crypto: arm64 - Fix unused variable compilation warnings of (git-fixes)
- crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes).
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes).
- crypto: crypto4xx - Call dma_unmap_page when done (git-fixes).
- crypto: essiv - Handle EBUSY correctly (git-fixes).
- crypto: qat - fix out-of-bounds read (git-fixes).
- crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes).
- crypto: seqiv - Handle EBUSY correctly (git-fixes).
- crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes).
- crypto: xts - Handle EBUSY correctly (git-fixes).
- delete patches.suse/drm-i915-Don-t-use-BAR-mappings-for-ring-buffers-wit.patch Resulted in an Oops / hang at boot (bsc#1209436)
- dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes).
- dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes).
- dmaengine: dw-edma: Drop chancnt initialization (git-fixes).
- dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes).
- dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes).
- dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes).
- dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes).
- dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes).
- dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes).
- do not sign the vanilla kernel (bsc#1209008).
- docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes).
- docs: Correct missing &quot;d_&quot; prefix for dentry_operations member d_weak_revalidate (git-fixes).
- docs: ftrace: fix a issue with duplicated subtitle number (git-fixes).
- docs: gdbmacros: print newest record (git-fixes).
- documentation/hw-vuln: Document the interaction between IBRS and STIBP (git-fixes).
- documentation: simplify and clarify DCO contribution example language (git-fixes).
- driver core: fix potential null-ptr-deref in device_add() (git-fixes).
- driver core: fix resource leak in device_add() (git-fixes).
- driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes).
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes).
- drivers: base: transport_class: fix possible memory leak (git-fixes).
- drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes).
- drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes).
- drm/amd/display: Fix potential null-deref in dm_resume (git-fixes).
- drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes).
- drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes).
- drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes).
- drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes).
- drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes).
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes).
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes).
- drm/bridge: lt8912b: Add hot plug detection (git-fixes).
- drm/bridge: lt9611: fix HPD reenablement (git-fixes).
- drm/bridge: lt9611: fix clock calculation (git-fixes).
- drm/bridge: lt9611: fix polarity programming (git-fixes).
- drm/bridge: lt9611: fix programming of video modes (git-fixes).
- drm/bridge: lt9611: fix sleep mode setup (git-fixes).
- drm/bridge: lt9611: pass a pointer to the of node (git-fixes).
- drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes).
- drm/connector: print max_requested_bpc in state debugfs (git-fixes).
- drm/edid: fix AVI infoframe aspect ratio handling (git-fixes).
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes).
- drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes).
- drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes).
- drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes).
- drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes).
- drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Fix VBT DSI DVO port handling (git-fixes).
- drm/i915: Initialize the obj flags for shmem objects (git-fixes).
- drm/mediatek: Clean dangling pointer on bind error path (git-fixes).
- drm/mediatek: Drop unbalanced obj unref (git-fixes).
- drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes).
- drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes).
- drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes).
- drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes).
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes).
- drm/msm/a5xx: fix context faults during ring switch (git-fixes).
- drm/msm/a5xx: fix highest bank bit for a530 (git-fixes).
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes).
- drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes).
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes).
- drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes).
- drm/msm/dpu: Add check for cstate (git-fixes).
- drm/msm/dpu: Add check for pstates (git-fixes).
- drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes).
- drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes).
- drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes).
- drm/msm/dpu: set pdpu-&gt;is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes).
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm/msm/gem: Add check for kmalloc (git-fixes).
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm/msm/mdp5: Add check for kzalloc (git-fixes).
- drm/msm: Fix potential invalid ptr free (git-fixes).
- drm/msm: clean event_thread-&gt;worker in case of an error (git-fixes).
- drm/msm: use strscpy instead of strncpy (git-fixes).
- drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes).
- drm/nouveau/kms/nv50-: remove unused functions (git-fixes).
- drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes).
- drm/omap: dsi: Fix excessive stack usage (git-fixes).
- drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes).
- drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes).
- drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes).
- drm/radeon: free iio for atombios when driver shutdown (git-fixes).
- drm/shmem-helper: Remove another errant put in error path (git-fixes).
- drm/sun4i: fix missing component unbind on bind errors (git-fixes).
- drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes).
- drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes).
- drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes).
- drm/vc4: hdmi: Correct interlaced timings again (git-fixes).
- drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes).
- drm/vc4: hvs: Set AXI panic modes (git-fixes).
- drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes).
- drm/virtio: exbuf-&gt;fence_fd unmodified on interrupted wait (git-fixes).
- drm/vkms: Fix memory leak in vkms_init() (git-fixes).
- drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes).
- drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes).
- drm: amd: display: Fix memory leakage (git-fixes).
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes).
- drm: tidss: Fix pixel format definition (git-fixes).
- dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes).
- dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes).
- dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes).
- dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes).
- dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes).
- dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes).
- dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes).
- eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes).
- efi: Accept version 2 of memory attributes table (git-fixes).
- exit: Add and use make_task_dead (bsc#1207328).
- exit: Allow oops_limit to be disabled (bsc#1207328).
- exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328).
- exit: Move force_uaccess back into do_exit (bsc#1207328).
- exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328).
- exit: Put an upper limit on how often we can oops (bsc#1207328).
- exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328).
- exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328).
- ext4,f2fs: fix readahead of verity data (bsc#1207648).
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619).
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- ext4: add helper to check quota inums (bsc#1207618).
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617).
- ext4: add missing validation of fast-commit record lengths (bsc#1207626).
- ext4: allocate extended attribute value in vmalloc area (bsc#1207635).
- ext4: avoid crash when inline data creation follows DIO write (bsc#1206883).
- ext4: avoid resizing to a partial cluster size (bsc#1206880).
- ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634).
- ext4: continue to expand file system when the target size does not reach (bsc#1206882).
- ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592).
- ext4: correct max_inline_xattr_value_size computing (bsc#1206878).
- ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878).
- ext4: disable fast-commit of encrypted dir operations (bsc#1207623).
- ext4: do not allow journal inode to have encrypt flag (bsc#1207621).
- ext4: do not increase iversion counter for ea_inodes (bsc#1207605).
- ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603).
- ext4: do not set up encryption key during jbd2 transaction (bsc#1207624).
- ext4: drop ineligible txn start stop APIs (bsc#1207588).
- ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606).
- ext4: factor out ext4_fc_get_tl() (bsc#1207615).
- ext4: fast commit may miss file actions (bsc#1207591).
- ext4: fast commit may not fallback for ineligible commit (bsc#1207590).
- ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886).
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0 (bsc#1206881).
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620).
- ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594).
- ext4: fix deadlock due to mbcache entry corruption (bsc#1207653).
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631).
- ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608).
- ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630).
- ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593).
- ext4: fix extent status tree race in writeback error recovery path (bsc#1206877).
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636).
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894).
- ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625).
- ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609).
- ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884).
- ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628).
- ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611).
- ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612).
- ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616).
- ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637).
- ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627).
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890).
- ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893).
- ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888).
- ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622).
- ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878).
- ext4: fix warning in 'ext4_da_release_space' (bsc#1206887).
- ext4: goto right label 'failed_mount3a' (bsc#1207610).
- ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629).
- ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633).
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614).
- ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602).
- ext4: make ext4_lazyinit_thread freezable (bsc#1206885).
- ext4: place buffer head allocation before handle start (bsc#1207607).
- ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889).
- ext4: simplify updating of fast commit stats (bsc#1207589).
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation (bsc#1207613).
- ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876).
- fbdev: omapfb: cleanup inconsistent indentation (git-fixes).
- fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes).
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes).
- firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes).
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes).
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes).
- firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes).
- firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes).
- fix page corruption caused by racy check in __free_pages (bsc#1208149).
- fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258).
- fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632).
- fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429).
- fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759).
- genirq: Provide new interfaces for affinity hints (bsc#1208153).
- gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes).
- gpio: vf610: connect GPIO label to dev name (git-fixes).
- gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes).
- gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes).
- hid: Add Mapping for System Microphone Mute (git-fixes).
- hid: asus: use spinlock to protect concurrent accesses (git-fixes).
- hid: asus: use spinlock to safely schedule workers (git-fixes).
- hid: bigben: use spinlock to protect concurrent accesses (git-fixes).
- hid: bigben: use spinlock to safely schedule workers (git-fixes).
- hid: bigben_probe(): validate report count (git-fixes).
- hid: bigben_worker() remove unneeded check on report_field (git-fixes).
- hid: core: Fix deadloop in hid_apply_multiplier (git-fixes).
- hid: elecom: add support for TrackBall 056E:011C (git-fixes).
- hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes).
- hid: multitouch: Add quirks for flipped axes (git-fixes).
- hid: retain initial quirks set up when creating HID devices (git-fixes).
- hv: fix comment typo in vmbus_channel/low_latency (git-fixes).
- hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes).
- hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes).
- hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes).
- hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes).
- hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes).
- hwmon: (coretemp) Simplify platform device handling (git-fixes).
- hwmon: (ftsteutates) Fix scaling of measurements (git-fixes).
- hwmon: (ina3221) return prober error code (git-fixes).
- hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848).
- hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes).
- hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes).
- hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes).
- hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes).
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes).
- hwmon: tmp512: drop of_match_ptr for ID table (git-fixes).
- i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes).
- i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes).
- i2c: mxs: suppress probe-deferral error message (git-fixes).
- i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes).
- ib/hfi1: Assign npages earlier (git-fixes)
- ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes)
- ib/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one errors (git-fixes)
- ib/hfi1: Restore allocated resources on failed copyout (git-fixes)
- ib/hfi1: Update RMT size calculation (git-fixes)
- ib/ipoib: Fix legacy IPoIB due to wrong number of queues (git-fixes)
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes).
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes).
- iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes).
- input: ads7846 - always set last command to PWRDOWN (git-fixes).
- input: ads7846 - do not check penirq immediately for 7845 (git-fixes).
- input: ads7846 - do not report pressure for ads7845 (git-fixes).
- input: iqs269a - configure device with a single block write (git-fixes).
- input: iqs269a - drop unused device node references (git-fixes).
- input: iqs269a - increase interrupt handler return delay (git-fixes).
- input: iqs626a - drop unused device node references (git-fixes).
- interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes).
- interconnect: fix mem leak when freeing nodes (git-fixes).
- interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes).
- iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes).
- ipmi:ssif: Add a timer between request retries (bsc#1206459).
- ipmi:ssif: Remove rtc_us_timer (bsc#1206459).
- ipmi:ssif: resend_msg() cannot fail (bsc#1206459).
- ipmi_ssif: Rename idle state and check (bsc#1206459).
- irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes)
- iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes)
- jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590).
- jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646).
- jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641).
- jbd2: fix potential buffer head reference count leak (bsc#1207644).
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645).
- jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643).
- kABI workaround for hid quirks (git-fixes).
- kABI: pci: Reduce warnings on possible RW1C corruption (kabi).
- kABI: pci: dwc: Add dw_pcie_ops.host_deinit() callback (kabi).
- kabi fix for nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes).
- kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544).
- kabi fix for: nfs: Further optimisations for 'ls -l' (git-fixes).
- kabi fix for: nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
- kabi fix for: nfsv4.1 query for fs_location attr on a new file system (Never, kabi).
- kasan: no need to unset panic_on_warn in end_report() (bsc#1207328).
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179). When -b is specified the script is prefixed with KMP_NEEDS_MKINITRD=1 which sets the variable for a simple command. However, the script is no longer a simple command. Export the variable instead.
- keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes).
- leds: led-class: Add missing put_device() to led_put() (git-fixes).
- leds: led-core: Fix refcount leak in of_led_get() (git-fixes).
- lib/mpi: Fix buffer overrun when SG is too long (git-fixes).
- lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes).
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270).
- locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270).
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270).
- locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270).
- locking/rwsem: Make handoff bit handling more consistent (bsc#1207270).
- locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270).
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270).
- locking: Add missing __sched attributes (bsc#1207270).
- makefile: link with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- mbcache: Avoid nesting of cache-&gt;c_list_lock under bit locks (bsc#1207647).
- mbcache: Fixup kABI of mb_cache_entry (bsc#1207653).
- md/bitmap: Fix bitmap chunk size overflow issues (git-fixes).
- md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes).
- md: fix a crash in mempool_free (git-fixes).
- media: coda: Add check for dcoda_iram_alloc (git-fixes).
- media: coda: Add check for kmalloc (git-fixes).
- media: i2c: imx219: Fix binning for RAW8 capture (git-fixes).
- media: i2c: imx219: Split common registers from mode tables (git-fixes).
- media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes).
- media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes).
- media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes).
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes).
- media: m5mols: fix off-by-one loop termination error (git-fixes).
- media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes).
- media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes).
- media: ov5640: Fix analogue gain control (git-fixes).
- media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes).
- media: platform: ti: Add missing check for devm_regulator_get (git-fixes).
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes).
- media: rc: gpio-ir-recv: add remove function (git-fixes).
- media: saa7134: Use video_unregister_device for radio_dev (git-fixes).
- media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes).
- media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes).
- media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes).
- media: uvcvideo: Check controls flags before accessing them (git-fixes).
- media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes).
- media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes).
- media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes).
- media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes).
- media: uvcvideo: Handle cameras with invalid descriptors (git-fixes).
- media: uvcvideo: Handle errors from calls to usb_string (git-fixes).
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes).
- media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes).
- media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes).
- media: uvcvideo: Use control names from framework (git-fixes).
- media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes).
- media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes).
- media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes).
- mei: bus-fixup:upon error print return values of send and receive (git-fixes).
- mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes).
- mfd: cs5535: Do not build on UML (git-fixes).
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes).
- misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes).
- misc: enclosure: Fix doc for enclosure_find() (git-fixes).
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262).
- mmc: jz4740: Work around bug on JZ4760(B) (git-fixes).
- mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes).
- mmc: sdhci_am654: lower power-on failed message severity (git-fixes).
- mmc: sdio: fix possible resource leaks in some error paths (git-fixes).
- move upstreamed i915 and media fixes into sorted section
- mt76: mt7915: fix polling firmware-own status (git-fixes).
- mtd: dataflash: remove duplicate SPI ID table (git-fixes).
- mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes).
- mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes).
- mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes).
- mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes).
- mtd: spi-nor: core: fix implicit declaration warning (git-fixes).
- mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes).
- mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes).
- net/rose: Fix to not accept on connected socket (git-fixes).
- net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes).
- net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes).
- net/x25: Fix to not accept on connected socket (git-fixes).
- net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes).
- net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153).
- net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
- net: mana: Fix accessing freed irq affinity_hint (bsc#1208153).
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes).
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes).
- nfc: change order inside nfc_se_io error path (git-fixes).
- nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes).
- nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes).
- nfc: pn533: initialize struct pn533_out_arg properly (git-fixes).
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes).
- nfcv3: handle out-of-order write replies (bsc#1205544).
- nfs4: Fix kmemleak when allocate slot failed (git-fixes).
- nfs: Always initialise fattr-&gt;label in nfs_fattr_alloc() (git-fixes).
- nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes).
- nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes).
- nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes).
- nfs: Further optimisations for 'ls -l' (git-fixes).
- nfs: nfs4clinet: check the return value of kstrdup() (git-fixes).
- nfs: nfsiod should not block forever in mempool_alloc() (git-fixes).
- nfs: nfsiod should not block forever in mempool_alloc() (git-fixes).
- nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes).
- nfsd: De-duplicate net_generic(nf-&gt;nf_net, nfsd_net_id) (git-fixes).
- nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes).
- nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes).
- nfsd: Fix a memory leak in an error handling path (git-fixes).
- nfsd: Fix handling of oversized nfsv4 COMPOUND requests (git-fixes).
- nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes).
- nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
- nfsd: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data (git-fixes).
- nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes).
- nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes).
- nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes).
- nfsv4 expose nfs_parse_server_name function (git-fixes).
- nfsv4 handle port presence in fs_location server string (git-fixes).
- nfsv4 only print the label when its queried (git-fixes).
- nfsv4 remove zero number of fs_locations entries error check (git-fixes).
- nfsv4 store server support for fs_location attribute (git-fixes).
- nfsv4.1 query for fs_location attr on a new file system (git-fixes).
- nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes).
- nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes).
- nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes).
- nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes).
- nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes).
- nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes).
- nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes).
- nfsv4/pnfs: Always return layout stats on layout return for flexfiles (git-fixes).
- nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes).
- nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes).
- nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes).
- nfsv4: Fix a potential state reclaim deadlock (git-fixes).
- nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes).
- nfsv4: Protect the state recovery thread against direct reclaim (git-fixes).
- nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes).
- nvdimm: disable namespace on error (bsc#1166486).
- nvme-auth: check chap ctrl_key once constructed (bsc#1202633).
- nvme-auth: clear sensitive info right after authentication completes (bsc#1202633).
- nvme-auth: convert dhchap_auth_list to an array (bsc#1202633).
- nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633).
- nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633).
- nvme-auth: do not override ctrl keys before validation (bsc#1202633).
- nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633).
- nvme-auth: do not use NVMe status codes (bsc#1202633).
- nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633).
- nvme-auth: fix smatch warning complaints (bsc#1202633).
- nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633).
- nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633).
- nvme-auth: mark nvme_auth_wq static (bsc#1202633).
- nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633).
- nvme-auth: remove redundant auth_work flush (bsc#1202633).
- nvme-auth: remove redundant buffer deallocations (bsc#1202633).
- nvme-auth: remove redundant deallocations (bsc#1202633).
- nvme-auth: remove redundant if statement (bsc#1202633).
- nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633).
- nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633).
- nvme-auth: rename authentication work elements (bsc#1202633).
- nvme-auth: use workqueue dedicated to authentication (bsc#1202633).
- nvme-fabrics: show well known discovery name (bsc#1200054).
- objtool: Add a missing comma to avoid string concatenation (bsc#1207328).
- ocfs2: Fix data corruption after failed write (bsc#1208542).
- ocfs2: clear dinode links count in case of error (bsc#1207650).
- ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649).
- ocfs2: fix crash when mount with quota enabled (bsc#1207640).
- ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652).
- ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651).
- ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770).
- ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768).
- ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771).
- panic: Consolidate open-coded panic_on_warn checks (bsc#1207328).
- panic: Introduce warn_limit (bsc#1207328).
- panic: unset panic_on_warn inside panic() (bsc#1207328).
- pci/iov: Enlarge virtfn sysfs name buffer (git-fixes).
- pci/pm: Always disable PTM for all devices during suspend (git-fixes).
- pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes).
- pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes).
- pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes).
- pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes).
- pci: Add ACS quirk for Wangxun NICs (git-fixes).
- pci: Add SolidRun vendor ID (git-fixes).
- pci: Align extra resources for hotplug bridges properly (git-fixes).
- pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes).
- pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes).
- pci: Fix dropping valid root bus resources with .end = zero (git-fixes).
- pci: Reduce warnings on possible RW1C corruption (git-fixes).
- pci: Take other bus devices into account when distributing resources (git-fixes).
- pci: Unify delay handling for reset and resume (git-fixes).
- pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes).
- pci: aardvark: Fix link training (git-fixes).
- pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes).
- pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes).
- pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes).
- pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes).
- pci: qcom: Fix host-init error handling (git-fixes).
- pci: qcom: Fix pipe clock imbalance (git-fixes).
- pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes).
- pci: xgene: Revert &quot;PCI: xgene: Use inbound resources for setup&quot; (git-fixes).
- perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes).
- perf/core: Call LSM hook after copying perf_event_attr (git fixes).
- perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes).
- perf/core: Inherit event_caps (git fixes).
- perf/x86/amd: fix potential integer overflow on shift of a int (git fixes).
- perf/x86/intel/ds: Fix precise store latency handling (git fixes).
- perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes).
- perf/x86/intel/pt: Fix sampling using single range output (git fixes).
- perf/x86/intel/pt: Relax address filter validation (git fixes).
- perf/x86/intel/uncore: Add Emerald Rapids (git fixes).
- perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes).
- perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes).
- perf/x86/intel: Add Emerald Rapids (git fixes).
- perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes).
- perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes).
- perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes).
- perf/x86/intel: Fix event constraints for ICL (git fixes).
- perf/x86/intel: Fix pebs event constraints for ADL (git fixes).
- perf/x86/intel: Fix pebs event constraints for ICL (git fixes).
- perf/x86/intel: Fix pebs event constraints for SPR (git fixes).
- perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes).
- perf/x86/msr: Add Emerald Rapids (git fixes).
- perf/x86/rapl: Add support for Intel AlderLake-N (git fixes).
- perf/x86/rapl: Treat Tigerlake like Icelake (git fixes).
- perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes).
- perf/x86/rapl: fix AMD event handling (git fixes).
- perf/x86/uncore: Add Raptor Lake uncore support (git fixes).
- perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes).
- perf/x86/uncore: Add new Raptor Lake S support (git fixes).
- perf/x86/uncore: Clean up uncore_pci_ids (git fixes).
- perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492).
- perf: Always wake the parent event (git fixes).
- perf: Fix possible memleak in pmu_dev_alloc() (git fixes).
- phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes).
- phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes).
- pinctrl: aspeed: Fix confusing types in return value (git-fixes).
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes).
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes).
- pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes).
- pinctrl: mediatek: Initialize variable *buf to zero (git-fixes).
- pinctrl: mediatek: fix coding style (git-fixes).
- pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes).
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes).
- pinctrl: single: fix potential NULL dereference (git-fixes).
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes).
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420).
- platform/x86: amd-pmc: Correct usage of SMU version (git-fixes).
- platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes).
- platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes).
- platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes).
- platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes).
- platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes).
- platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes).
- powercap: fix possible name leak in powercap_register_zone() (git-fixes).
- powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612).
- printf: fix errname.c list (git-fixes).
- prlimit: do_prlimit needs to have a speculation check (bsc#1209256).
- pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes).
- qede: avoid uninitialized entries in coal_entry array (bsc#1205846).
- qede: fix interrupt coalescing configuration (bsc#1205846).
- quota: Check next/prev free block number after reading from quota file (bsc#1206640).
- quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639).
- rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159).
- rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes)
- rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes)
- rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes)
- rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes)
- rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes)
- rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes)
- rdma/siw: Fix user page pinning accounting (git-fixes)
- rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes)
- refresh patches.suse/NFSv3-handle-out-of-order-write-replies  (bsc#1209457).
- regulator: Flag uncontrollable regulators as always_on (git-fixes).
- regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes).
- regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes).
- regulator: max77802: Bounds check regulator id against opmode (git-fixes).
- regulator: s5m8767: Bounds check id indexing into arrays (git-fixes).
- remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes).
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes).
- replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments.
- require suse-kernel-rpm-scriptlets at all times. The kernel packages call scriptlets for each stage, add the dependency to make it clear to libzypp that the scriptlets are required. There is no special dependency for posttrans, these scriptlets run when transactions are resolved. The plain dependency has to be used to support posttrans.
- revert &quot;HID: logitech-hidpp: add a module parameter to keep firmware gestures&quot; (git-fixes).
- revert &quot;char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol&quot; (git-fixes).
- revert &quot;crypto: rsa-pkcs1pad - Replace GFP_ATOMIC with GFP_KERNEL in pkcs1pad_encrypt_sign_complete&quot; (git-fixes).
- revert &quot;usb: dwc3: qcom: Keep power domain on to retain controller status&quot; (git-fixes).
- rpm/group-source-files.pl: Deal with {pre,post}fixed / in location When the source file location provided with -L is either prefixed or postfixed with forward slash, the script get stuck in a infinite loop inside calc_dirs() where $path is an empty string. user@localhost:/tmp&gt; perl &quot;$HOME/group-source-files.pl&quot; -D devel.files -N nondevel.files -L /usr/src/linux-5.14.21-150500.41/ ... path = /usr/src/linux-5.14.21-150500.41/Documentation/Kconfig path = /usr/src/linux-5.14.21-150500.41/Documentation path = /usr/src/linux-5.14.21-150500.41 path = /usr/src path = /usr path = path = path = ... # Stuck in an infinite loop This workarounds the issue by breaking out the loop once path is an empty string. For a proper fix we'd want something that filesystem-aware, but this workaround should be enough for the rare occation that this script is ran manually. Link: http://mailman.suse.de/mlarch/SuSE/kernel/2023/kernel.2023.03/msg00024.html
- rpm/group-source-files.pl: Fix output difference when / is in location While previous attempt to fix group-source-files.pl in 6d651362c38 &quot;rpm/group-source-files.pl: Deal with {pre,post}fixed / in location&quot; breaks the infinite loop, it does not properly address the issue. Having prefixed and/or postfixed forward slash still result in different output. This commit changes the script to use the Perl core module File::Spec for proper path manipulation to give consistent output.
- rpm/kernel-obs-build.spec.in: Remove SLE11 cruft
- rtc: allow rtc_read_alarm without read_alarm callback (git-fixes).
- rtc: pm8xxx: fix set-alarm race (git-fixes).
- rtc: sun6i: Always export the internal oscillator (git-fixes).
- runrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes).
- s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes).
- s390/kexec: fix ipl report address for kdump (bsc#1207529).
- scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607).
- scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607).
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607).
- scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607).
- scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607).
- scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534).
- scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607).
- scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607).
- scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607).
- scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607).
- scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607).
- scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103).
- scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570).
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570).
- scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570).
- scsi: qla2xxx: Fix erroneous link down (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570).
- scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570).
- scsi: qla2xxx: Fix printk() format string (bsc#1208570).
- scsi: qla2xxx: Fix stalled login (bsc#1208570).
- scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570).
- scsi: qla2xxx: Relocate/rename vp map (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (bsc#1208570).
- scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570).
- scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570).
- scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570).
- scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570).
- scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570).
- scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570).
- scsi: qla2xxx: edif: Fix clang warning (bsc#1208570).
- scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570).
- scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570).
- scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570).
- scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes).
- sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes).
- selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes).
- selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103).
- selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103).
- selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Move perror closer to its use (bsc#1206232).
- selftests: forwarding: lib: quote the sysctl values (git-fixes).
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes).
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes).
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes).
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes).
- serial: 8250_em: Fix UART port type (git-fixes).
- serial: 8250_fsl: fix handle_irq locking (git-fixes).
- serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes).
- serial: qcom-geni: fix console shutdown hang (git-fixes).
- serial: sc16is7xx: setup GPIO controller later in probe (git-fixes).
- serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes).
- signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes).
- signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes).
- signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes).
- signal: Implement force_fatal_sig (git-fixes).
- smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629).
- soundwire: cadence: Do not overflow the command FIFOs (git-fixes).
- spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes).
- spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes).
- spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes).
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes).
- spi: tegra210-quad: Fix validate combined sequence (git-fixes).
- staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes).
- staging: mt7621-dts: change palmbus address to lower case (git-fixes).
- struct uvc_device move flush_status new member to end (git-fixes).
- sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes).
- sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes).
- sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes).
- sunrpc: Fix socket waits for write buffer space (git-fixes).
- sunrpc: Return true/false (not 1/0) from bool functions (git-fixes).
- supported.conf: Remove duplicate entry.
- sysctl: add a new register_sysctl_init() interface (bsc#1207328).
- thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes).
- thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes).
- thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes).
- thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes).
- thermal/drivers/tsens: fix slope values for msm8939 (git-fixes).
- thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes).
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes).
- thermal: intel: Fix unsigned comparison with less than zero (git-fixes).
- thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes).
- thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes).
- thermal: intel: quark_dts: fix error pointer dereference (git-fixes).
- tools/iio/iio_utils:fix memory leak (git-fixes).
- tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes).
- trace_events_hist: add check for return value of 'create_hist_field' (git-fixes).
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes).
- tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes).
- tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes).
- tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes).
- tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes).
- tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes).
- tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes).
- tty: serial: imx: Handle RS485 DE signal active high (git-fixes).
- tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes).
- tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes).
- ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328).
- update internal module version number for cifs.ko (bsc#1193629).
- update suse/hid-bigben_probe-validate-report-count (bsc#1208605).
- usb: core: Do not hold device lock while reading the &quot;descriptors&quot; sysfs file (git-fixes).
- usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes).
- usb: dwc3: core: Host wake up support from system suspend (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes).
- usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes).
- usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes).
- usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes).
- usb: dwc3: qcom: clean up icc init (git-fixes).
- usb: dwc3: qcom: clean up suspend callbacks (git-fixes).
- usb: dwc3: qcom: fix gadget-only builds (git-fixes).
- usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes).
- usb: dwc3: qcom: fix wakeup implementation (git-fixes).
- usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes).
- usb: dwc3: qcom: suppress unused-variable warning (git-fixes).
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes).
- usb: ene_usb6250: Allocate enough memory for full object (git-fixes).
- usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes).
- usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes).
- usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes).
- usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes).
- usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes).
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes).
- usb: max-3421: Fix setting of I/O pins (git-fixes).
- usb: musb: Add and use inline function musb_otg_state_string (git-fixes).
- usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes).
- usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes).
- usb: musb: remove schedule work called after flush (git-fixes).
- usb: serial: option: add support for VW/Skoda &quot;Carstick LTE&quot; (git-fixes).
- usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes).
- usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes).
- usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes).
- usb: uvc: Enumerate valid values for color matching (git-fixes).
- vc_screen: do not clobber return value in vcs_read (git-fixes).
- vc_screen: modify vcs_size() handling in vcs_read() (git-fixes).
- vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes).
- vfio/type1: prevent underflow of locked_vm via exec() (git-fixes).
- vfio/type1: restore locked_vm (git-fixes).
- vfio/type1: track locked_vm per dma (git-fixes).
- vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642).
- vfs: filename_create(): fix incorrect intent (bsc#1197534).
- virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449).
- virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449).
- virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449).
- virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449).
- virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449).
- virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449).
- vmci: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes).
- vmxnet3: move rss code block under eop descriptor (bsc#1208212).
- watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617).
- watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (jsc#PED-3210) Also enable module in aarch64 default configuration.
- watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes).
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes).
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes).
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes).
- wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes).
- wifi: ath11k: allow system suspend to survive ath11k (git-fixes).
- wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes).
- wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes).
- wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes).
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes).
- wifi: ath9k: use proper statements in conditionals (git-fixes).
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes).
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes).
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes).
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes).
- wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes).
- wifi: cfg80211: Fix use after free for wext (git-fixes).
- wifi: cfg80211: Partial revert &quot;wifi: cfg80211: Fix use after free for wext&quot; (git-fixes).
- wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes).
- wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes).
- wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes).
- wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes).
- wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes).
- wifi: mt7601u: fix an integer underflow (git-fixes).
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes).
- wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes).
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes).
- wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes).
- wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes).
- wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes).
- wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes).
- wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes).
- wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes).
- wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtw89: Add missing check for alloc_workqueue (git-fixes).
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes).
- wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- writeback: avoid use-after-free after removing device (bsc#1207638).
- x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes).
- x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes).
- x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848).
- x86/asm: Fix an assembler warning with current binutils (git-fixes).
- x86/boot: Avoid using Intel mnemonics in AT&amp;T syntax asm (git-fixes).
- x86/cpu: Add CPU model numbers for Meteor Lake (git fixes).
- x86/cpu: Add Raptor Lake to Intel family (git fixes).
- x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes).
- x86/cpu: Add new Raptor Lake CPU model number (git fixes).
- x86/cpu: Add several Intel server CPU model numbers (git fixes).
- x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes).
- x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes).
- x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes).
- x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes).
- x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes).
- x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes).
- x86/perf/zhaoxin: Add stepping check for ZXC (git fixes).
- x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes).
- x86/perf: Default set FREEZE_ON_SMI for all (git fixes).
- x86/sgx: Fix free page accounting (git-fixes).
- x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes).
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes).
- x86: acpi: cstate: Optimize C3 entry on AMD CPUs (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- xen-netfront: Fix NULL sring after live migration (git-fixes).
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes).
- xen/arm: Fix race in RB-tree based P2M accounting (git-fixes)
- xen/netback: do some code cleanup (git-fixes).
- xen/netback: fix build warning (git-fixes).
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes).
- xen/platform-pci: add missing free_irq() in error path (git-fixes).
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes).
- xfs: estimate post-merge refcounts correctly (bsc#1208183).
- xfs: hoist refcount record merge predicates (bsc#1208183).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.55.3" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.55.3.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.55.3.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.55.3" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.55.3.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.55.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.55.3.150400.24.22.7" arch="src" src="src/kernel-default-base-5.14.21-150400.24.55.3.150400.24.22.7.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.55.3.150400.24.22.7.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.55.3.150400.24.22.7" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.55.3.150400.24.22.7.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.55.3.150400.24.22.7.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.55.3" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.55.3.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.55.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.55.3.150400.24.22.7" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.55.3.150400.24.22.7.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.55.3.150400.24.22.7.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1885</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681809334"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206195" id="1206195" title="lvm with --type raid 1 is unbootable due to missing module in initramfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206439" id="1206439" title="dracut-fips misses hmac dependencies" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.335.gccf7fbc6:
  * Always include all drivers that LVM can use (bsc#1206195)
  * Require libopenssl1_1-hmac for dracut-fips (bsc#1206439)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="src" src="src/dracut-055+suse.335.gccf7fbc6-150400.3.19.1.src.rpm">
          <filename>dracut-055+suse.335.gccf7fbc6-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="x86_64" src="x86_64/dracut-055+suse.335.gccf7fbc6-150400.3.19.1.x86_64.rpm">
          <filename>dracut-055+suse.335.gccf7fbc6-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.335.gccf7fbc6-150400.3.19.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.335.gccf7fbc6-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.335.gccf7fbc6-150400.3.19.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.335.gccf7fbc6-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="aarch64" src="aarch64/dracut-055+suse.335.gccf7fbc6-150400.3.19.1.aarch64.rpm">
          <filename>dracut-055+suse.335.gccf7fbc6-150400.3.19.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.335.gccf7fbc6-150400.3.19.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.335.gccf7fbc6-150400.3.19.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.335.gccf7fbc6" release="150400.3.19.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.335.gccf7fbc6-150400.3.19.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.335.gccf7fbc6-150400.3.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1609</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1679988353"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197534" id="1197534" title="symlinkat call fails with incorrect error code on nfs file systems with latest coreutils package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197617" id="1197617" title="watch_queue IOC_WATCH_QUEUE_SET_SIZE memory allocation errors not propagated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198438" id="1198438" title="qla2xxx doesn't report SAN device changes to the upper SCSI layers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200054" id="1200054" title="[NetApp SLES15 SP4 Bug]: Host always displays unique discovery NQN, instead of the actual NQN used for the connect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202353" id="1202353" title="kernel: replace mkinitrd wrapper with native dracut" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202633" id="1202633" title="[NetApp SLES15 SP4 Bug] Inconsistent reconnect behavior for auth_failure2 across NVMe transports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203331" id="1203331" title="VUL-0: CVE-2022-38096: kernel: NULL pointer dereference found in vmwgfx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204363" id="1204363" title="VUL-0: CVE-2022-3523: kernel: use after free related to device private page handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204993" id="1204993" title="SLES15SP4 [Everest]: Failures observed after running ftrace selftests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205544" id="1205544" title="L3: potential NFS client performance degradation SLES 15 SP4 (vs 12 SP5)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205846" id="1205846" title="L3: NFS-client has higher latency compared to SLES15SP3 on Skylake-platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206103" id="1206103" title="L3: scsi tape Error 18 (driver bt 0x0, host bt 0x0)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206232" id="1206232" title="SLES15-SP4 : [P10] [denali] [max-config: 240c / 64TB] : KSELFTEST : perf-hwbreak execution comes out with errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206492" id="1206492" title="[SLE15 SP5] Workaround the discovery table issue of UPI on SPR MCC." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206493" id="1206493" title="[SLE15 SP4] Workaround the discovery table issue of UPI on SPR MCC." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206824" id="1206824" title="[HPS Bug] intel_uncore_has_discovery_tables issue on Intel Sapphire Rapids MCC with SLES15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206935" id="1206935" title="15.4 kernel 5.14.21-150400.24.38-default not respecting vers=1.0 for OS/2 LAN connectivity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207051" id="1207051" title="Vul-0: CVE-2023-23559: kernel-source,kernel-rt,kernel-azure: Integer overflow in rndis_wlan that leads to a buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207270" id="1207270" title="Partner-L3: Backport Request for locking/rwsem commits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207529" id="1207529" title="SLES 15 SP4 - s390/kexec: fix ipl report address for kdump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207560" id="1207560" title="VUL-0: CVE-2023-25012: kernel: hid: Use-After-Free in bigben_set_led()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207845" id="1207845" title="VUL-0: CVE-2023-0597: kernel: x86/mm: Randomize per-cpu entry area" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207846" id="1207846" title="VUL-0: CVE-2023-25012: The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain regist" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208179" id="1208179" title="Uninstall of RPM fails in %preun section" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208212" id="1208212" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208420" id="1208420" title="Intel: Backport  ISST: PUNIT device mapping with Sub-NUMA clustering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208449" id="1208449" title="/dev/sev-guest is missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208534" id="1208534" title="Inbox lpfc version 14.2.0.9 crashes during Link Reset testing in Pt2Pt Direct Attached topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208541" id="1208541" title="When DM-MP is enabled in the OS and DIX/T10 is engaged with lpfc BlockGuard = 1, all Read and Write IOs fail when the target device is a DM device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208542" id="1208542" title="ocfs2: part of the file is corrupted upon write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208570" id="1208570" title="qla2xxx: update driver to 10.02.08.200-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208598" id="1208598" title="VUL-0: CVE-2023-1075: kernel: Type Confusion in tls_is_tx_ready" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208599" id="1208599" title="VUL-0: CVE-2023-1076: kernel: incorrect UID assigned to tun/tap sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208601" id="1208601" title="VUL-0: CVE-2023-1078: kernel: heap out-of-bounds write in rds_rm_zerocopy_callback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208605" id="1208605" title="kernel: heap out-of-bounds write in bigben_worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208607" id="1208607" title="Update Broadcom Emulex lpfc driver to 14.2.0.10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208628" id="1208628" title="[SLE15-SP5 Beta3]ice: Call Trace after rmmod ice on SLE 15 SP5 Beta3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208700" id="1208700" title="VUL-0: CVE-2023-26545: kernel-source-rt,kernel-source,kernel-source-azure: double free in net/mpls/af_mpls.c upon an allocation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208741" id="1208741" title="VUL-0: CVE-2023-22995: kernel-source-azure,kernel-source-rt,kernel-source: error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208759" id="1208759" title="fuse: add inode/permission checks to fileattr_get/fileattr_set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208776" id="1208776" title="VUL-0: CVE-2023-22998: kernel-source,kernel-source-azure,kernel-source-rt: dereference of error pointer in virtio_gpu_object_shmem_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208777" id="1208777" title="VUL-0: CVE-2023-1095: kernel: netfilter - NULL pointer dereference in nf_tables due to zeroed list head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208784" id="1208784" title="SLES15 SP4 - system hang during 6th EEH (using lpfc/Broadcom)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208787" id="1208787" title="VUL-0: CVE-2023-0461: kernel: use-after-free in icsk_ulp_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208816" id="1208816" title="VUL-0: CVE-2023-23000: kernel: drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208837" id="1208837" title="VUL-0: CVE-2023-1118: kernel-source,kernel-source-azure,kernel-source-rt: UAF drivers/media/rc directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208843" id="1208843" title="VUL-0: CVE-2023-23004: kernel-source-azure,kernel-source-rt,kernel-source: drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208848" id="1208848" title="k10temp driver not up to date for Zen4 CPUs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209008" id="1209008" title="VUL-0: kernel-vanilla: signed by SUSE key not locked down" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209159" id="1209159" title="Partner-L3: L3-Question: false positive WARN_ON_ONCE condition in rcu_advance_cbs_nowake" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209258" id="1209258" title="fork: allow CLONE_NEWTIME in clone3 flags" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209262" id="1209262" title="mm: memcg: fix NULL pointer in  mem_cgroup_track_foreign_dirty_slowpath()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209291" id="1209291" title="VUL-0: CVE-2023-28328: kernel: A denial of service issue in  az6027 driver in drivers/media/usb/dev-usb/az6027.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209436" id="1209436" title="I915 hangs on Kernel vmlinuz-5.14.21-150400.24.49" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209457" id="1209457" title="NFSv4 broken after kernel update  (5.14.21-150400.24.46-default to 5.14.21-150400.24.49)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209504" id="1209504" title="ceph: update the time stamps and try to drop the suid/sgid" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" id="CVE-2022-3523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" id="CVE-2022-38096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" id="CVE-2023-0461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" id="CVE-2023-0597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1075" id="CVE-2023-1075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1075" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1076" id="CVE-2023-1076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1076" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1078" id="CVE-2023-1078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1095" id="CVE-2023-1095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" id="CVE-2023-1118" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1118" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" id="CVE-2023-22995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22995" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22998" id="CVE-2023-22998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" id="CVE-2023-23000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23000" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" id="CVE-2023-23004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" id="CVE-2023-23559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" id="CVE-2023-25012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25012" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" id="CVE-2023-26545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28328" id="CVE-2023-28328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28328" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

- CVE-2022-3523: Fixed use after free related to device private page handling (bsc#1204363).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787).
- CVE-2023-0597: Fixed lack of randomization of  per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741).
- CVE-2023-22998: Fixed misinterpretation of the irtio_gpu_object_shmem_init() return value (bsc#1208776).
- CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816).
- CVE-2023-23004: Fixed misinterpretation of the get_sg_table return value in arm/malidp_planes.c (bsc#1208843).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-25012: Fixed a use-After-Free in bigben_set_led() in hid (bsc#1207560).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).

The following non-security bugs were fixed:

- [xen] fix &quot;direction&quot; argument of iov_iter_kvec() (git-fixes).
- acpi: Do not build ACPICA with '-Os' (git-fixes).
- acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes).
- acpi: battery: Fix missing NUL-termination with large strings (git-fixes).
- acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes).
- acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes).
- acpica: Drop port I/O validation for some regions (git-fixes).
- acpica: nsrepair: handle cases without a return value correctly (git-fixes).
- alsa: hda/ca0132: minor fix for allocation size (git-fixes).
- alsa: hda/conexant: add a new hda codec SN6180 (git-fixes).
- alsa: hda/realtek - fixed wrong gpio assigned (git-fixes).
- alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes).
- alsa: hda: Do not unset preset when cleaning up codec (git-fixes).
- alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes).
- alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes).
- alsa: ice1712: Do not left ice-&gt;gpio_mutex locked in aureon_add_controls() (git-fixes).
- applicom: Fix PCI device refcount leak in applicom_init() (git-fixes).
- arm64: Treat ESR_ELx as a 64-bit register (git-fixes)
- arm64: atomics: remove LL/SC trampolines (git-fixes)
- arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes)
- arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes)
- arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes).
- arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes).
- arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes).
- arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes).
- arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes).
- arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes).
- arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes).
- arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes).
- arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes).
- arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes).
- arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes).
- arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes)
- arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes).
- arm64: dts: juno: Add missing MHU secure-irq (git-fixes)
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes).
- arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes).
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes).
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes).
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes).
- arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes).
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes).
- arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes).
- arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes).
- arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes).
- arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes).
- arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes).
- arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes).
- arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes).
- arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes).
- arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes).
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes).
- arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes).
- arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes).
- arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes).
- arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes).
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes).
- arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes).
- arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes).
- arm64: make is_ttbrX_addr() noinstr-safe (git-fixes)
- arm64: mm: kfence: only handle translation faults (git-fixes)
- arm: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes).
- arm: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes).
- arm: bcm2835_defconfig: Enable the framebuffer (git-fixes).
- arm: dts: am5748: keep usb4_tm disabled (git-fixes)
- arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes).
- arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes).
- arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes).
- arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes).
- arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes)
- arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes).
- arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes)
- arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes).
- arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes).
- arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes).
- arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes)
- arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes)
- arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes).
- arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes).
- arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes)
- arm: omap: remove debug-leds driver (git-fixes)
- arm: remove some dead code (git-fixes)
- arm: renumber bits related to _TIF_WORK_MASK (git-fixes)
- arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes).
- arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes)
- arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes).
- ascpi / x86: Add support for LPS0 callback handler (git-fixes).
- asoc: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes).
- asoc: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes).
- asoc: adau7118: do not disable regulators on device unbind (git-fixes).
- asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes).
- asoc: codecs: lpass: fix incorrect mclk rate (git-fixes).
- asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes).
- asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes).
- asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes).
- asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes).
- asoc: cs42l56: fix DT probe (git-fixes).
- asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes).
- asoc: fsl_sai: Update to modern clocking terminology (git-fixes).
- asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes).
- asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes).
- asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes).
- asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes).
- asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes).
- asoc: rsnd: fixup #endif position (git-fixes).
- asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes).
- asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes).
- asoc: soc-compress: Reposition and add pcm_mutex (git-fixes).
- asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes).
- asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes).
- asoc: zl38060 add gpiolib dependency (git-fixes).
- asoc: zl38060: Remove spurious gpiolib select (git-fixes).
- ath9k: hif_usb: simplify if-if to if-else (git-fixes).
- ath9k: htc: clean up statistics macros (git-fixes).
- auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes).
- avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529).
- backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes).
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541).
- bluetooth: L2CAP: Fix potential user-after-free (git-fixes).
- bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes).
- bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes).
- bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes).
- bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes).
- bpf, x64: Factor out emission of REX byte in more cases (git-fixes).
- bpf: Fix extable address check (git-fixes).
- bpf: Fix extable fixup offset (git-fixes).
- ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504).
- cifs: Check the lease context if we actually got a lease (bsc#1193629).
- cifs: Convert struct fealist away from 1-element array (bsc#1193629).
- cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes).
- cifs: Fix oops due to uncleared server-&gt;smbd_conn in reconnect (git-fixes).
- cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629).
- cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629).
- cifs: Fix use-after-free in rdata-&gt;read_into_pages() (git-fixes).
- cifs: Fix warning and UAF when destroy the MR list (git-fixes).
- cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629).
- cifs: Replace remaining 1-element arrays (bsc#1193629).
- cifs: Replace zero-length arrays with flexible-array members (bsc#1193629).
- cifs: Use kstrtobool() instead of strtobool() (bsc#1193629).
- cifs: do not try to use rdma offload on encrypted connections (bsc#1193629).
- cifs: fix mount on old smb servers (boo#1206935).
- cifs: get rid of dns resolve worker (bsc#1193629).
- cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629).
- cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes).
- cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629).
- cifs: match even the scope id for ipv6 addresses (bsc#1193629).
- cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629).
- cifs: prevent data race in smb2_reconnect() (bsc#1193629).
- cifs: print last update time for interface list (bsc#1193629).
- cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629).
- cifs: return a single-use cfid if we did not get a lease (bsc#1193629).
- cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629).
- cifs: split out smb3_use_rdma_offload() helper (bsc#1193629).
- cifs: update ip_addr for ses only for primary chan setup (bsc#1193629).
- cifs: use tcon allocation functions even for dummy tcon (git-fixes).
- cifs: use the least loaded channel for sending requests (bsc#1193629).
- clk: HI655X: select REGMAP instead of depending on it (git-fixes).
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes).
- clk: imx: avoid memory leak (git-fixes).
- clk: mxl: Add option to override gate clks (git-fixes).
- clk: mxl: Fix a clk entry by adding relevant flags (git-fixes).
- clk: mxl: Remove redundant spinlocks (git-fixes).
- clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes).
- clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes).
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes).
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes).
- clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes).
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes).
- clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes).
- clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes).
- comedi: use menuconfig for main Comedi menu (git-fixes).
- crypto: arm64 - Fix unused variable compilation warnings of (git-fixes)
- crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes).
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes).
- crypto: crypto4xx - Call dma_unmap_page when done (git-fixes).
- crypto: essiv - Handle EBUSY correctly (git-fixes).
- crypto: qat - fix out-of-bounds read (git-fixes).
- crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes).
- crypto: seqiv - Handle EBUSY correctly (git-fixes).
- crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes).
- crypto: xts - Handle EBUSY correctly (git-fixes).
- delete suse/drm-i915-Don-t-use-BAR-mappings-for-ring-buffers-wit Resulted in an Oops / hang at boot (bsc#1209436)
- dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes).
- dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes).
- dmaengine: dw-edma: Drop chancnt initialization (git-fixes).
- dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes).
- dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes).
- dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes).
- dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes).
- dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes).
- dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes).
- do not sign the vanilla kernel (bsc#1209008).
- docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes).
- docs: Correct missing &quot;d_&quot; prefix for dentry_operations member d_weak_revalidate (git-fixes).
- docs: ftrace: fix a issue with duplicated subtitle number (git-fixes).
- docs: gdbmacros: print newest record (git-fixes).
- documentation/hw-vuln: Document the interaction between IBRS and STIBP (git-fixes).
- documentation: simplify and clarify DCO contribution example language (git-fixes).
- driver core: fix potential null-ptr-deref in device_add() (git-fixes).
- driver core: fix resource leak in device_add() (git-fixes).
- driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes).
- drivers: base: transport_class: fix possible memory leak (git-fixes).
- drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes).
- drm/amd/display: Fix potential null-deref in dm_resume (git-fixes).
- drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes).
- drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes).
- drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes).
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes).
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes).
- drm/bridge: lt8912b: Add hot plug detection (git-fixes).
- drm/bridge: lt9611: fix HPD reenablement (git-fixes).
- drm/bridge: lt9611: fix clock calculation (git-fixes).
- drm/bridge: lt9611: fix polarity programming (git-fixes).
- drm/bridge: lt9611: fix programming of video modes (git-fixes).
- drm/bridge: lt9611: fix sleep mode setup (git-fixes).
- drm/bridge: lt9611: pass a pointer to the of node (git-fixes).
- drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes).
- drm/connector: print max_requested_bpc in state debugfs (git-fixes).
- drm/edid: fix AVI infoframe aspect ratio handling (git-fixes).
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes).
- drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes).
- drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes).
- drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes).
- drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes).
- drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/mediatek: Clean dangling pointer on bind error path (git-fixes).
- drm/mediatek: Drop unbalanced obj unref (git-fixes).
- drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes).
- drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes).
- drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes).
- drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes).
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes).
- drm/msm/a5xx: fix context faults during ring switch (git-fixes).
- drm/msm/a5xx: fix highest bank bit for a530 (git-fixes).
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes).
- drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes).
- drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes).
- drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes).
- drm/msm/dpu: Add check for cstate (git-fixes).
- drm/msm/dpu: Add check for pstates (git-fixes).
- drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes).
- drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes).
- drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes).
- drm/msm/dpu: set pdpu-&gt;is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes).
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm/msm/gem: Add check for kmalloc (git-fixes).
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm/msm/mdp5: Add check for kzalloc (git-fixes).
- drm/msm: Fix potential invalid ptr free (git-fixes).
- drm/msm: clean event_thread-&gt;worker in case of an error (git-fixes).
- drm/msm: use strscpy instead of strncpy (git-fixes).
- drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes).
- drm/nouveau/kms/nv50-: remove unused functions (git-fixes).
- drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes).
- drm/omap: dsi: Fix excessive stack usage (git-fixes).
- drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes).
- drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes).
- drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes).
- drm/radeon: free iio for atombios when driver shutdown (git-fixes).
- drm/shmem-helper: Remove another errant put in error path (git-fixes).
- drm/sun4i: fix missing component unbind on bind errors (git-fixes).
- drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes).
- drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes).
- drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes).
- drm/vc4: hdmi: Correct interlaced timings again (git-fixes).
- drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes).
- drm/vc4: hvs: Set AXI panic modes (git-fixes).
- drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes).
- drm/vkms: Fix memory leak in vkms_init() (git-fixes).
- drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes).
- drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes).
- drm: amd: display: Fix memory leakage (git-fixes).
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes).
- drm: tidss: Fix pixel format definition (git-fixes).
- dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes).
- dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes).
- dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes).
- dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes).
- dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes).
- dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes).
- dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes).
- eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes).
- fbdev: omapfb: cleanup inconsistent indentation (git-fixes).
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes).
- firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes).
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes).
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes).
- firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes).
- firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes).
- fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258).
- fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759).
- gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes).
- gpio: vf610: connect GPIO label to dev name (git-fixes).
- gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes).
- gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes).
- hid: Add Mapping for System Microphone Mute (git-fixes).
- hid: asus: use spinlock to protect concurrent accesses (git-fixes).
- hid: asus: use spinlock to safely schedule workers (git-fixes).
- hid: bigben: use spinlock to protect concurrent accesses (git-fixes).
- hid: bigben: use spinlock to safely schedule workers (git-fixes).
- hid: bigben_probe(): validate report count (git-fixes).
- hid: bigben_worker() remove unneeded check on report_field (git-fixes).
- hid: core: Fix deadloop in hid_apply_multiplier (git-fixes).
- hid: elecom: add support for TrackBall 056E:011C (git-fixes).
- hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes).
- hid: multitouch: Add quirks for flipped axes (git-fixes).
- hid: retain initial quirks set up when creating HID devices (git-fixes).
- hv: fix comment typo in vmbus_channel/low_latency (git-fixes).
- hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes).
- hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes).
- hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes).
- hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes).
- hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes).
- hwmon: (coretemp) Simplify platform device handling (git-fixes).
- hwmon: (ftsteutates) Fix scaling of measurements (git-fixes).
- hwmon: (ina3221) return prober error code (git-fixes).
- hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848).
- hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes).
- hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes).
- hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes).
- hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes).
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes).
- hwmon: tmp512: drop of_match_ptr for ID table (git-fixes).
- i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes).
- ib/hfi1: Assign npages earlier (git-fixes)
- ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes)
- ib/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one errors (git-fixes)
- ib/hfi1: Update RMT size calculation (git-fixes)
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes).
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes).
- iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes).
- input: ads7846 - always set last command to PWRDOWN (git-fixes).
- input: ads7846 - do not check penirq immediately for 7845 (git-fixes).
- input: ads7846 - do not report pressure for ads7845 (git-fixes).
- input: iqs269a - configure device with a single block write (git-fixes).
- input: iqs269a - drop unused device node references (git-fixes).
- input: iqs269a - increase interrupt handler return delay (git-fixes).
- input: iqs626a - drop unused device node references (git-fixes).
- interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes).
- interconnect: fix mem leak when freeing nodes (git-fixes).
- interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes).
- iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes).
- irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes)
- iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes)
- kABI workaround for hid quirks (git-fixes).
- kABI: pci: Reduce warnings on possible RW1C corruption (kabi).
- kABI: pci: dwc: Add dw_pcie_ops.host_deinit() callback (kabi).
- kabi fix for nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes).
- kabi fix for: nfs: Further optimisations for 'ls -l' (git-fixes).
- kabi fix for: nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
- kabi fix for: nfsv3: handle out-of-order write replies (bsc#1205544).
- kabi fix for: nfsv4.1 query for fs_location attr on a new file system (Never, kabi).
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179). When -b is specified the script is prefixed with KMP_NEEDS_MKINITRD=1 which sets the variable for a simple command. However, the script is no longer a simple command. Export the variable instead.
- keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes).
- kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too.
- leds: led-class: Add missing put_device() to led_put() (git-fixes).
- leds: led-core: Fix refcount leak in of_led_get() (git-fixes).
- lib/mpi: Fix buffer overrun when SG is too long (git-fixes).
- lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes).
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270).
- locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270).
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270).
- locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270).
- locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270).
- locking/rwsem: Make handoff bit handling more consistent (bsc#1207270).
- locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270).
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270).
- locking: Add missing __sched attributes (bsc#1207270).
- makefile: link with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- media: coda: Add check for dcoda_iram_alloc (git-fixes).
- media: coda: Add check for kmalloc (git-fixes).
- media: i2c: imx219: Fix binning for RAW8 capture (git-fixes).
- media: i2c: imx219: Split common registers from mode tables (git-fixes).
- media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes).
- media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes).
- media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes).
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes).
- media: m5mols: fix off-by-one loop termination error (git-fixes).
- media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes).
- media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes).
- media: ov5640: Fix analogue gain control (git-fixes).
- media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes).
- media: platform: ti: Add missing check for devm_regulator_get (git-fixes).
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes).
- media: rc: gpio-ir-recv: add remove function (git-fixes).
- media: saa7134: Use video_unregister_device for radio_dev (git-fixes).
- media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes).
- media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes).
- media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes).
- media: uvcvideo: Check controls flags before accessing them (git-fixes).
- media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes).
- media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes).
- media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes).
- media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes).
- media: uvcvideo: Handle cameras with invalid descriptors (git-fixes).
- media: uvcvideo: Handle errors from calls to usb_string (git-fixes).
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes).
- media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes).
- media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes).
- media: uvcvideo: Use control names from framework (git-fixes).
- media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes).
- media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes).
- media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes).
- mei: bus-fixup:upon error print return values of send and receive (git-fixes).
- mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes).
- mfd: cs5535: Do not build on UML (git-fixes).
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes).
- misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes).
- misc: enclosure: Fix doc for enclosure_find() (git-fixes).
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262).
- mmc: jz4740: Work around bug on JZ4760(B) (git-fixes).
- mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes).
- mmc: sdhci_am654: lower power-on failed message severity (git-fixes).
- mmc: sdio: fix possible resource leaks in some error paths (git-fixes).
- move upstreamed i915 and media fixes into sorted section
- mt76: mt7915: fix polling firmware-own status (git-fixes).
- mtd: dataflash: remove duplicate SPI ID table (git-fixes).
- mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes).
- mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes).
- mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes).
- mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes).
- mtd: spi-nor: core: fix implicit declaration warning (git-fixes).
- mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes).
- mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes).
- net/rose: Fix to not accept on connected socket (git-fixes).
- net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes).
- nfc: change order inside nfc_se_io error path (git-fixes).
- nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes).
- nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes).
- nfc: pn533: initialize struct pn533_out_arg properly (git-fixes).
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes).
- nfs4/pnfs: Always return layout stats on layout return for flexfiles (git-fixes).
- nfs4: Fix kmemleak when allocate slot failed (git-fixes).
- nfs: Always initialise fattr-&gt;label in nfs_fattr_alloc() (git-fixes).
- nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes).
- nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes).
- nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes).
- nfs: Further optimisations for 'ls -l' (git-fixes).
- nfs: nfs4clinet: check the return value of kstrdup() (git-fixes).
- nfs: nfsiod should not block forever in mempool_alloc() (git-fixes).
- nfs: nfsiod should not block forever in mempool_alloc() (git-fixes).
- nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes).
- nfsd: De-duplicate net_generic(nf-&gt;nf_net, nfsd_net_id) (git-fixes).
- nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes).
- nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes).
- nfsd: Fix a memory leak in an error handling path (git-fixes).
- nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes).
- nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes).
- nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
- nfsd: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data (git-fixes).
- nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes).
- nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes).
- nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes).
- nfsv3: handle out-of-order write replies (bsc#1205544).
- nfsv4 expose nfs_parse_server_name function (git-fixes).
- nfsv4 handle port presence in fs_location server string (git-fixes).
- nfsv4 only print the label when its queried (git-fixes).
- nfsv4 remove zero number of fs_locations entries error check (git-fixes).
- nfsv4 store server support for fs_location attribute (git-fixes).
- nfsv4.1 query for fs_location attr on a new file system (git-fixes).
- nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes).
- nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes).
- nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes).
- nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes).
- nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes).
- nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes).
- nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes).
- nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes).
- nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes).
- nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes).
- nfsv4: Fix a potential state reclaim deadlock (git-fixes).
- nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes).
- nfsv4: Protect the state recovery thread against direct reclaim (git-fixes).
- nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes).
- nvme-auth: check chap ctrl_key once constructed (bsc#1202633).
- nvme-auth: clear sensitive info right after authentication completes (bsc#1202633).
- nvme-auth: convert dhchap_auth_list to an array (bsc#1202633).
- nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633).
- nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633).
- nvme-auth: do not override ctrl keys before validation (bsc#1202633).
- nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633).
- nvme-auth: do not use NVMe status codes (bsc#1202633).
- nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633).
- nvme-auth: fix smatch warning complaints (bsc#1202633).
- nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633).
- nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633).
- nvme-auth: mark nvme_auth_wq static (bsc#1202633).
- nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633).
- nvme-auth: remove redundant auth_work flush (bsc#1202633).
- nvme-auth: remove redundant buffer deallocations (bsc#1202633).
- nvme-auth: remove redundant deallocations (bsc#1202633).
- nvme-auth: remove redundant if statement (bsc#1202633).
- nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633).
- nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633).
- nvme-auth: rename authentication work elements (bsc#1202633).
- nvme-auth: use workqueue dedicated to authentication (bsc#1202633).
- nvme-fabrics: show well known discovery name (bsc#1200054).
- ocfs2: Fix data corruption after failed write (bsc#1208542).
- pci/ioc: Enlarge virtfn sysfs name buffer (git-fixes).
- pci/pm: Always disable PTM for all devices during suspend (git-fixes).
- pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes).
- pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes).
- pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes).
- pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes).
- pci: Add ACS quirk for Wangxun NICs (git-fixes).
- pci: Add SolidRun vendor ID (git-fixes).
- pci: Align extra resources for hotplug bridges properly (git-fixes).
- pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes).
- pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes).
- pci: Fix dropping valid root bus resources with .end = zero (git-fixes).
- pci: Reduce warnings on possible RW1C corruption (git-fixes).
- pci: Take other bus devices into account when distributing resources (git-fixes).
- pci: Unify delay handling for reset and resume (git-fixes).
- pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes).
- pci: aardvark: Fix link training (git-fixes).
- pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes).
- pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes).
- pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes).
- pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes).
- pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes).
- pci: qcom: Fix host-init error handling (git-fixes).
- pci: qcom: Fix pipe clock imbalance (git-fixes).
- pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes).
- pci: xgene: Revert &quot;PCI: xgene: Use inbound resources for setup&quot; (git-fixes).
- perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes).
- perf/core: Call LSM hook after copying perf_event_attr (git fixes).
- perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes).
- perf/core: Inherit event_caps (git fixes).
- perf/x86/amd: fix potential integer overflow on shift of a int (git fixes).
- perf/x86/intel/ds: Fix precise store latency handling (git fixes).
- perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes).
- perf/x86/intel/pt: Fix sampling using single range output (git fixes).
- perf/x86/intel/pt: Relax address filter validation (git fixes).
- perf/x86/intel/uncore: Add Emerald Rapids (git fixes).
- perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes).
- perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes).
- perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes).
- perf/x86/intel: Add Emerald Rapids (git fixes).
- perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes).
- perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes).
- perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes).
- perf/x86/intel: Fix event constraints for ICL (git fixes).
- perf/x86/intel: Fix pebs event constraints for ADL (git fixes).
- perf/x86/intel: Fix pebs event constraints for ICL (git fixes).
- perf/x86/intel: Fix pebs event constraints for SPR (git fixes).
- perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes).
- perf/x86/msr: Add Emerald Rapids (git fixes).
- perf/x86/rapl: Add support for Intel AlderLake-N (git fixes).
- perf/x86/rapl: Treat Tigerlake like Icelake (git fixes).
- perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes).
- perf/x86/rapl: fix AMD event handling (git fixes).
- perf/x86/uncore: Add Raptor Lake uncore support (git fixes).
- perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes).
- perf/x86/uncore: Add new Raptor Lake S support (git fixes).
- perf/x86/uncore: Clean up uncore_pci_ids (git fixes).
- perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492).
- perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492).
- perf: Always wake the parent event (git fixes).
- perf: Fix possible memleak in pmu_dev_alloc() (git fixes).
- phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes).
- phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes).
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes).
- pinctrl: mediatek: Initialize variable *buf to zero (git-fixes).
- pinctrl: mediatek: fix coding style (git-fixes).
- pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes).
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes).
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes).
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420).
- platform/x86: amd-pmc: Correct usage of SMU version (git-fixes).
- platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes).
- platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes).
- platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes).
- platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes).
- powercap: fix possible name leak in powercap_register_zone() (git-fixes).
- powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612).
- printf: fix errname.c list (git-fixes).
- prlimit: do_prlimit needs to have a speculation check (bsc#1209256).
- pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes).
- qede: avoid uninitialized entries in coal_entry array (bsc#1205846).
- qede: fix interrupt coalescing configuration (bsc#1205846).
- rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159).
- rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes)
- rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes)
- rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes)
- rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes)
- rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes)
- rdma/siw: Fix user page pinning accounting (git-fixes)
- refresh suse/NFSv3-handle-out-of-order-write-replies. Careless typo - might cause bsc#1209457
- refresh suse/ice-clear-stale-Tx-queue-settings-before-configuring. Fix bug introduced by broken backport (bsc#1208628).
- regulator: Flag uncontrollable regulators as always_on (git-fixes).
- regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes).
- regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes).
- regulator: max77802: Bounds check regulator id against opmode (git-fixes).
- regulator: s5m8767: Bounds check id indexing into arrays (git-fixes).
- remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes).
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes).
- replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments.
- require suse-kernel-rpm-scriptlets at all times. The kernel packages call scriptlets for each stage, add the dependency to make it clear to libzypp that the scriptlets are required. There is no special dependency for posttrans, these scriptlets run when transactions are resolved. The plain dependency has to be used to support posttrans.
- revert &quot;char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol&quot; (git-fixes).
- revert &quot;crypto: rsa-pkcs1pad - Replace GFP_ATOMIC with GFP_KERNEL in pkcs1pad_encrypt_sign_complete&quot; (git-fixes).
- revert &quot;hid: logitech-hidpp: add a module parameter to keep firmware gestures&quot; (git-fixes).
- revert &quot;usb: dwc3: qcom: Keep power domain on to retain controller status&quot; (git-fixes).
- rpm/group-source-files.pl: Deal with {pre,post}fixed / in location When the source file location provided with -L is either prefixed or postfixed with forward slash, the script get stuck in a infinite loop inside calc_dirs() where $path is an empty string. user@localhost:/tmp&gt; perl &quot;$HOME/group-source-files.pl&quot; -D devel.files -N nondevel.files -L /usr/src/linux-5.14.21-150500.41/ ... path = /usr/src/linux-5.14.21-150500.41/Documentation/Kconfig path = /usr/src/linux-5.14.21-150500.41/Documentation path = /usr/src/linux-5.14.21-150500.41 path = /usr/src path = /usr path = path = path = ... # Stuck in an infinite loop This workarounds the issue by breaking out the loop once path is an empty string. For a proper fix we'd want something that filesystem-aware, but this workaround should be enough for the rare occation that this script is ran manually. Link: http://mailman.suse.de/mlarch/SuSE/kernel/2023/kernel.2023.03/msg00024.html
- rpm/kernel-obs-build.spec.in: Remove SLE11 cruft
- rtc: allow rtc_read_alarm without read_alarm callback (git-fixes).
- rtc: pm8xxx: fix set-alarm race (git-fixes).
- rtc: sun6i: Always export the internal oscillator (git-fixes).
- s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes).
- s390/kexec: fix ipl report address for kdump (bsc#1207529).
- scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607).
- scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607).
- scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607).
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607).
- scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607).
- scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607).
- scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534).
- scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607).
- scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607).
- scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607).
- scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607).
- scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607).
- scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103).
- scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570).
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570).
- scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570).
- scsi: qla2xxx: Fix erroneous link down (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570).
- scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570).
- scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570).
- scsi: qla2xxx: Fix printk() format string (bsc#1208570).
- scsi: qla2xxx: Fix stalled login (bsc#1208570).
- scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570).
- scsi: qla2xxx: Relocate/rename vp map (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570).
- scsi: qla2xxx: Remove dead code (bsc#1208570).
- scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570).
- scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570).
- scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570).
- scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570).
- scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570).
- scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570).
- scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570).
- scsi: qla2xxx: edif: Fix clang warning (bsc#1208570).
- scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570).
- scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570).
- scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570).
- scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes).
- sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes).
- selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes).
- selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103).
- selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103).
- selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232).
- selftests/powerpc: Move perror closer to its use (bsc#1206232).
- serial: 8250_em: Fix UART port type (git-fixes).
- serial: 8250_fsl: fix handle_irq locking (git-fixes).
- serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes).
- serial: qcom-geni: fix console shutdown hang (git-fixes).
- serial: sc16is7xx: setup GPIO controller later in probe (git-fixes).
- serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes).
- signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes).
- signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes).
- signal: Implement force_fatal_sig (git-fixes).
- smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629).
- soundwire: cadence: Do not overflow the command FIFOs (git-fixes).
- spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes).
- spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes).
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes).
- spi: tegra210-quad: Fix validate combined sequence (git-fixes).
- staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes).
- staging: mt7621-dts: change palmbus address to lower case (git-fixes).
- struct uvc_device move flush_status new member to end (git-fixes).
- sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes).
- sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes).
- sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes).
- sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes).
- sunrpc: Fix socket waits for write buffer space (git-fixes).
- sunrpc: Return true/false (not 1/0) from bool functions (git-fixes).
- supported.conf: Remove duplicate entry.
- thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes).
- thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes).
- thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes).
- thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes).
- thermal/drivers/tsens: fix slope values for msm8939 (git-fixes).
- thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes).
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes).
- thermal: intel: Fix unsigned comparison with less than zero (git-fixes).
- thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes).
- thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes).
- thermal: intel: quark_dts: fix error pointer dereference (git-fixes).
- tools/iio/iio_utils:fix memory leak (git-fixes).
- tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes).
- tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes).
- tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes).
- tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes).
- tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes).
- tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes).
- tty: serial: imx: Handle RS485 DE signal active high (git-fixes).
- tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes).
- tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes).
- update internal module version number for cifs.ko (bsc#1193629).
- update suse/hid-bigben_probe-validate-report-count (bsc#1208605). Added bugzilla reference to fix already applied
- usb: core: Do not hold device lock while reading the &quot;descriptors&quot; sysfs file (git-fixes).
- usb: dwc3: core: Host wake up support from system suspend (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes).
- usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes).
- usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes).
- usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes).
- usb: dwc3: qcom: clean up icc init (git-fixes).
- usb: dwc3: qcom: clean up suspend callbacks (git-fixes).
- usb: dwc3: qcom: fix gadget-only builds (git-fixes).
- usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes).
- usb: dwc3: qcom: fix wakeup implementation (git-fixes).
- usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes).
- usb: dwc3: qcom: suppress unused-variable warning (git-fixes).
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes).
- usb: ene_usb6250: Allocate enough memory for full object (git-fixes).
- usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes).
- usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes).
- usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes).
- usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes).
- usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes).
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes).
- usb: max-3421: Fix setting of I/O pins (git-fixes).
- usb: musb: Add and use inline function musb_otg_state_string (git-fixes).
- usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes).
- usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes).
- usb: musb: remove schedule work called after flush (git-fixes).
- usb: serial: option: add support for VW/Skoda &quot;Carstick LTE&quot; (git-fixes).
- usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes).
- usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes).
- usb: uvc: Enumerate valid values for color matching (git-fixes).
- vc_screen: do not clobber return value in vcs_read (git-fixes).
- vc_screen: modify vcs_size() handling in vcs_read() (git-fixes).
- vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes).
- vfio/type1: prevent underflow of locked_vm via exec() (git-fixes).
- vfio/type1: restore locked_vm (git-fixes).
- vfio/type1: track locked_vm per dma (git-fixes).
- vfs: filename_create(): fix incorrect intent (bsc#1197534).
- virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449).
- virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449).
- virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449).
- virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449).
- virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449).
- virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449).
- vmci: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes).
- vmxnet3: move rss code block under eop descriptor (bsc#1208212).
- watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617).
- watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes).
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes).
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes).
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes).
- wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes).
- wifi: ath11k: allow system suspend to survive ath11k (git-fixes).
- wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes).
- wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes).
- wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes).
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes).
- wifi: ath9k: use proper statements in conditionals (git-fixes).
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes).
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes).
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes).
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes).
- wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes).
- wifi: cfg80211: Fix use after free for wext (git-fixes).
- wifi: cfg80211: Partial revert &quot;wifi: cfg80211: Fix use after free for wext&quot; (git-fixes).
- wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes).
- wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes).
- wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes).
- wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes).
- wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes).
- wifi: mt7601u: fix an integer underflow (git-fixes).
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes).
- wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes).
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes).
- wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes).
- wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes).
- wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes).
- wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes).
- wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes).
- wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes).
- wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- wifi: rtw89: Add missing check for alloc_workqueue (git-fixes).
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes).
- wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes).
- x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848).
- x86/cpu: Add CPU model numbers for Meteor Lake (git fixes).
- x86/cpu: Add Raptor Lake to Intel family (git fixes).
- x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes).
- x86/cpu: Add new Raptor Lake CPU model number (git fixes).
- x86/cpu: Add several Intel server CPU model numbers (git fixes).
- x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes).
- x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes).
- x86/perf/zhaoxin: Add stepping check for ZXC (git fixes).
- x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes).
- x86/perf: Default set FREEZE_ON_SMI for all (git fixes).
- x86/sgx: Fix free page accounting (git-fixes).
- x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes).
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- xen-netfront: Fix NULL sring after live migration (git-fixes).
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes).
- xen/arm: Fix race in RB-tree based P2M accounting (git-fixes)
- xen/netback: do some code cleanup (git-fixes).
- xen/netback: fix build warning (git-fixes).
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes).
- xen/platform-pci: add missing free_irq() in error path (git-fixes).
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.18.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.18.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.18.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.18.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.18.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1915</id>
    <title>Recommended update for kexec-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681913867"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202820" id="1202820" title="kexec --load on UEFI with secure boot" type="bugzilla"/>
    </references>
    <description>This update for kexec-tools fixes the following issues:

- kexec-bootloader: Add -a argument to load using kexec_load_file() when available (bsc#1202820).
</description>
    <pkglist>
      <collection>
        <package name="kexec-tools" epoch="0" version="2.0.20" release="150400.16.6.1" arch="src" src="src/kexec-tools-2.0.20-150400.16.6.1.src.rpm">
          <filename>kexec-tools-2.0.20-150400.16.6.1.src.rpm</filename>
        </package>
        <package name="kexec-tools" epoch="0" version="2.0.20" release="150400.16.6.1" arch="x86_64" src="x86_64/kexec-tools-2.0.20-150400.16.6.1.x86_64.rpm">
          <filename>kexec-tools-2.0.20-150400.16.6.1.x86_64.rpm</filename>
        </package>
        <package name="kexec-tools" epoch="0" version="2.0.20" release="150400.16.6.1" arch="aarch64" src="aarch64/kexec-tools-2.0.20-150400.16.6.1.aarch64.rpm">
          <filename>kexec-tools-2.0.20-150400.16.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1957</id>
    <title>Recommended update for bcache-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682334321"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208425" id="1208425" title="bcache-tools recognizes a non-zoned SSD as zoned device" type="bugzilla"/>
    </references>
    <description>This update for bcache-tools fixes the following issues:

- Improve device recognition (bsc#1208425)
</description>
    <pkglist>
      <collection>
        <package name="bcache-tools" epoch="0" version="1.1" release="150400.8.3.1" arch="src" src="src/bcache-tools-1.1-150400.8.3.1.src.rpm">
          <filename>bcache-tools-1.1-150400.8.3.1.src.rpm</filename>
        </package>
        <package name="bcache-tools" epoch="0" version="1.1" release="150400.8.3.1" arch="x86_64" src="x86_64/bcache-tools-1.1-150400.8.3.1.x86_64.rpm">
          <filename>bcache-tools-1.1-150400.8.3.1.x86_64.rpm</filename>
        </package>
        <package name="bcache-tools" epoch="0" version="1.1" release="150400.8.3.1" arch="s390x" src="s390x/bcache-tools-1.1-150400.8.3.1.s390x.rpm">
          <filename>bcache-tools-1.1-150400.8.3.1.s390x.rpm</filename>
        </package>
        <package name="bcache-tools" epoch="0" version="1.1" release="150400.8.3.1" arch="aarch64" src="aarch64/bcache-tools-1.1-150400.8.3.1.aarch64.rpm">
          <filename>bcache-tools-1.1-150400.8.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1841</id>
    <title>Recommended update for drbd-utils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681448089"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208922" id="1208922" title="15SP3 to 15SP4 rolling migration failing because of drbd-utils drbd-utils-9.19.0-150400.3.9.1" type="bugzilla"/>
    </references>
    <description>This update for drbd-utils fixes the following issues:

- Fix file conflict with `/lib/drbd` when migrating from SUSE Linux Enterprise 15 Service Pack 3 to Service Pack 4
  (bsc#1208922)
</description>
    <pkglist>
      <collection>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.14.1" arch="src" src="src/drbd-utils-9.19.0-150400.3.14.1.src.rpm">
          <filename>drbd-utils-9.19.0-150400.3.14.1.src.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.14.1" arch="x86_64" src="x86_64/drbd-utils-9.19.0-150400.3.14.1.x86_64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.14.1" arch="aarch64" src="aarch64/drbd-utils-9.19.0-150400.3.14.1.aarch64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1805</id>
    <title>Recommended update for timezone</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681200785"/>
    <references/>
    <description>This update for timezone fixes the following issues:

- Version update from 2022g to 2023c:
  * Egypt now uses DST again, from April through October.
  * This year Morocco springs forward April 23, not April 30.
  * Palestine delays the start of DST this year.
  * Much of Greenland still uses DST from 2024 on.
  * America/Yellowknife now links to America/Edmonton.
  * tzselect can now use current time to help infer timezone.
  * The code now defaults to C99 or later.
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2023c" release="150000.75.23.1" arch="src" src="src/timezone-2023c-150000.75.23.1.src.rpm">
          <filename>timezone-2023c-150000.75.23.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2023c" release="150000.75.23.1" arch="x86_64" src="x86_64/timezone-2023c-150000.75.23.1.x86_64.rpm">
          <filename>timezone-2023c-150000.75.23.1.x86_64.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2023c" release="150000.75.23.1" arch="aarch64" src="aarch64/timezone-2023c-150000.75.23.1.aarch64.rpm">
          <filename>timezone-2023c-150000.75.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1745</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680591938"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464" id="CVE-2023-0464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209624" id="1209624" title="VUL-0: CVE-2023-0464: openssl,openssl-1_0_0,compat-openssl098,openssl1,openssl-3,openssl-1_1:  Excessive Resource Usage Verifying X.509 Policy Constraints" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.31.2.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.31.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.31.2.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.31.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.31.2.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.31.2.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.31.2.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.31.2.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.31.2.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.31.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.31.2.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.31.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.31.2.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.31.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.31.2.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.31.2.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.31.2" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.31.2.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.31.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2003</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682438776"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809" id="CVE-2023-25809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561" id="CVE-2023-27561" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642" id="CVE-2023-28642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1168481" id="1168481" title="/dev/null not accessable in containers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208962" id="1208962" title="VUL-0: CVE-2023-27561: runc,docker-runc: Fix for CVE-2019-19921 broken by fix for CVE-2021-30465" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209884" id="1209884" title="VUL-0: CVE-2023-25809: runc: rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209888" id="1209888" title="VUL-0: CVE-2023-28642: runc: AppArmor/SELinux bypass with symlinked /proc" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

Update to runc v1.1.5:

Security fixes:

- CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884).
- CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962).
- CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888).

Other fixes:

 - Fix the inability to use `/dev/null` when inside a container.
 - Fix changing the ownership of host's `/dev/null` caused by fd redirection (bsc#1168481).
 - Fix rare runc exec/enter unshare error on older kernels.
 - nsexec: Check for errors in `write_log()`.
 - Drop version-specific Go requirement.
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.5" release="150000.41.1" arch="src" src="src/runc-1.1.5-150000.41.1.src.rpm">
          <filename>runc-1.1.5-150000.41.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.41.1" arch="x86_64" src="x86_64/runc-1.1.5-150000.41.1.x86_64.rpm">
          <filename>runc-1.1.5-150000.41.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.41.1" arch="aarch64" src="aarch64/runc-1.1.5-150000.41.1.aarch64.rpm">
          <filename>runc-1.1.5-150000.41.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1827</id>
    <title>Security update for containerd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681373916"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173" id="CVE-2023-25173" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25153" id="CVE-2023-25153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25153" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208423" id="1208423" title="VUL-0: CVE-2023-25153: containerd: OCI image importer memory exhaustion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208426" id="1208426" title="VUL-0: CVE-2023-25173: containerd: Supplementary groups are not set up properly" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.6.19:

Security fixes:
    
- CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423).
- CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.87.1" arch="src" src="src/containerd-1.6.19-150000.87.1.src.rpm">
          <filename>containerd-1.6.19-150000.87.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.87.1" arch="x86_64" src="x86_64/containerd-1.6.19-150000.87.1.x86_64.rpm">
          <filename>containerd-1.6.19-150000.87.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.87.1" arch="aarch64" src="aarch64/containerd-1.6.19-150000.87.1.aarch64.rpm">
          <filename>containerd-1.6.19-150000.87.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1735</id>
    <title>Recommended update for nvme-cli</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1680518053"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209564" id="1209564" title="[NetApp SLES15 SP4 Bug]: nvme-read hits SGL error if block count option is omitted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209550" id="1209550" title="[NetApp SLES15 SP4 Bug] Misc fixes required for nvme supported-log-pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208001" id="1208001" title="[NetApp SLES15 SP4 Bug] Duplicate NVMe I/O controllers seen with nvme-stas when handling discovery AENs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207435" id="1207435" title="[NetApp SLES15 SP4 Bug] Invalid IP addresses in libnvme's python bindings file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208075" id="1208075" title="SLES15 SP5: lpar dropped into maintenance mode if nvmf mount point in /etc/fstab" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186689" id="1186689" title="[NetApp SLES15 SP4 RFE]: Make PDC the default option for targets that are TP 8013/8014 compliant" type="bugzilla"/>
    </references>
    <description>This update for nvme-cli fixes the following issues:

- Switch from quilt based to git based maintenance
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
- Build documentation to be up to date
- Fix build warning (git-fixes)
- Improvements for supported-log-pages (bsc#1209550)
- Fix read command (bsc#1209564)
- Fix mounting filesystems via fstab (bsc#1208075)
- Allow tracking unique discover controllers (bsc#1186689)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0+28.g0e21f3af122a" release="150400.3.18.1" arch="src" src="src/libnvme-1.0+28.g0e21f3af122a-150400.3.18.1.src.rpm">
          <filename>libnvme-1.0+28.g0e21f3af122a-150400.3.18.1.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+28.g0e21f3af122a" release="150400.3.18.1" arch="x86_64" src="x86_64/libnvme1-1.0+28.g0e21f3af122a-150400.3.18.1.x86_64.rpm">
          <filename>libnvme1-1.0+28.g0e21f3af122a-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+30.g86f82c58cb97" release="150400.3.15.1" arch="src" src="src/nvme-cli-2.0+30.g86f82c58cb97-150400.3.15.1.src.rpm">
          <filename>nvme-cli-2.0+30.g86f82c58cb97-150400.3.15.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+30.g86f82c58cb97" release="150400.3.15.1" arch="x86_64" src="x86_64/nvme-cli-2.0+30.g86f82c58cb97-150400.3.15.1.x86_64.rpm">
          <filename>nvme-cli-2.0+30.g86f82c58cb97-150400.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+28.g0e21f3af122a" release="150400.3.18.1" arch="aarch64" src="aarch64/libnvme1-1.0+28.g0e21f3af122a-150400.3.18.1.aarch64.rpm">
          <filename>libnvme1-1.0+28.g0e21f3af122a-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+30.g86f82c58cb97" release="150400.3.15.1" arch="aarch64" src="aarch64/nvme-cli-2.0+30.g86f82c58cb97-150400.3.15.1.aarch64.rpm">
          <filename>nvme-cli-2.0+30.g86f82c58cb97-150400.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1937</id>
    <title>Recommended update for multipath-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682009034"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209623" id="1209623" title="Avoid multipath grouping paths wrongly with &quot;find_multipaths smart&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203141" id="1203141" title="Partner-L3: The systemd-udevd worker terminated by signal 9 (KILL) on a system with 4096 LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207546" id="1207546" title="Upstream fixes for multipath-tools" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209345" id="1209345" title="Request for PTF libmpathpersist: fix command keyword ordering (bsc#1207546)" type="bugzilla"/>
    </references>
    <description>This update for multipath-tools fixes the following issues:

- libmultipath: avoid grouping paths wrongly with &quot;find_multipaths smart&quot; (bsc#1209623)
- fix multipath-tools build with liburcu 0.14.0
- libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
- libmpathpersist: use conf timeout for updating persistent reservations
- libmultipath: check if device is in use (bsc#1203141)
- libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
- multipathd: handle no active paths in update_map_pr (bsc#1207546)
- multipathd: make pr registration consistent (bsc#1207546)
- multipath.conf: improve documentation of dev_loss_tmo (bsc#1207546)
- libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
- libmultipath: fix 'show paths format' failure
- Use &quot;queue_mode bio&quot; for NVMeoF/TCP devices
- minor upstream bug fixes
- man page fixes
- hwtable fixes
</description>
    <pkglist>
      <collection>
        <package name="kpartx" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="x86_64" src="x86_64/kpartx-0.9.0+117+suse.78cc20b-150400.4.13.1.x86_64.rpm">
          <filename>kpartx-0.9.0+117+suse.78cc20b-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="x86_64" src="x86_64/libmpath0-0.9.0+117+suse.78cc20b-150400.4.13.1.x86_64.rpm">
          <filename>libmpath0-0.9.0+117+suse.78cc20b-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="src" src="src/multipath-tools-0.9.0+117+suse.78cc20b-150400.4.13.1.src.rpm">
          <filename>multipath-tools-0.9.0+117+suse.78cc20b-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="x86_64" src="x86_64/multipath-tools-0.9.0+117+suse.78cc20b-150400.4.13.1.x86_64.rpm">
          <filename>multipath-tools-0.9.0+117+suse.78cc20b-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="aarch64" src="aarch64/kpartx-0.9.0+117+suse.78cc20b-150400.4.13.1.aarch64.rpm">
          <filename>kpartx-0.9.0+117+suse.78cc20b-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="aarch64" src="aarch64/libmpath0-0.9.0+117+suse.78cc20b-150400.4.13.1.aarch64.rpm">
          <filename>libmpath0-0.9.0+117+suse.78cc20b-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+117+suse.78cc20b" release="150400.4.13.1" arch="aarch64" src="aarch64/multipath-tools-0.9.0+117+suse.78cc20b-150400.4.13.1.aarch64.rpm">
          <filename>multipath-tools-0.9.0+117+suse.78cc20b-150400.4.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1935</id>
    <title>Recommended update for osinfo-db</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682008947"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2113" id="PED-2113" title="https://jira.suse.com/browse/PED-2113" type="jira"/>
    </references>
    <description>This update for osinfo-db fixes the following issues:

- Update to database version 20230308
- Add support for SLE Micro 5.4
- [Virt Tools] Refresh Virtualization Tools for Xen and KVM Management (jsc#PED-2113)
</description>
    <pkglist>
      <collection>
        <package name="osinfo-db" epoch="0" version="20230308" release="150400.3.9.1" arch="noarch" src="noarch/osinfo-db-20230308-150400.3.9.1.noarch.rpm">
          <filename>osinfo-db-20230308-150400.3.9.1.noarch.rpm</filename>
        </package>
        <package name="osinfo-db" epoch="0" version="20230308" release="150400.3.9.1" arch="src" src="src/osinfo-db-20230308-150400.3.9.1.src.rpm">
          <filename>osinfo-db-20230308-150400.3.9.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2040</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682502254"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202705" id="1202705" title="Extension selection can't be changed during install" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207876" id="1207876" title="SUMA client suseconnect keepalive doesn't check systemid file" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.1.0~git0.e3c41e60892e
  * Added MemTotal detection for HwInfo
  * Make keepalive on SUMA systems exit without error (bsc#1207876)
  * Add deactivate API to ruby bindings (bsc#1202705)
  * Allow non-root users to use --version
  * Update Dockerfile.yast
  * Use openssl go for SLE and Leap 15.5+ builds
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git0.e3c41e60892e" release="150400.3.10.1" arch="src" src="src/suseconnect-ng-1.1.0~git0.e3c41e60892e-150400.3.10.1.src.rpm">
          <filename>suseconnect-ng-1.1.0~git0.e3c41e60892e-150400.3.10.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git0.e3c41e60892e" release="150400.3.10.1" arch="x86_64" src="x86_64/suseconnect-ng-1.1.0~git0.e3c41e60892e-150400.3.10.1.x86_64.rpm">
          <filename>suseconnect-ng-1.1.0~git0.e3c41e60892e-150400.3.10.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git0.e3c41e60892e" release="150400.3.10.1" arch="aarch64" src="aarch64/suseconnect-ng-1.1.0~git0.e3c41e60892e-150400.3.10.1.aarch64.rpm">
          <filename>suseconnect-ng-1.1.0~git0.e3c41e60892e-150400.3.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2039</id>
    <title>Recommended update for lshw</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682502187"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209531" id="1209531" title="SLES15SP5: lshw command doesn't lists the nvmf disk (lpfc/nvme_core/Redfish/SLES15SP5/ZZgen4)" type="bugzilla"/>
    </references>
    <description>This update for lshw fixes the following issues:

- Update to version B.02.19.2+git.20230320 (bsc#1209531)
</description>
    <pkglist>
      <collection>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="src" src="src/lshw-B.02.19.2+git.20230320-150200.3.15.4.src.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.src.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="x86_64" src="x86_64/lshw-B.02.19.2+git.20230320-150200.3.15.4.x86_64.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="aarch64" src="aarch64/lshw-B.02.19.2+git.20230320-150200.3.15.4.aarch64.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1963</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682341418"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189036" id="1189036" title="Make grub more robust against storage race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209165" id="1209165" title="[grub2, aarch64, btrfs] kernel/intrd not found due to '/@' prepended to Path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209234" id="1209234" title="SLES15-SP4 Installation fails during grub installation on seahawk3 from spiltter box" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207064" id="1207064" title="SLES15-SP5 Installation fails during grub installation on seahawk3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209372" id="1209372" title="15SP4 installed with virt-install using text mode does not boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209667" id="1209667" title="GRUB's legacy vga driver breaks headless booting over serial" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187810" id="1187810" title="Installation over serial console ends up in infinite GRUB2 boot loop" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in btrfs filesystem. (bsc#1209165)
- Make grub more robust against storage race condition causing system boot failures (bsc#1189036)
- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064, bsc#1209234)  
- Fix installation over serial console ends up in infinite boot loop (bsc#1187810, bsc#1209667, bsc#1209372)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.30.1" arch="src" src="src/grub2-2.06-150400.11.30.1.src.rpm">
          <filename>grub2-2.06-150400.11.30.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.30.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.30.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.30.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.30.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.30.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.30.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.30.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.30.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.30.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.30.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.30.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.30.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.30.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.30.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.30.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.30.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.30.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.30.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.30.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.30.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.30.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2060</id>
    <title>Security update for glib2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682607879"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25180" id="CVE-2023-25180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24593" id="CVE-2023-24593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24593" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210135" id="1210135" title="glib2 update is breaking gnome-shell" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209713" id="1209713" title="VUL-0: CVE-2023-25180: glib2: DoS caused by malicious serialised variant" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209714" id="1209714" title="VUL-0: CVE-2023-24593: glib2: DoS caused by handling a malicious text-form variant" type="bugzilla"/>
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant (bsc#1209714).
- CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant (bsc#1209713).

The following non-security bug was fixed:

- Fixed regression on s390x (bsc#1210135, glgo#GNOME/glib!2978).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.8.1" arch="src" src="src/glib2-2.70.5-150400.3.8.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2075</id>
    <title>Recommended update for aardvark-dns, netavark</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682694177"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-1805" id="PED-1805" title="https://jira.suse.com/browse/PED-1805" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2771" id="PED-2771" title="https://jira.suse.com/browse/PED-2771" type="jira"/>
    </references>
    <description>This update for aardvark-dns, netavark fixes the following issues:

This update ships netavark and aardvark-dns for use by podman. (jsc#PED-1805)
</description>
    <pkglist>
      <collection>
        <package name="aardvark-dns" epoch="0" version="1.5.0" release="150400.9.4.1" arch="src" src="src/aardvark-dns-1.5.0-150400.9.4.1.src.rpm">
          <filename>aardvark-dns-1.5.0-150400.9.4.1.src.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.5.0" release="150400.9.4.1" arch="x86_64" src="x86_64/aardvark-dns-1.5.0-150400.9.4.1.x86_64.rpm">
          <filename>aardvark-dns-1.5.0-150400.9.4.1.x86_64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.5.0" release="150400.9.5.1" arch="src" src="src/netavark-1.5.0-150400.9.5.1.src.rpm">
          <filename>netavark-1.5.0-150400.9.5.1.src.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.5.0" release="150400.9.5.1" arch="x86_64" src="x86_64/netavark-1.5.0-150400.9.5.1.x86_64.rpm">
          <filename>netavark-1.5.0-150400.9.5.1.x86_64.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.5.0" release="150400.9.4.1" arch="s390x" src="s390x/aardvark-dns-1.5.0-150400.9.4.1.s390x.rpm">
          <filename>aardvark-dns-1.5.0-150400.9.4.1.s390x.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.5.0" release="150400.9.5.1" arch="s390x" src="s390x/netavark-1.5.0-150400.9.5.1.s390x.rpm">
          <filename>netavark-1.5.0-150400.9.5.1.s390x.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.5.0" release="150400.9.4.1" arch="aarch64" src="aarch64/aardvark-dns-1.5.0-150400.9.4.1.aarch64.rpm">
          <filename>aardvark-dns-1.5.0-150400.9.4.1.aarch64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.5.0" release="150400.9.5.1" arch="aarch64" src="aarch64/netavark-1.5.0-150400.9.5.1.aarch64.rpm">
          <filename>netavark-1.5.0-150400.9.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1896</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681811806"/>
    <references/>
    <description>Release update to the unrestricted channel for SLE-15:Update codestream.</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.0" release="150000.6.91.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.0-150000.6.91.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.0-150000.6.91.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.0" release="150000.6.91.1" arch="src" src="src/cloud-regionsrv-client-10.1.0-150000.6.91.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.0-150000.6.91.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.91.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.91.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.91.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.91.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.91.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.91.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.91.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.91.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.91.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.91.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.91.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.91.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.91.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.91.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.91.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1897</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681812031"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1109158" id="1109158" title="SLES 15 - [POWER8 32TB/192c, max. config] Soft lockup observed while running forkoff stress testing, system is up while you keep seeing soft lockups on console and dmsg (mm-)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206552" id="1206552" title="SLERT-15SP4: Direct I/O write+truncate test times out" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207168" id="1207168" title="VUL-0: CVE-2023-0394: kernel: null pointer dereference in skb_transport_offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207185" id="1207185" title="L3: Azure - RCA - Kernel panic due to mlx5_core driver issue - SFSC 00504800 - ref:_00D1igLOd._5005qJPzAo:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207574" id="1207574" title="SLES 15 SP4 - dasd: fix no record found for raw_track_access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208602" id="1208602" title="kernel: type confusion in sctp_sock_filter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208815" id="1208815" title="0 byte size of /sys/devices/system/node/node0/cpulist breaks applications that check filesize &gt;0 before opening." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208829" id="1208829" title="VUL-0: CVE-2023-23001: kernel: drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209052" id="1209052" title="VUL-0: CVE-2023-28464: kernel-source: double free in hci_conn_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209118" id="1209118" title="kernel hangs on x86_64 with recent SP4/SP5 kernel-obs-build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209547" id="1209547" title="VUL-0: CVE-2017-5753: kernel-source,kernel-source-rt,kernel-source-azure: Upstream reports spectre V1 vulnerability on netlink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209290" id="1209290" title="VUL-0: CVE-2023-28327: kernel: denial of service problem in net/unix/diag.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209292" id="1209292" title="L3: Failing paths to FC connected storage after kernel upgrade to 4.12.14-122.150-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209366" id="1209366" title="VUL-0: CVE-2023-28466: kernel: do_tls_getsockopt lacks a lock_sock call, leading to a race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209532" id="1209532" title="VUL-0: CVE-2023-1513: kernel: kvm: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209556" id="1209556" title="L3: High kworker load on systems patched to 4.12.14-122.150.1.25822.1.PTF.1206805-default - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209572" id="1209572" title="ppc64le CONFIG_HWPOISON_INJECT=y should be CONFIG_HWPOISON_INJECT=m" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209600" id="1209600" title="SLES 15 SP4 - s390/boot: simplify and fix kernel memory layout setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209634" id="1209634" title="VUL-0: CVE-2023-1281: kernel: use-after-free vulnerability inside the traffic control index filter (tcindex) allows Privilege Escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209684" id="1209684" title="L3: kernel 4.12.14-122.150.1 qla2xxx with tape drive connected multipath path loss issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209687" id="1209687" title="VUL-0: CVE-2023-1611: kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209779" id="1209779" title="VUL-0: CVE-2023-1637: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209788" id="1209788" title="VUL-0: CVE-2023-1652: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209798" id="1209798" title="kernel-default build failed due to missing(?) build-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209804" id="1209804" title="mm: memcg: fix swapcached stat accounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209805" id="1209805" title="Kernel regression: Possible integer underflow in input pipeline of ThinkPad trackpoint." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210050" id="1210050" title="Missing fixes / quirks for Thinkkpad" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210203" id="1210203" title="VUL-0: CVE-2023-1838: kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" id="CVE-2023-1611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" id="CVE-2023-1838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" id="CVE-2023-0394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" id="CVE-2023-1513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" id="CVE-2017-5753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" id="CVE-2023-28464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" id="CVE-2023-28466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" id="CVE-2023-1637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" id="CVE-2023-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" id="CVE-2023-1281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" id="CVE-2023-28327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" id="CVE-2023-23001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
- CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
- CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).

The following non-security bugs were fixed:

- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
- ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
- arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
- arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
- arm64: dts: imx8mp: correct usb clocks (git-fixes)
- arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
- arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
- arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
- atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
- Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
- ca8210: fix mac_len negative array access (git-fixes).
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
- cifs: append path to open_enter trace event (bsc#1193629).
- cifs: avoid race conditions with parallel reconnects (bsc#1193629).
- cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
- cifs: check only tcon status on tcon related functions (bsc#1193629).
- cifs: do not poll server interfaces too regularly (bsc#1193629).
- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- cifs: dump pending mids for all channels in DebugData (bsc#1193629).
- cifs: empty interface list when server does not support query interfaces (bsc#1193629).
- cifs: fix dentry lookups in directory handle cache (bsc#1193629).
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
- cifs: Fix smb2_set_path_size() (git-fixes).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
- cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
- cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
- cifs: lock chan_lock outside match_session (bsc#1193629).
- cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
- cifs: print session id while listing open files (bsc#1193629).
- cifs: return DFS root session id in DebugData (bsc#1193629).
- cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
- cifs: use DFS root session instead of tcon ses (bsc#1193629).
- clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
- debugfs: add debugfs_lookup_and_remove() (git-fixes).
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
- drm/amdkfd: Fix an illegal memory access (git-fixes).
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
- drm/i915: Preserve crtc_state-&gt;inherited during state clearing (git-fixes).
- drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
- drm/i915/active: Fix missing debug object activation (git-fixes).
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
- drm/i915/display: clean up comments (git-fixes).
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
- drm/i915/gt: perform uc late init after probe error injection (git-fixes).
- drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
- fotg210-udc: Add missing completion handler (git-fixes).
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct() (git-fixes).
- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
- hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
- i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
- i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present (git-fixes).
- Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
- KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
- kABI workaround for xhci (git-fixes).
- kABI: x86/msr: Remove .fixup usage (kabi).
- kconfig: Update config changed flag before calling callback (git-fixes).
- keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
- KVM: x86: fix sending PV IPI (git-fixes).
- KVM: x86: fix sending PV IPI (git-fixes).
- lan78xx: Add missing return code checks (git-fixes).
- lan78xx: Fix exception on link speed change (git-fixes).
- lan78xx: Fix memory allocation bug (git-fixes).
- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
- lan78xx: Fix race condition in disconnect handling (git-fixes).
- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
- lan78xx: Fix white space and style issues (git-fixes).
- lan78xx: Remove unused pause frame queue (git-fixes).
- lan78xx: Remove unused timer (git-fixes).
- lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
- lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
- locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
- mm: memcg: fix swapcached stat accounting (bsc#1209804).
- mm: mmap: remove newline at the end of the trace (git-fixes).
- mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
- mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
- mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- net: asix: fix modprobe &quot;sysfs: cannot create duplicate filename&quot; (git-fixes).
- net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
- net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
- net: usb: asix: remove redundant assignment to variable reg (git-fixes).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
- net: usb: lan78xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- NFS: Fix an Oops in nfs_d_automount() (git-fixes).
- NFS: fix disabling of swap (git-fixes).
- NFS4trace: fix state manager flag printing (git-fixes).
- NFSD: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
- NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
- NFSD: fix race to check ls_layouts (git-fixes).
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
- NFSD: Protect against filesystem freezing (git-fixes).
- NFSD: shut down the NFSv4 state objects before the filecache (git-fixes).
- NFSD: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
- NFSD: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
- NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
- NFSv4: keep state manager thread active if swap is enabled (git-fixes).
- NFSv4: provide mount option to toggle trunking discovery (git-fixes).
- NFSv4: Fix initialisation of struct nfs4_label (git-fixes).
- NFSv4: Fail client initialisation if state manager thread can't run (git-fixes).
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- nvme-tcp: always fail a request when sending it failed (bsc#1208902).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
- PCI: hv: Use async probing to reduce boot time (bsc#1207185).
- PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
- pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
- pinctrl: at91-pio4: fix domain name assignment (git-fixes).
- pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
- platform/x86: think-lmi: add debug_cmd (bsc#1210050).
- platform/x86: think-lmi: add missing type attribute (git-fixes).
- platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
- platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
- platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
- platform/x86: think-lmi: only display possible_values if available (git-fixes).
- platform/x86: think-lmi: Opcode support (bsc#1210050).
- platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
- platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
- platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
- platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
- platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
- platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
- platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
- platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
- platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
- platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
- platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
- platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
- platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
- platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
- platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
- platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
- platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove &quot;goto err_exit&quot; from hotkey_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
- platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
- platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
- platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
- platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
- platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
- platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
- platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
- platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
- platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
- pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
- powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
- powerpc/btext: add missing of_node_put (bsc#1065729).
- powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
- powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
- powerpc/kexec_file: fix implicit decl error (bsc#1194869).
- powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
- powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
- pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- regulator: Handle deferred clk (git-fixes).
- ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
- ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
- ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
- rpm/constraints.in: increase the disk size for armv6/7 to 24GB It grows and the build fails recently on SLE15-SP4/5.
- s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
- s390/dasd: fix no record found for raw_track_access (bsc#1207574).
- s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
- sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
- scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
- serial: fsl_lpuart: Fix comment typo (git-fixes).
- smb3: fix unusable share after force unmount failure (bsc#1193629).
- smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
- struct dwc3: mask new member (git-fixes).
- SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
- SUNRPC: Fix a server shutdown leak (git-fixes).
- SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
- thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
- thunderbolt: Disable interrupt auto clear for rings (git-fixes).
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
- thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
- thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
- timers: Prevent union confusion from unexpected (git-fixes)
- trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
- trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes).
- tracing: Add trace_array_puts() to write into instance (git-fixes).
- tracing: Check field value in hist_field_name() (git-fixes).
- tracing: Do not let histogram values have some modifiers (git-fixes).
- tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
- tracing: Free error logs of tracing instances (git-fixes).
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
- tracing: Make splice_read available again (git-fixes).
- tracing: Make tracepoint lockdep check actually test something (git-fixes).
- tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
- USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
- USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
- USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
- USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
- USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
- USB: dwc3: Fix a typo in field name (git-fixes).
- USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
- USB: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
- USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
- USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
- USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
- USB: ucsi: Fix ucsi-&gt;connector race (git-fixes).
- USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: xhci: tegra: fix sleep in atomic call (git-fixes).
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
- wifi: mac80211: fix qos on mesh interfaces (git-fixes).
- wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
- x86: Annotate call_on_stack() (git-fixes).
- x86: Annotate call_on_stack() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/fpu: Cache xfeature flags from CPUID (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/msr: Remove .fixup usage (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- xfs: convert ptag flags to unsigned (git-fixes).
- xfs: do not assert fail on perag references on teardown (git-fixes).
- xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
- xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
- xfs: remove xfs_setattr_time() declaration (git-fixes).
- xfs: zero inode fork buffer at allocation (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
- xhci: Free the command allocated for setting LPM if we return early (git-fixes).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.60.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.60.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.60.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1911</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681902166"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466" id="CVE-2023-0466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465" id="CVE-2023-0465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209878" id="1209878" title="VUL-0: CVE-2023-0465: openssl-1_1,openssl1,openssl,openssl-1_0_0,openssl-3: Invalid certificate policies in leaf certificates are silently ignored" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209873" id="1209873" title="VUL-1: CVE-2023-0466: openssl-3,openssl-1_0_0,openssl-1_1,openssl1,openssl: Certificate policy check not enabled" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
- CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.34.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.34.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.34.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.34.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.34.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.34.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.34.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.34.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.34.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.34.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.34.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.34.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.34.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.34.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.34.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.34.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.34.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.34.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2245</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684422129"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195633" id="1195633" title="Installing local RPM packages fails if /usr/bin/find is not installed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1127591" id="1127591" title="zypper option &quot;ssl_capath&quot; not working for mirror URLs from metalink file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210870" id="1210870" title="zypp:Head/zypper: Bug Don't kill valid credentials" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208329" id="1208329" title="Timeout issues with zypper, unable to change value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209406" id="1209406" title="after update, zypper pt -i shows no patterns" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Installing local RPM packages fails if /usr/bin/find is not installed (bsc#1195633)
- multicurl: propagate ssl settings stored in repo url (bsc#1127591)
- MediaCurl: Fix endless loop if wrong credentials are stored in credentials.cat (bsc#1210870)
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.] (bsc#1208329)
- Teach MediaNetwork to retry on HTTP2 errors.
- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.24" release="150400.3.6.4" arch="src" src="src/libsolv-0.7.24-150400.3.6.4.src.rpm">
          <filename>libsolv-0.7.24-150400.3.6.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.6.4" arch="x86_64" src="x86_64/libsolv-tools-0.7.24-150400.3.6.4.x86_64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.6.4.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="src" src="src/libzypp-17.31.11-150400.3.25.2.src.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="x86_64" src="x86_64/libzypp-17.31.11-150400.3.25.2.x86_64.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="src" src="src/zypper-1.14.60-150400.3.21.2.src.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="x86_64" src="x86_64/zypper-1.14.60-150400.3.21.2.x86_64.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.60" release="150400.3.21.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.60-150400.3.21.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.60-150400.3.21.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.6.4" arch="aarch64" src="aarch64/libsolv-tools-0.7.24-150400.3.6.4.aarch64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.6.4.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="aarch64" src="aarch64/libzypp-17.31.11-150400.3.25.2.aarch64.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="aarch64" src="aarch64/zypper-1.14.60-150400.3.21.2.aarch64.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1852</id>
    <title>Security update for harfbuzz</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681477791"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25193" id="CVE-2023-25193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25193" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207922" id="1207922" title="VUL-0: CVE-2023-25193: firefox-harfbuzz,harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks" type="bugzilla"/>
    </references>
    <description>This update for harfbuzz fixes the following issues:

- CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).
</description>
    <pkglist>
      <collection>
        <package name="harfbuzz" epoch="0" version="3.4.0" release="150400.3.6.1" arch="src" src="src/harfbuzz-3.4.0-150400.3.6.1.src.rpm">
          <filename>harfbuzz-3.4.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libharfbuzz-gobject0-3.4.0-150400.3.6.1.x86_64.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libharfbuzz0-3.4.0-150400.3.6.1.x86_64.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.6.1" arch="x86_64" src="x86_64/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1.x86_64.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libharfbuzz-gobject0-3.4.0-150400.3.6.1.aarch64.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libharfbuzz0-3.4.0-150400.3.6.1.aarch64.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.6.1" arch="aarch64" src="aarch64/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1.aarch64.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1860</id>
    <title>Security update for wayland</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1681486580"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3782" id="CVE-2021-3782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3782" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190486" id="1190486" title="VUL-0: CVE-2021-3782: wayland: Reference-count overflow in libwayland-server SHM handling" type="bugzilla"/>
    </references>
    <description>This update for wayland fixes the following issues:

- CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)
</description>
    <pkglist>
      <collection>
        <package name="libwayland-client0" epoch="0" version="1.19.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libwayland-client0-1.19.0-150400.3.3.1.x86_64.rpm">
          <filename>libwayland-client0-1.19.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.19.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libwayland-cursor0-1.19.0-150400.3.3.1.x86_64.rpm">
          <filename>libwayland-cursor0-1.19.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.19.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libwayland-egl1-99~1.19.0-150400.3.3.1.x86_64.rpm">
          <filename>libwayland-egl1-99~1.19.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.19.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libwayland-server0-1.19.0-150400.3.3.1.x86_64.rpm">
          <filename>libwayland-server0-1.19.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="wayland" epoch="0" version="1.19.0" release="150400.3.3.1" arch="src" src="src/wayland-1.19.0-150400.3.3.1.src.rpm">
          <filename>wayland-1.19.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libwayland-client0" epoch="0" version="1.19.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libwayland-client0-1.19.0-150400.3.3.1.aarch64.rpm">
          <filename>libwayland-client0-1.19.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.19.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libwayland-cursor0-1.19.0-150400.3.3.1.aarch64.rpm">
          <filename>libwayland-cursor0-1.19.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.19.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libwayland-egl1-99~1.19.0-150400.3.3.1.aarch64.rpm">
          <filename>libwayland-egl1-99~1.19.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.19.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libwayland-server0-1.19.0-150400.3.3.1.aarch64.rpm">
          <filename>libwayland-server0-1.19.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1992</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682422687"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1109158" id="1109158" title="SLES 15 - [POWER8 32TB/192c, max. config] Soft lockup observed while running forkoff stress testing, system is up while you keep seeing soft lockups on console and dmsg (mm-)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198400" id="1198400" title="VUL-0: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206552" id="1206552" title="SLERT-15SP4: Direct I/O write+truncate test times out" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207168" id="1207168" title="VUL-0: CVE-2023-0394: kernel: null pointer dereference in skb_transport_offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207185" id="1207185" title="L3: Azure - RCA - Kernel panic due to mlx5_core driver issue - SFSC 00504800 - ref:_00D1igLOd._5005qJPzAo:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207574" id="1207574" title="SLES 15 SP4 - dasd: fix no record found for raw_track_access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208602" id="1208602" title="kernel: type confusion in sctp_sock_filter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208815" id="1208815" title="0 byte size of /sys/devices/system/node/node0/cpulist breaks applications that check filesize &gt;0 before opening." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208829" id="1208829" title="VUL-0: CVE-2023-23001: kernel: drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209052" id="1209052" title="VUL-0: CVE-2023-28464: kernel-source: double free in hci_conn_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209118" id="1209118" title="kernel hangs on x86_64 with recent SP4/SP5 kernel-obs-build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209290" id="1209290" title="VUL-0: CVE-2023-28327: kernel: denial of service problem in net/unix/diag.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209292" id="1209292" title="L3: Failing paths to FC connected storage after kernel upgrade to 4.12.14-122.150-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209366" id="1209366" title="VUL-0: CVE-2023-28466: kernel: do_tls_getsockopt lacks a lock_sock call, leading to a race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209532" id="1209532" title="VUL-0: CVE-2023-1513: kernel: kvm: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209547" id="1209547" title="VUL-0: CVE-2017-5753: kernel-source,kernel-source-rt,kernel-source-azure: Upstream reports spectre V1 vulnerability on netlink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209556" id="1209556" title="L3: High kworker load on systems patched to 4.12.14-122.150.1.25822.1.PTF.1206805-default - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209572" id="1209572" title="ppc64le CONFIG_HWPOISON_INJECT=y should be CONFIG_HWPOISON_INJECT=m" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209600" id="1209600" title="SLES 15 SP4 - s390/boot: simplify and fix kernel memory layout setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209634" id="1209634" title="VUL-0: CVE-2023-1281: kernel: use-after-free vulnerability inside the traffic control index filter (tcindex) allows Privilege Escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209684" id="1209684" title="L3: kernel 4.12.14-122.150.1 qla2xxx with tape drive connected multipath path loss issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209687" id="1209687" title="VUL-0: CVE-2023-1611: kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209779" id="1209779" title="VUL-0: CVE-2023-1637: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209788" id="1209788" title="VUL-0: CVE-2023-1652: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209798" id="1209798" title="kernel-default build failed due to missing(?) build-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209804" id="1209804" title="mm: memcg: fix swapcached stat accounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209805" id="1209805" title="Kernel regression: Possible integer underflow in input pipeline of ThinkPad trackpoint." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210050" id="1210050" title="Missing fixes / quirks for Thinkkpad" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210203" id="1210203" title="VUL-0: CVE-2023-1838: kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" id="CVE-2017-5753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" id="CVE-2023-0394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" id="CVE-2023-1281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" id="CVE-2023-1513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" id="CVE-2023-1611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" id="CVE-2023-1637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" id="CVE-2023-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" id="CVE-2023-1838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" id="CVE-2023-23001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" id="CVE-2023-28327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" id="CVE-2023-28464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" id="CVE-2023-28466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779, bsc#1198400).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
- CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).
- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).

The following non-security bugs were fixed:

- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
- ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
- ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
- Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
- Fix error path in pci-hyperv to unlock the mutex state_lock
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
- Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
- KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
- KVM: x86: fix sending PV IPI (git-fixes).
- NFS: Fix an Oops in nfs_d_automount() (git-fixes).
- NFS: fix disabling of swap (git-fixes).
- NFSD: Protect against filesystem freezing (git-fixes).
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
- NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
- NFSd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
- NFSd: fix race to check ls_layouts (git-fixes).
- NFSd: shut down the NFSv4 state objects before the filecache (git-fixes).
- NFSd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
- NFSd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
- NFSv4.1 provide mount option to toggle trunking discovery (git-fixes).
- NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes).
- NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes).
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
- NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
- NFSv4: fix state manager flag printing (git-fixes).
- NFSv4: keep state manager thread active if swap is enabled (git-fixes).
- PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
- PCI: hv: Use async probing to reduce boot time (bsc#1207185).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
- SUNRPC: Fix a server shutdown leak (git-fixes).
- SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
- SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
- USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
- USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
- USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
- USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
- USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
- USB: dwc3: Fix a typo in field name (git-fixes).
- USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
- USB: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
- USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
- USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
- USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
- USB: ucsi: Fix ucsi-&gt;connector race (git-fixes).
- USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: xhci: tegra: fix sleep in atomic call (git-fixes).
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
- arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
- arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
- arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
- arm64: dts: imx8mp: correct usb clocks (git-fixes)
- arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
- arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
- atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
- ca8210: fix mac_len negative array access (git-fixes).
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
- cifs: Fix smb2_set_path_size() (git-fixes).
- cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
- cifs: append path to open_enter trace event (bsc#1193629).
- cifs: avoid race conditions with parallel reconnects (bsc#1193629).
- cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
- cifs: check only tcon status on tcon related functions (bsc#1193629).
- cifs: do not poll server interfaces too regularly (bsc#1193629).
- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- cifs: dump pending mids for all channels in DebugData (bsc#1193629).
- cifs: empty interface list when server does not support query interfaces (bsc#1193629).
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
- cifs: fix dentry lookups in directory handle cache (bsc#1193629).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
- cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
- cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
- cifs: lock chan_lock outside match_session (bsc#1193629).
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
- cifs: print session id while listing open files (bsc#1193629).
- cifs: return DFS root session id in DebugData (bsc#1193629).
- cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
- cifs: use DFS root session instead of tcon ses (bsc#1193629).
- clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
- debugfs: add debugfs_lookup_and_remove() (git-fixes).
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
- drm/amdkfd: Fix an illegal memory access (git-fixes).
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
- drm/i915/active: Fix missing debug object activation (git-fixes).
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
- drm/i915/display: clean up comments (git-fixes).
- drm/i915/gt: perform uc late init after probe error injection (git-fixes).
- drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
- drm/i915: Preserve crtc_state-&gt;inherited during state clearing (git-fixes).
- drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
- fotg210-udc: Add missing completion handler (git-fixes).
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct() (git-fixes).
- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
- i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
- i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present (git-fixes).
- kABI workaround for xhci (git-fixes).
- kABI: x86/msr: Remove .fixup usage (kabi).
- kconfig: Update config changed flag before calling callback (git-fixes).
- keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
- lan78xx: Add missing return code checks (git-fixes).
- lan78xx: Fix exception on link speed change (git-fixes).
- lan78xx: Fix memory allocation bug (git-fixes).
- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
- lan78xx: Fix race condition in disconnect handling (git-fixes).
- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
- lan78xx: Fix white space and style issues (git-fixes).
- lan78xx: Remove unused pause frame queue (git-fixes).
- lan78xx: Remove unused timer (git-fixes).
- lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
- lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
- locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
- mm: memcg: fix swapcached stat accounting (bsc#1209804).
- mm: mmap: remove newline at the end of the trace (git-fixes).
- mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
- mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
- mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- net: asix: fix modprobe &quot;sysfs: cannot create duplicate filename&quot; (git-fixes).
- net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
- net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
- net: usb: asix: remove redundant assignment to variable reg (git-fixes).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
- net: usb: lan78xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- nvme-tcp: always fail a request when sending it failed (bsc#1208902).
- pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
- pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
- pinctrl: at91-pio4: fix domain name assignment (git-fixes).
- pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
- platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
- platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
- platform/x86: think-lmi: Opcode support (bsc#1210050).
- platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
- platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
- platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
- platform/x86: think-lmi: add debug_cmd (bsc#1210050).
- platform/x86: think-lmi: add missing type attribute (git-fixes).
- platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
- platform/x86: think-lmi: only display possible_values if available (git-fixes).
- platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
- platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
- platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
- platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
- platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
- platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
- platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
- platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
- platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
- platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
- platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
- platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
- platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
- platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove &quot;goto err_exit&quot; from hotkey_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
- platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
- platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
- platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
- platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
- platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
- platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
- platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
- platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
- powerpc/btext: add missing of_node_put (bsc#1065729).
- powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
- powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
- powerpc/kexec_file: fix implicit decl error (bsc#1194869).
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
- powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
- powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
- powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
- pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
- ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
- ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
- s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
- s390/dasd: fix no record found for raw_track_access (bsc#1207574).
- s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
- sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
- scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
- serial: fsl_lpuart: Fix comment typo (git-fixes).
- smb3: fix unusable share after force unmount failure (bsc#1193629).
- smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
- struct dwc3: mask new member (git-fixes).
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
- thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
- thunderbolt: Disable interrupt auto clear for rings (git-fixes).
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
- thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
- thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
- timers: Prevent union confusion from unexpected (git-fixes)
- trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
- trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
- tracing: Add trace_array_puts() to write into instance (git-fixes).
- tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
- tracing: Free error logs of tracing instances (git-fixes).
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
- wifi: mac80211: fix qos on mesh interfaces (git-fixes).
- wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/fpu: Cache xfeature flags from CPUID (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/msr: Remove .fixup usage (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- x86: Annotate call_on_stack() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- xfs: convert ptag flags to unsigned (git-fixes).
- xfs: do not assert fail on perag references on teardown (git-fixes).
- xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
- xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
- xfs: remove xfs_setattr_time() declaration (git-fixes).
- xfs: zero inode fork buffer at allocation (git-fixes).
- xhci: Free the command allocated for setting LPM if we return early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.23.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.23.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.23.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.23.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.23.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.23.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1994</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682423638"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" id="CVE-2023-1981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210328" id="1210328" title="VUL-0: CVE-2023-1981: avahi: avahi: avahi-daemon can be crashed via DBus" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="src" src="src/avahi-0.8-150400.7.3.1.src.rpm">
          <filename>avahi-0.8-150400.7.3.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.3.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.3.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2084</id>
    <title>Security update for shim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683027130"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210382" id="1210382" title="The bootx64.efi in EFI boot partition is not updated after shim be upgraded." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" id="CVE-2022-28737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" type="cve"/>
    </references>
    <description>This update for shim fixes the following issues:

- CVE-2022-28737 was missing as reference previously.

- Upgrade shim-install for bsc#1210382

  After closing Leap-gap project since Leap 15.3, openSUSE Leap direct
  uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot
  CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no,
  so all files in /boot/efi/EFI/boot are not updated.

  Logic was added that is using ID field in os-release for
  checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure
  Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated.
</description>
    <pkglist>
      <collection>
        <package name="shim" epoch="0" version="15.7" release="150300.4.16.1" arch="src" src="src/shim-15.7-150300.4.16.1.src.rpm">
          <filename>shim-15.7-150300.4.16.1.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.7" release="150300.4.16.1" arch="x86_64" src="x86_64/shim-15.7-150300.4.16.1.x86_64.rpm">
          <filename>shim-15.7-150300.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.7" release="150300.4.16.1" arch="aarch64" src="aarch64/shim-15.7-150300.4.16.1.aarch64.rpm">
          <filename>shim-15.7-150300.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1947</id>
    <title>Security update for dmidecode</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682079287"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30630" id="CVE-2023-30630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30630" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210418" id="1210418" title="VUL-0: CVE-2023-30630: dmidecode: potential file overwrite (dmiwrite)" type="bugzilla"/>
    </references>
    <description>This update for dmidecode fixes the following issues:

- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
</description>
    <pkglist>
      <collection>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="src" src="src/dmidecode-3.4-150400.16.8.1.src.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.src.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="x86_64" src="x86_64/dmidecode-3.4-150400.16.8.1.x86_64.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.x86_64.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="aarch64" src="aarch64/dmidecode-3.4-150400.16.8.1.aarch64.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1939</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682068480"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191546" id="1191546" title="FIPS: mozilla-nss: service level indicator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207209" id="1207209" title="FIPS 140-3: NSS PCT tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208999" id="1208999" title="FIPS 140-3: PBKDF2 requirements for NSS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208242" id="1208242" title="mozilla-nss-tools do not contain manpages" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS 140-3: Adjust SLI reporting for PBKDF2 parameter validation (bsc#1208999)
- FIPS 140-3: Update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases. (bsc#1191546)
- FIPS 140-3: more changes for pairwise consistency checks. (bsc#1207209)
- Add manpages to mozilla-nss-tools (bsc#1208242)
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libfreebl3-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="src" src="src/mozilla-nss-3.79.4-150400.3.29.1.src.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libfreebl3-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2216</id>
    <title>Recommended update for python-packaging</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684229366"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186870" id="1186870" title="python-rpm-macros different dependency generated python-six" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199282" id="1199282" title="Update azure SDK and cli to support aarch64 image creation" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-24629" id="SLE-24629" title="https://jira.suse.com/browse/SLE-24629" type="jira"/>
      <reference href="https://jira.suse.com/browse/PM-3243" id="PM-3243" title="https://jira.suse.com/browse/PM-3243" type="jira"/>
    </references>
    <description>This update for python-packaging fixes the following issues:

- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

- Add patch to fix testsuite on big-endian targets
- Ignore python3.6.2 since the test doesn't support it. 
- update to 21.3:
  * Add a pp3-none-any tag
  * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion
  * Fix a spelling mistake

- update to 21.2:
  * Update documentation entry for 21.1.
  * Update pin to pyparsing to exclude 3.0.0.
  * PEP 656: musllinux support
  * Drop support for Python 2.7, Python 3.4 and Python 3.5
  * Replace distutils usage with sysconfig
  * Add support for zip files
  * Use cached hash attribute to short-circuit tag equality comparisons
  * Specify the default value for the 'specifier' argument to 'SpecifierSet'
  * Proper keyword-only &quot;warn&quot; argument in packaging.tags
  * Correctly remove prerelease suffixes from ~= check
  * Fix type hints for 'Version.post' and 'Version.dev'
  * Use typing alias 'UnparsedVersion'
  * Improve type inference
  * Tighten the return typeo

- Add Provides: for python*dist(packaging). (bsc#1186870)

- add no-legacyversion-warning.patch to restore compatibility with 20.4 

- update to 20.9:
  * Add support for the ``macosx_10_*_universal2`` platform tags 
  * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``

- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros
  * Do not insert an underscore in wheel tags when the interpreter version number is more than 2 digits 
  * Fix flit configuration, to include LICENSE files
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag
  * Add some missing type hints to `packaging.requirements`
  * Officially support Python 3.9
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve the glibc version string.

- update to 20.4:
  * Canonicalize version before comparing specifiers.
  * Change type hint for ``canonicalize_name`` to return ``packaging.utils.NormalizedName``.
  This enables the use of static typing tools (like mypy) to detect mixing of normalized and un-normalized names.
</description>
    <pkglist>
      <collection>
        <package name="python-packaging" epoch="0" version="21.3" release="150200.3.3.1" arch="src" src="src/python-packaging-21.3-150200.3.3.1.src.rpm">
          <filename>python-packaging-21.3-150200.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-packaging" epoch="0" version="21.3" release="150200.3.3.1" arch="noarch" src="noarch/python3-packaging-21.3-150200.3.3.1.noarch.rpm">
          <filename>python3-packaging-21.3-150200.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2066</id>
    <title>Security update for shadow</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682682865"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210507" id="1210507" title="VUL-0: CVE-2023-29383: shadow: apparent /etc/shadow manipulation via chfn" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29383" id="CVE-2023-29383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29383" type="cve"/>
    </references>
    <description>This update for shadow fixes the following issues:

- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150400.10.6.1" arch="noarch" src="noarch/login_defs-4.8.1-150400.10.6.1.noarch.rpm">
          <filename>login_defs-4.8.1-150400.10.6.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.10.6.1" arch="src" src="src/shadow-4.8.1-150400.10.6.1.src.rpm">
          <filename>shadow-4.8.1-150400.10.6.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.10.6.1" arch="x86_64" src="x86_64/shadow-4.8.1-150400.10.6.1.x86_64.rpm">
          <filename>shadow-4.8.1-150400.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.10.6.1" arch="aarch64" src="aarch64/shadow-4.8.1-150400.10.6.1.aarch64.rpm">
          <filename>shadow-4.8.1-150400.10.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2283</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684922115"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211282" id="1211282" title="All clouds - registration client does not fall back to IPv4 when server supports dual stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210021" id="1210021" title="incomplete clean up for failed registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208099" id="1208099" title="[TRACKERBUG] cloud-regionsrv-client fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210020" id="1210020" title="incomplete clean up for failed registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207133" id="1207133" title="cloud-regionsrv client needs log rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208097" id="1208097" title="[TRACKERBUG] cloud-regionsrv-client fixes" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement    
    
- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean
    
- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.2" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.2-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.2-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.2" release="150000.6.96.1" arch="src" src="src/cloud-regionsrv-client-10.1.2-150000.6.96.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.2-150000.6.96.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.96.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1967</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682342351"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208916" id="1208916" title="VUL-0: containerized-data-importer,kubevirt: built against outdated go1.17" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209359" id="1209359" title="VUL-0: CVE-2023-26484: kubevirt: virt-handler cluster takeover" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26484" id="CVE-2023-26484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26484" type="cve"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

- CVE-2023-26484: Limit operator secrets permission. (bsc#1209359)

kubevirt is also rebuilt with a supported GO compiler (bsc#1208916)
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.13.1" arch="src" src="src/kubevirt-0.54.0-150400.3.13.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.13.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.13.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.13.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.13.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-1966</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682342324"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208916" id="1208916" title="VUL-0: containerized-data-importer,kubevirt: built against outdated go1.17" type="bugzilla"/>
    </references>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

- build the containerized-data-importer with a supported golang compiler (bsc#1208916)
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.13.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.13.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.13.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.13.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2192</id>
    <title>Feature update for python311, python311-pip, python311-setuptools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683888557"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2634" id="PED-2634" title="https://jira.suse.com/browse/PED-2634" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This release of python311, python311-pip, python311-setuptools adds the following feature:

- Add Python-3.11 to SLE-15-SP4 Python Module (jsc#PED-68, jsc#PED-2634)
</description>
    <pkglist>
      <collection>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.3.3" arch="noarch" src="noarch/python3-setuptools-44.1.1-150400.9.3.3.noarch.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.3.3.noarch.rpm</filename>
        </package>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.3.3" arch="src" src="src/python3-setuptools-44.1.1-150400.9.3.3.src.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.3.3.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2053</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682587880"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469" id="CVE-2023-29469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484" id="CVE-2023-28484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209918" id="1209918" title="L3: Bootstrapping a traditional client fails with dependencies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210411" id="1210411" title="VUL-0: CVE-2023-28484: libxml2,python-libxml2: NULL dereference in xmlSchemaFixupComplexType" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210412" id="1210412" title="VUL-0: CVE-2023-29469: libxml2,python-libxml2: Hashing of empty dict strings isn't deterministic" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

The following non-security bug was fixed:

- Remove unneeded dependency (bsc#1209918). 
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="src" src="src/libxml2-2.9.14-150400.5.16.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.16.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.16.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.16.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.16.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2051</id>
    <title>Security update for libtpms</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1682587818"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1017" id="CVE-2023-1017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1018" id="CVE-2023-1018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1018" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206022" id="1206022" title="VUL-0: CVE-2023-1017: libtpms: OOB write in CryptParameterDecryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206023" id="1206023" title="VUL-0: CVE-2023-1018: libtpms: OOB read in CryptParameterDecryption" type="bugzilla"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2023-1017: Fixed out-of-bounds write in CryptParameterDecryption (bsc#1206022).
- CVE-2023-1018: Fixed out-of-bounds read in CryptParameterDecryption (bsc#1206023).
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.8.2" release="150300.3.9.1" arch="src" src="src/libtpms-0.8.2-150300.3.9.1.src.rpm">
          <filename>libtpms-0.8.2-150300.3.9.1.src.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="x86_64" src="x86_64/libtpms0-0.8.2-150300.3.9.1.x86_64.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="aarch64" src="aarch64/libtpms0-0.8.2-150300.3.9.1.aarch64.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2438</id>
    <title>Recommended update for kernel-firmware</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686115995"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3699" id="PED-3699" title="https://jira.suse.com/browse/PED-3699" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209601" id="1209601" title="Partner-L3: [HPE Bug] Include Intel QAT 4xxx firmware from" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205811" id="1205811" title="kernel-firmware failed to build due to filesystem full for x86_64 and i586" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601)
- Add iwlwifi-*-72 ucode (bsc#1209681)
- Update constraints for 8GB (bsc#1205811)
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20220509" release="150400.4.16.1" arch="src" src="src/kernel-firmware-20220509-150400.4.16.1.src.rpm">
          <filename>kernel-firmware-20220509-150400.4.16.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-all-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-all-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-atheros-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-brcm-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-i915-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-i915-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-intel-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-intel-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-marvell-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-media-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-media-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-network-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-network-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-nfp-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-platform-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-platform-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-prestera-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-qcom-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-radeon-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-realtek-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-serial-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-serial-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-sound-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-sound-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ti-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ti-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/ucode-amd-20220509-150400.4.16.1.noarch.rpm">
          <filename>ucode-amd-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2315</id>
    <title>Security update for installation-images</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685446057"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
    </references>
    <description>
This update of installation-images fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
</description>
    <pkglist>
      <collection>
        <package name="installation-images-SMO" epoch="0" version="16.57.21" release="150400.3.2.1" arch="src" src="src/installation-images-SMO-16.57.21-150400.3.2.1.src.rpm">
          <filename>installation-images-SMO-16.57.21-150400.3.2.1.src.rpm</filename>
        </package>
        <package name="tftpboot-installation-SLE-Micro-5.3-x86_64" epoch="0" version="16.57.21" release="150400.3.2.1" arch="noarch" src="noarch/tftpboot-installation-SLE-Micro-5.3-x86_64-16.57.21-150400.3.2.1.noarch.rpm">
          <filename>tftpboot-installation-SLE-Micro-5.3-x86_64-16.57.21-150400.3.2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2161</id>
    <title>Feature update for aws-cli, python-boto3, python-botocore, python-s3transfer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683734100"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204917" id="1204917" title="aws-cli cannot be installed; 'nothing provides 'python3-colorama &lt;= 0.4.5'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204537" id="1204537" title="python-boto3 1.22.11 needed as a dependency in SLE-15-SP1 for ec2img-utils" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209255" id="1209255" title="[Trackerbug PED-3781] Update python-botocore to 1.29.84 or newer for boot parameter BIOS/UEFI support in EC2" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3780" id="PED-3780" title="https://jira.suse.com/browse/PED-3780" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2333" id="PED-2333" title="https://jira.suse.com/browse/PED-2333" type="jira"/>
    </references>
    <description>This update for aws-cli, python-boto3, python-botocore, python-s3transfer fixes the following issues:

aws-cli:

- Version update from 1.23.11 to 1.27.89 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333)
  * For the detailed list of changes please consult upstream changelog:
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
  * Updated required dependencies 

python-botocore:

- Version update from 1.25.11 to 1.29.89 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333):
  * For the detailed list of changes please consult https://github.com/boto/botocore/blob/develop/CHANGELOG.rst
  * Updated required dependencies 

python-boto3:

- Version update from 1.22.11 to 1.26.89 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333):
  * For the detailed list of changes please consult https://github.com/boto/boto3/blob/develop/CHANGELOG.rst
  * Updated required dependencies 
- Add additional build dependency requirements to python-python-dateutil and python-jmespath to resolve build failures

python-s3transfer:

- Version update from 0.5.0 to 0.6.0 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333):
  * Dropped support for Python 3.6
  * Added support for flexible checksum when uploading or downloading objects
  * Officially add Python 3.10 support
- Add additional build dependency requirements to python-python-dateutil and python-jmespath to resolve build failures
- Drop unused python-mock build dependency
</description>
    <pkglist>
      <collection>
        <package name="aws-cli" epoch="0" version="1.27.89" release="150200.30.11.1" arch="noarch" src="noarch/aws-cli-1.27.89-150200.30.11.1.noarch.rpm">
          <filename>aws-cli-1.27.89-150200.30.11.1.noarch.rpm</filename>
        </package>
        <package name="aws-cli" epoch="0" version="1.27.89" release="150200.30.11.1" arch="src" src="src/aws-cli-1.27.89-150200.30.11.1.src.rpm">
          <filename>aws-cli-1.27.89-150200.30.11.1.src.rpm</filename>
        </package>
        <package name="python-botocore" epoch="0" version="1.29.89" release="150200.37.14.1" arch="src" src="src/python-botocore-1.29.89-150200.37.14.1.src.rpm">
          <filename>python-botocore-1.29.89-150200.37.14.1.src.rpm</filename>
        </package>
        <package name="python-s3transfer" epoch="0" version="0.6.0" release="150200.9.7.1" arch="src" src="src/python-s3transfer-0.6.0-150200.9.7.1.src.rpm">
          <filename>python-s3transfer-0.6.0-150200.9.7.1.src.rpm</filename>
        </package>
        <package name="python3-botocore" epoch="0" version="1.29.89" release="150200.37.14.1" arch="noarch" src="noarch/python3-botocore-1.29.89-150200.37.14.1.noarch.rpm">
          <filename>python3-botocore-1.29.89-150200.37.14.1.noarch.rpm</filename>
        </package>
        <package name="python3-s3transfer" epoch="0" version="0.6.0" release="150200.9.7.1" arch="noarch" src="noarch/python3-s3transfer-0.6.0-150200.9.7.1.noarch.rpm">
          <filename>python3-s3transfer-0.6.0-150200.9.7.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2240</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684346261"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207410" id="1207410" title="Duplicate link for NVMe device by-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203141" id="1203141" title="The systemd-udevd worker terminated by signal 9 (KILL) on a system with 4096 LUNs" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)
- Optimize when hundred workers claim the same symlink with the same priority (bsc#1203141)
- Add nss-resolve and systemd-network to Packagehub-Subpackages (MSC-626)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/libsystemd0-249.16-150400.8.28.3.x86_64.rpm">
          <filename>libsystemd0-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/libudev1-249.16-150400.8.28.3.x86_64.rpm">
          <filename>libudev1-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="src" src="src/systemd-249.16-150400.8.28.3.src.rpm">
          <filename>systemd-249.16-150400.8.28.3.src.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-container-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-container-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-journal-remote-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-sysvinit-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/udev-249.16-150400.8.28.3.x86_64.rpm">
          <filename>udev-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/libsystemd0-249.16-150400.8.28.3.aarch64.rpm">
          <filename>libsystemd0-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/libudev1-249.16-150400.8.28.3.aarch64.rpm">
          <filename>libudev1-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-container-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-container-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-journal-remote-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-sysvinit-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/udev-249.16-150400.8.28.3.aarch64.rpm">
          <filename>udev-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2103</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683223570"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209187" id="1209187" title="VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209042" id="1209042" title="VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208828" id="1208828" title="VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" id="CVE-2023-1127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1355" id="CVE-2023-1355" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1355" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1264" id="CVE-2023-1264" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1264" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 1443, fixes the following security problems

-  CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042).
-  CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187).
-  CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="src" src="src/vim-9.0.1443-150000.5.40.1.src.rpm">
          <filename>vim-9.0.1443-150000.5.40.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="noarch" src="noarch/vim-data-common-9.0.1443-150000.5.40.1.noarch.rpm">
          <filename>vim-data-common-9.0.1443-150000.5.40.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="x86_64" src="x86_64/vim-small-9.0.1443-150000.5.40.1.x86_64.rpm">
          <filename>vim-small-9.0.1443-150000.5.40.1.x86_64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="x86_64" src="x86_64/xxd-9.0.1443-150000.5.40.1.x86_64.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.x86_64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="s390x" src="s390x/xxd-9.0.1443-150000.5.40.1.s390x.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.s390x.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="ppc64le" src="ppc64le/xxd-9.0.1443-150000.5.40.1.ppc64le.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.ppc64le.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="aarch64" src="aarch64/vim-small-9.0.1443-150000.5.40.1.aarch64.rpm">
          <filename>vim-small-9.0.1443-150000.5.40.1.aarch64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="aarch64" src="aarch64/xxd-9.0.1443-150000.5.40.1.aarch64.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2111</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683290065"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210434" id="1210434" title="VUL-0: CVE-2023-29491: ncurses: memory corruption issues when processing malformed terminfo data" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491" id="CVE-2023-29491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491" type="cve"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2023-29491: Fixed memory corruption issues when processing malformed terminfo data (bsc#1210434).
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.15.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.15.1" arch="src" src="src/ncurses-6.1-150000.5.15.1.src.rpm">
          <filename>ncurses-6.1-150000.5.15.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.15.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.15.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.15.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.15.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.15.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.15.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.15.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2131</id>
    <title>Recommended update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683632148"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207014" id="1207014" title="L3: Invalid environment assignments  when SSH with X forwarding to SLES 15 SP4 after update" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Remove some patches that cause invalid environment assignments (bsc#1207014).
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="src" src="src/openssh-8.4p1-150300.3.18.2.src.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2317</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685448100"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210164" id="1210164" title="Partner-L3: libuuid - downport cache related patch" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issue:

- Add upstream patch to prevent possible performance degradation of libuuid (bsc#1210164)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="src" src="src/util-linux-2.37.2-150400.8.17.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.17.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2104</id>
    <title>Recommended update for procps</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683227153"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209122" id="1209122" title="sysctl typo in /usr/lib/sysctl.d/50-default.conf with a leading '-' in the line for -net.ipv4.ping_group_range" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issue:

- Allow - as leading character to ignore possible errors on systctl entries (bsc#1209122)
</description>
    <pkglist>
      <collection>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.31.1" arch="x86_64" src="x86_64/libprocps7-3.3.15-150000.7.31.1.x86_64.rpm">
          <filename>libprocps7-3.3.15-150000.7.31.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="src" src="src/procps-3.3.15-150000.7.31.1.src.rpm">
          <filename>procps-3.3.15-150000.7.31.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="x86_64" src="x86_64/procps-3.3.15-150000.7.31.1.x86_64.rpm">
          <filename>procps-3.3.15-150000.7.31.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.31.1" arch="aarch64" src="aarch64/libprocps7-3.3.15-150000.7.31.1.aarch64.rpm">
          <filename>libprocps7-3.3.15-150000.7.31.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="aarch64" src="aarch64/procps-3.3.15-150000.7.31.1.aarch64.rpm">
          <filename>procps-3.3.15-150000.7.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2299</id>
    <title>Recommended update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685012603"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205830" id="1205830" title="Intel VROC RAID 1 device didn't rebuild after the failed HDD hot plug into SLES 15 SP4 x86_64 GM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205493" id="1205493" title="Partner-L3: mdmon service is not restarted after switch root" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issues:

- Fixes for mdmon to ensure it runs at the right time in the fight mount namespace, this fixes various problems with
  IMSM raid arrays (bsc#1205493, bsc#1205830)
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="src" src="src/mdadm-4.1-150300.24.27.1.src.rpm">
          <filename>mdadm-4.1-150300.24.27.1.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.27.1.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.27.1.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.27.1.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2159</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683730183"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-1344" id="PED-1344" title="https://jira.suse.com/browse/PED-1344" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209128" id="1209128" title="open-vm-tools 12.2.0 has been released - please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205962" id="1205962" title="open-vm-tools 12.1.5 has been released, please rebase" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Update to 12.2.0 (bsc#1209128)
- Build the containerinfo plugin for TW/SLES15-SP5 and newer.(jsc#PED-1344)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.2.0" release="150300.26.1" arch="x86_64" src="x86_64/libvmtools0-12.2.0-150300.26.1.x86_64.rpm">
          <filename>libvmtools0-12.2.0-150300.26.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.26.1" arch="src" src="src/open-vm-tools-12.2.0-150300.26.1.src.rpm">
          <filename>open-vm-tools-12.2.0-150300.26.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.26.1" arch="x86_64" src="x86_64/open-vm-tools-12.2.0-150300.26.1.x86_64.rpm">
          <filename>open-vm-tools-12.2.0-150300.26.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2193</id>
    <title>Recommended update for snapper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683888926"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210150" id="1210150" title="snapper in SLE 15 has incorrect logic for qgroup rescans" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210151" id="1210151" title="snapper does not delete qgroups after snapshot/subvolume deletion" type="bugzilla"/>
    </references>
    <description>This update for snapper fixes the following issues:

- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
- wait for existing btrfs quota rescans to finish (bsc#1210150)
</description>
    <pkglist>
      <collection>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.3.1" arch="x86_64" src="x86_64/libsnapper5-0.8.16-150300.3.3.1.x86_64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="src" src="src/snapper-0.8.16-150300.3.3.1.src.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="x86_64" src="x86_64/snapper-0.8.16-150300.3.3.1.x86_64.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.3.1" arch="aarch64" src="aarch64/libsnapper5-0.8.16-150300.3.3.1.aarch64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="aarch64" src="aarch64/snapper-0.8.16-150300.3.3.1.aarch64.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2918</id>
    <title>Recommended update for gpgme</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689847273"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1089497" id="1089497" title="libzypp tests failure with GnuPG 2.2.6" type="bugzilla"/>
    </references>
    <description>This update for gpgme fixes the following issues:

gpgme:

- Address failure handling issues when using gpg 2.2.6 via gpgme, as used by libzypp (bsc#1089497)
    
libassuan:

- Version upgrade to 2.5.5 in LTSS to address gpgme new requirements
</description>
    <pkglist>
      <collection>
        <package name="libassuan" epoch="0" version="2.5.5" release="150000.4.5.2" arch="src" src="src/libassuan-2.5.5-150000.4.5.2.src.rpm">
          <filename>libassuan-2.5.5-150000.4.5.2.src.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.5.2" arch="x86_64" src="x86_64/libassuan0-2.5.5-150000.4.5.2.x86_64.rpm">
          <filename>libassuan0-2.5.5-150000.4.5.2.x86_64.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.5.2" arch="aarch64" src="aarch64/libassuan0-2.5.5-150000.4.5.2.aarch64.rpm">
          <filename>libassuan0-2.5.5-150000.4.5.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2140</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683635355"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204042" id="1204042" title="Missing modules with kernel-defaults-base" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210729" id="1210729" title="kernel-default-base is shipped for s390" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208822" id="1208822" title="[Build 20230301] openQA test fails in cve-2022-0185 (fsconfig03)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1142685" id="1142685" title="SLES 15 SP1 - next set of kernel patches in support of FATE 327775 [SCM/vpmem]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1155798" id="1155798" title="Placeholder bug for CPU scheduler backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174777" id="1174777" title="Disable NVMe kABI checkers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189999" id="1189999" title="Scheduler functional and performance backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203039" id="1203039" title="PVT:1030:virt:vPMEM: BTRFS reports read errors from multipath device after installing 5.14.21-150400.24.18 kernel [REGRESSION]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203325" id="1203325" title="[EAR - NOT FOR USA Citizens] workqueue issue rendering XFS and the system unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206649" id="1206649" title="[PATCH] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206891" id="1206891" title="[PATCH] ext4: fix corruption when online resizing a 1K bigalloc fs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206992" id="1206992" title="VUL-0: CVE-2022-2196: kernel-source,kernel-source-rt,kernel-source-azure: kvm: L2 can carry out Spectre v2 attacks on L1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207088" id="1207088" title="L3: Kernel BUG at ../lib/assoc_array.c:652 — ref:_00D1igLOd._5005qJQ2E6:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208076" id="1208076" title="[VT][Xen][15SP5-beta3] Sequential write on iozone(single thread) with 4k block size suffer 27%-49% regression on both xen PV/HV on all QA test boxes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208845" id="1208845" title="VUL-0: CVE-2023-23006: kernel-source-rt,kernel-source,kernel-source-azure: drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209615" id="1209615" title="VUL-0: CVE-2023-0386: kernel: FUSE filesystem low-privileged user privileges escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209693" id="1209693" title="[NetApp SLES15 SP4 Bug] Send Identify with CNS 06h only to I/O controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209739" id="1209739" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209871" id="1209871" title="VUL-0: CVE-2023-1670: kernel-source-rt,kernel-source-azure,kernel-source: Use after free bug in xirc2ps_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209927" id="1209927" title="backport sev-guest security fix for SNP into SLES15 for GCP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209999" id="1209999" title="SLES15 SP5 - [P10][DD2.0] - Wrong numa_node is assigned to vpmem device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210034" id="1210034" title="L3-Question: 1GB Hugepages are generated very slowly on SLES 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210158" id="1210158" title="ice / E810 issues with &gt;= 5.14.21-150400.24.41-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210202" id="1210202" title="VUL-0: CVE-2023-1855: kernel: use-after-free bug in remove function xgene_hwmon_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210206" id="1210206" title="DW PCIe driver update causes kABI breakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210301" id="1210301" title="VUL-0: kernel: cifs.ko out of bounds memory access in smb311_decode_neg_context()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210329" id="1210329" title="VUL-0: CVE-2023-30772: kernel: use after free bug in da9150_charger_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210336" id="1210336" title="VUL-0: CVE-2023-1989: kernel: Use after free bug in btsdio_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210337" id="1210337" title="VUL-0: CVE-2023-1990: kernel: Use after free bug in ndlc_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210439" id="1210439" title="signal handling: don't use BUG_ON() for debugging" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210453" id="1210453" title="VUL-0: CVE-2023-2008: kernel: udmabuf Improper Validation of Array Index Local Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210454" id="1210454" title="VUL-0: CVE-2023-2019: kernel: netdevsim Improper Update of Reference Count Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210469" id="1210469" title="Obsolete KMP obsoletes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210499" id="1210499" title="VUL-0: CVE-2023-0386: kernel live patch: FUSE filesystem low-privileged user privileges escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210506" id="1210506" title="VUL-0: CVE-2023-1998: kernel: x86/speculation: Allow enabling STIBP with legacy IBRS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210629" id="1210629" title="VUL-0: CVE-2023-2176: kernel: Slab-out-of-bound read in compare_netdev_and_ip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210630" id="1210630" title="VUL-0: CVE-2023-2176: kernel live patch: Slab-out-of-bound read in compare_netdev_and_ip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210725" id="1210725" title="NFS Null pointer with 5.14.21-150400.24.60" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210762" id="1210762" title="[PATCH] ext4: fix bad checksum after online resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210763" id="1210763" title="[PATCH] ext4: Fix possible corruption when moving a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210764" id="1210764" title="[PATCH] ext4: fix incorrect options show of original mount_opt and  extend mount_opt2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210765" id="1210765" title="[PATCH] ext4: fix cgroup writeback accounting with fs-layer  encryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210766" id="1210766" title="[PATCH] ext4: fix RENAME_WHITEOUT handling for inline directories" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210767" id="1210767" title="[PATCH] ext4: fix another off-by-one fsmap error on 1k block  filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210768" id="1210768" title="[PATCH] mm/filemap: fix page end in filemap_get_read_batch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210769" id="1210769" title="[PATCH] writeback, cgroup: fix null-ptr-deref write in  bdi_split_work_to_wbs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210770" id="1210770" title="[PATCH] udf: Support splicing to file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210771" id="1210771" title="[PATCH] udf: Check consistency of Space Bitmap Descriptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210793" id="1210793" title="Processes stuck waiting jbd2_fc_begin_commit prevent zombies from being killed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210816" id="1210816" title="signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210817" id="1210817" title="seccomp: Move copy_seccomp() to no failure path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210827" id="1210827" title="cgroup/cpuset: Wake up cpuset_attach_wq tasks in  cpuset_cancel_attach()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210943" id="1210943" title="Update Broadcom Emulex lpfc driver to 14.2.0.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210953" id="1210953" title="arm64: CPPC: high cpu overhead if FIE is enabled and registers are in PCC subspace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210986" id="1210986" title="VUL-0: CVE-2023-2235: kernel: use-after-free inside the Performance Events" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211025" id="1211025" title="mm: take a page reference when removing device exclusive entries" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" id="CVE-2023-2235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" id="CVE-2022-2196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" id="CVE-2023-23006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" id="CVE-2023-1670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" id="CVE-2023-2176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" id="CVE-2023-0386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" id="CVE-2023-1998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" id="CVE-2023-1855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" id="CVE-2023-30772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" id="CVE-2023-2019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" id="CVE-2023-2008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" id="CVE-2023-1989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" id="CVE-2023-1990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3750" id="PED-3750" title="https://jira.suse.com/browse/PED-3750" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3759" id="PED-3759" title="https://jira.suse.com/browse/PED-3759" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).
- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).
- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).
- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).
- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).

The following non-security bugs were fixed:

- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).
- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).
- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).
- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).
- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).
- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).
- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).
- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).
- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).
- ARM: dts: gta04: fix excess dma channel usage (git-fixes).
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).
- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).
- ASN.1: Fix check for strdup() success (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).
- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).
- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).
- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).
- KEYS: Add missing function documentation (git-fixes).
- KEYS: Create static version of public_key_verify_signature (git-fixes).
- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL (git-fixes).
- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).
- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match (git-fixes).
- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).
- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).
- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)
- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)
- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)
- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)
- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)
- Remove obsolete KMP obsoletes (bsc#1210469).
- Revert &quot;Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work&quot; (git-fixes).
- Revert &quot;pinctrl: amd: Disable and mask interrupts on resume&quot; (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).
- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).
- USB: serial: option: add Telit FE990 compositions (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).
- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).
- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).
- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).
- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).
- cifs: fix negotiate context parsing (bsc#1210301).
- clk: add missing of_node_put() in &quot;assigned-clocks&quot; property parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).
- clk: sprd: set max_register according to mapping range (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).
- crypto: caam - Clear some memory in instantiate_rng (git-fixes).
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).
- crypto: sa2ul - Select CRYPTO_DES (git-fixes).
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).
- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).
- drm/amd/display: Fix potential null dereference (git-fixes).
- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).
- drm/armada: Fix a potential double free in an error handling path (git-fixes).
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).
- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).
- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).
- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).
- drm/i915: Fix fast wake AUX sync len (git-fixes).
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).
- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).
- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).
- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).
- drm/probe-helper: Cancel previous job before starting new one (git-fixes).
- drm/rockchip: Drop unbalanced obj unref (git-fixes).
- drm/vgem: add missing mutex_destroy (git-fixes).
- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).
- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).
- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).
- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).
- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).
- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).
- ext4: Fix deadlock during directory rename (bsc#1210763).
- ext4: Fix possible corruption when moving a directory (bsc#1210763).
- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).
- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).
- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).
- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).
- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).
- ext4: fix possible double unlock when moving a directory (bsc#1210763).
- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).
- firmware: qcom_scm: Clear download bit during reboot (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).
- i2c: hisi: Avoid redundant interrupts (git-fixes).
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).
- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).
- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).
- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- k-m-s: Drop Linux 2.6 support
- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).
- kABI: x86/msi: Fix msi message data shadow struct (kabi).
- kabi/severities: ignore KABI for NVMe target (bsc#1174777).
- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- locking/rwbase: Mitigate indefinite writer starvation.
- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).
- media: max9286: Free control handler (git-fixes).
- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).
- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).
- media: venus: dec: Fix handling of the start cmd (git-fixes).
- memstick: fix memory leak if card device is never registered (git-fixes).
- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).
- mm: take a page reference when removing device exclusive entries (bsc#1211025).
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).
- mtd: core: fix error path for nvmem provider (git-fixes).
- mtd: core: fix nvmem error reporting (git-fixes).
- mtd: core: provide unique name for nvmem device, take two (git-fixes).
- mtd: spi-nor: Fix a trivial typo (git-fixes).
- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).
- nfsd: call op_release, even when op_func returns an error (git-fixes).
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).
- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).
- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).
- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).
- nvme-fcloop: fix &quot;inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W} usage&quot; (git-fixes).
- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).
- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).
- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).
- nvme-pci: fix doorbell buffer value endianness (git-fixes).
- nvme-pci: fix mempool alloc size (git-fixes).
- nvme-pci: fix page size checks (git-fixes).
- nvme-pci: fix timeout request state check (git-fixes).
- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).
- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).
- nvme: add device name to warning in uuid_show() (git-fixes).
- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).
- nvme: copy firmware_rev on each init (git-fixes).
- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvme: fix handling single range discard request (git-fixes).
- nvme: fix per-namespace chardev deletion (git-fixes).
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).
- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).
- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- nvme: move nvme_multi_css into nvme.h (git-fixes).
- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).
- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).
- nvme: set dma alignment to dword (git-fixes).
- nvme: use command_id instead of req-&gt;tag in trace_nvme_complete_rq() (git-fixes).
- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).
- nvmet-tcp: fix incomplete data digest send (git-fixes).
- nvmet-tcp: fix regression in data_digest calculation (git-fixes).
- nvmet: add helpers to set the result field for connect commands (git-fixes).
- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).
- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- nvmet: fix a memory leak (git-fixes).
- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).
- nvmet: fix a use-after-free (git-fixes).
- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).
- nvmet: force reconnect when number of queue changes (git-fixes).
- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).
- nvmet: only allocate a single slab for bvecs (git-fixes).
- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).
- perf/core: Fix the same task check in perf_event_set_output (git fixes).
- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).
- perf: fix perf_event_context-&gt;time (git fixes).
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).
- power: supply: cros_usbpd: reclassify &quot;default case!&quot; as debug (git-fixes).
- power: supply: generic-adc-battery: fix unit scaling (git-fixes).
- powerpc/64: Always build with 128-bit long double (bsc#1194869).
- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).
- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).
- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).
- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc: declare unmodified attribute_group usages const (git-fixes).
- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).
- regulator: fan53555: Explicitly include bits header (git-fixes).
- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).
- regulator: stm32-pwr: fix of_iomap leak (git-fixes).
- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).
- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).
- remoteproc: st: Call of_node_put() on iteration error (git-fixes).
- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).
- sched/fair: Fix imbalance overflow (bsc#1155798).
- sched/fair: Limit sched slice duration (bsc#1189999).
- sched/fair: Move calculate of avg_load to a better location (bsc#1155798).
- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).
- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).
- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999).
- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798).
- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039).
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).
- scsi: core: Fix a procfs host directory removal regression (git-fixes).
- scsi: core: Fix a source code comment (git-fixes).
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).
- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).
- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).
- scsi: ipr: Work around fortify-string warning (git-fixes).
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).
- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).
- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).
- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).
- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).
- scsi: mpt3sas: Fix a memory leak (git-fixes).
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).
- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).
- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).
- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).
- scsi: ses: Do not attach if enclosure has no components (git-fixes).
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).
- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).
- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).
- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).
- selftests: sigaltstack: fix -Wuninitialized (git-fixes).
- selinux: ensure av_permissions.h is built when needed (git-fixes).
- selinux: fix Makefile dependencies of flask.h (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).
- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).
- signal handling: do not use BUG_ON() for debugging (bsc#1210439).
- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).
- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).
- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Do not skip cleanup in remove's error path (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).
- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).
- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).
- udf: Support splicing to file (bsc#1210770).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).
- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).
- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).
- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).
- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).
- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).
- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).
- virtio_ring: do not update event idx on get_buf (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).
- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).
- wifi: ath6kl: minor fix for allocation size (git-fixes).
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).
- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).
- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).
- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).
- wifi: iwlwifi: fw: move memset before early return (git-fixes).
- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).
- wifi: iwlwifi: mvm: check firmware response size (git-fixes).
- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).
- wifi: iwlwifi: mvm: fix mvmtxq-&gt;stopped handling (git-fixes).
- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).
- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).
- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).
- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).
- wifi: mac80211: adjust scan cancel comment/check (git-fixes).
- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).
- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).
- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).
- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).
- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).
- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).
- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).
- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- x86/entry: Avoid very early RET (git-fixes).
- x86/entry: Do not call error_entry() for XENPV (git-fixes).
- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).
- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).
- x86/entry: Switch the stack after error_entry() returns (git-fixes).
- x86/fpu: Prevent FPU state corruption (git-fixes).
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).
- x86/msi: Fix msi message data shadow struct (git-fixes).
- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).
- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).
- x86/tsx: Disable TSX development mode at boot (git-fixes).
- x86: __memcpy_flushcache: fix wrong alignment if size &gt; 2^32 (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).

kernel-default-base changed:

- Do not ship on s390x (bsc#1210729)
- Add exfat (bsc#1208822)
- Add _diag modules for included socket types (bsc#1204042)
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.63.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.63.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.63.1.150400.24.27.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.63.1.150400.24.27.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.63.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.63.1.150400.24.27.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2118</id>
    <title>Feature update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683318519"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3821" id="PED-3821" title="https://jira.suse.com/browse/PED-3821" type="jira"/>
    </references>
    <description>This update for haproxy fixes the following issues:

Update to version 2.4.22. (jsc#PED-3821):

* BUG/CRITICAL: http: properly reject empty http header field names
* CI: github: don't warn on deprecated openssl functions on windows
* BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
* DOC: proxy-protocol: fix wrong byte in provided example
* DOC: config: 'http-send-name-header' option may be used in default section
* DOC: config: fix option spop-check proxy compatibility
* BUG/MEDIUM: cache: use the correct time reference when comparing dates
* BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
* BUG/MINOR: ssl/crt-list: warn when a line is malformated
* BUG/MEDIUM: ssl: wrong eviction from the session cache tree
* BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
* BUG/MINOR: sink: free the forwarding task on exit
* BUILD: hpack: include global.h for the trash that is needed in debug mode
* BUG/MINOR: mux-h2: add missing traces on failed headers decoding
* BUG/MINOR: listener: close tiny race between resume_listener() and stopping
* DOC: config: fix &quot;Address formats&quot; chapter syntax
* BUG/MINOR: mux-fcgi: Correctly set pathinfo
* DOC: config: fix aliases for protocol prefixes &quot;udp4@&quot; and &quot;udp6@&quot;
* DOC: config: fix wrong section number for &quot;protocol prefixes&quot;
* BUG/MINOR: listeners: fix suspend/resume of inherited FDs
* BUG/MINOR: http-ana: make set-status also update txn-&gt;status
* BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
* BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
* BUG/MINOR: promex: Don't forget to consume the request on error
* BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
* BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
* CLEANUP: htx: fix a typo in an error message of http_str_to_htx
* BUG/MINOR: http: Memory leak of http redirect rules' format string
* REGTEST: fix the race conditions in hmac.vtc
* REGTEST: fix the race conditions in digest.vtc
* REGTEST: fix the race conditions in json_query.vtc
* BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
* BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
* BUILD: makefile: sort the features list
* BUILD: makefile: build the features list dynamically
* BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
* BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
* BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
* LICENSE: wurfl: clarify the dummy library license.
* BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
* REGTESTS: startup: check maxconn computation
* REGTESTS: fix the race conditions in iff.vtc
* BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
* DOC: promex: Add missing backend metrics
* MINOR: promex: introduce haproxy_backend_agg_check_status
* BUG/MINOR: promex: create haproxy_backend_agg_server_status
* BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
* BUG/MINOR: ssl: Fix potential overflow
* BUG/MEDIUM: ssl: Verify error codes can exceed 63
* BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
* BUILD: peers: peers-t.h depends on stick-table-t.h
* CI: github: change &quot;ubuntu-latest&quot; to &quot;ubuntu-20.04&quot;
* BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
* BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
* [RELEASE] Released version 2.4.20
* Revert &quot;CI: determine actual OpenSSL version dynamically&quot;
* Revert &quot;CI: switch to the &quot;latest&quot; LibreSSL&quot;
* SCRIPTS: announce-release: add a link to the data plane API
* DOC: config: clarify the -m dir and -m dom pattern matching methods
* DOC: config: clarify the fact that &quot;retries&quot; is not just for connections
* DOC: config: explain how default matching method for ACL works
* DOC: config: mention that a single monitor-uri rule is supported
* DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
* DOC: config: provide some configuration hints for &quot;http-reuse&quot;
* Revert &quot;BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action&quot;
* BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
* BUILD: http-htx: Silent build error about a possible NULL start-line
* BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
* BUG/MINOR: log: fix parse_log_message rfc5424 size check
* BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy &quot;from&quot; inheritance
* BUILD: listener: fix build warning on global_listener_rwlock without threads
* BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
* BUILD: peers: Remove unused variables
* BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
* BUG/MINOR: ssl: don't initialize the keylog callback when not required
* BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
* BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
* BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
* BUG/MEDIUM: ring: fix creation of server in uninitialized ring
* DOC: config: fix alphabetical ordering of global section
* REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
* BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
* BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
* BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
* BUG/MINOR: resolvers: Set port before IP address when processing SRV records
* BUG/MINOR: http-htx: Fix error handling during parsing http replies
* BUG/MEDIUM: wdt/clock: properly handle early task hangs
* CI: emit the compiler's version in the build reports
* CI: switch to the &quot;latest&quot; LibreSSL
* BUG/MINOR: ssl: ocsp structure not freed properly in case of error
* BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
* CI: add monthly gcc cross compile jobs
* BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
* BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
* BUG/MAJOR: stick-table: don't process store-response rules for applets
* DOC: management: add forgotten &quot;show startup-logs&quot;
* BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
* CI: SSL: temporarily stick to LibreSSL=3.5.3
* CI: SSL: use proper version generating when &quot;latest&quot; semantic is used
* BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
* BUG/MINOR: sink: Only use backend capability for the sink proxies
* BUG/MEDIUM: compression: handle rewrite errors when updating response headers
* BUG/MINOR: ring: Properly parse connect timeout
* BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
* CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
* CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
* BUG/MINOR: server: make sure &quot;show servers state&quot; hides private bits
* BUG/MAJOR: stick-tables: do not try to index a server name for applets
* DOC: configuration: missing 'if' in tcp-request content example
* BUG/MINOR: backend: only enforce turn-around state when not redispatching
* BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
* MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
* BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
* BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
* BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
* BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
* BUG/MEDIUM: lua: handle stick table implicit arguments right.
* BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
* DOC: config: Fix pgsql-check documentation to make user param mandatory
* BUG/MINOR: checks: update pgsql regex on auth packet
* [RELEASE] Released version 2.4.19
* BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
* REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
* BUG/MINOR: log: improper behavior when escaping log data
* SCRIPTS: announce-release: update some URLs to https
* BUILD: fd: fix a build warning on the DWCAS
* BUG/MEDIUM: captures: free() an error capture out of the proxy lock
* DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
* REGTESTS: ssl/log: test the log-forward with SSL
* BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
* REGTESTS: log: test the log-forward feature
* REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
* BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
* MINOR: listener: small API change
* BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
* CI: cirrus-ci: bump FreeBSD image to 13-1
* BUG/MINOR: signals/poller: ensure wakeup from signals
* BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
* BUG/MINOR: task: always reset a new tasklet's call date
* BUG/MINOR: h1: Support headers case adjustment for TCP proxies
* BUILD: makefile: enable crypt(3) for NetBSD
* BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
* BUG/MINOR: mux-fcgi: fix the &quot;show fd&quot; dest buffer for the subscriber
* BUG/MINOR: mux-h1: fix the &quot;show fd&quot; dest buffer for the subscriber
* BUG/MINOR: mux-h2: fix the &quot;show fd&quot; dest buffer for the subscriber
* BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
* REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
* BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
* BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
* BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
* BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
* BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
* BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
* BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
* DOC: configuration: do-resolve doesn't work with a port in the string
* REGTESTS: Fix prometheus script to perform HTTP health-checks
* BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
* BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
* BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
* BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
* BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
* BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
* BUILD: http: silence an uninitialized warning affecting gcc-5
* BUG/MEDIUM: ring: fix too lax 'size' parser
* BUILD: debug: silence warning on gcc-5
* BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
* BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
* BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
* BUG/MINOR: sink: fix a race condition between the writer and the reader
* BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
* BUG/MEDIUM: proxy: Perform a custom copy for default server settings
* REORG: server: Export srv_settings_cpy() function
* MINOR: server: Constify source server to copy its settings
* BUG/MEDIUM: dns: Properly initialize new DNS session
* BUG/MINOR: peers: Use right channel flag to consider the peer as connected
* BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
* MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
* BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
* MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
* MINOR: http-htx: Use new HTTP functions for the scheme based normalization
* BUG/MEDIUM: h1: Improve authority validation for CONNCET request
* MINOR: http: Add function to detect default port
* MINOR: http: Add function to get port part of a host
* BUG/MEDIUM: mworker: use default maxconn in wait mode
* [RELEASE] Released version 2.4.18
* BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
* BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
* BUILD: add detection for unsupported compiler models
* BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
* REGTESTS: Fix some scripts to be compatible with 2.4 and prior
* BUG/MINOR: tools: fix statistical_prng_range()'s output range
* BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
* BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
* BUG/MEDIUM: tools: avoid calling dlsym() in static builds
* MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
* BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
* BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
* BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
* REGTEESTS: filters: Fix CONNECT request in random-forwarding script
* BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
* BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
* BUG/MINOR: peers: fix possible NULL dereferences at config parsing
* BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
* BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
* BUG/MINOR: peers/config: always fill the bind_conf's argument
* MINOR: fd: Add BUG_ON checks on fd_insert()
* CI: re-enable gcc asan builds
* BUILD: Makefile: Add Lua 5.4 autodetect
* BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
* MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
* BUG/MINOR: http-fetch: Use integer value when possible in &quot;method&quot; sample fetch
* BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
* BUG/MINOR: ssl: Do not look for key in extra files if already in pem
* MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
* BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
* BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
* BUG/MINOR: cli/stats: add missing trailing LF after &quot;show info json&quot;
* BUG/MINOR: server: do not enable DNS resolution on disabled proxies
* BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
* REGTESTS: healthcheckmail: Relax health-check failure condition
* REGTESTS: healthcheckmail: Update the test to be functionnal again
* BUG/MINOR: checks: Properly handle email alerts in trace messages
* BUG/MINOR: trace: Test server existence for health-checks to get proxy
* BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
* BUILD: compiler: implement unreachable for older compilers too
* REGTESTS: restrict_req_hdr_names: Extend supported versions
* REGTESTS: http_abortonclose: Extend supported versions
* BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
* BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
* REGTESTS: http_request_buffer: Increase client timeout to wait &quot;slow&quot; clients
* REGTESTS: abortonclose: Add a barrier to not mix up log messages
* MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
* BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
* BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
* BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
* BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
* BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
* DOC: intro: adjust the numbering of paragrams to keep the output ordered
* DOC: peers: fix port number and addresses on new peers section format
* DOC: peers: clarify when entry expiration date is renewed.
* DOC: peers: indicate that some server settings are not usable
* SCRIPTS: make publish-release try to launch make-releases-json
* SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
* REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
* BUG/MEDIUM: sample: Fix adjusting size in word converter
* BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
* BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
* BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
* BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
* BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
* CI: determine actual OpenSSL version dynamically
* BUILD/MINOR: cpuset fix build for FreeBSD 13.1
* BUG/MINOR: peers: fix error reporting of &quot;bind&quot; lines
* BUG/MINOR: cfgparse: abort earlier in case of allocation error
* BUG/MINOR: check: Reinit the buffer wait list at the end of a check
* BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
* REGTESTS: abortonclose: Fix some race conditions
* BUG/MINOR: ssl: Fix crash when no private key is found in pem
* MINOR: tools: add get_exec_path implementation for solaris based systems.
* BUILD: fix build warning on solaris based systems with __maybe_unused.
* MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
* CI: determine actual LibreSSL version dynamically
* [RELEASE] Released version 2.4.17
* CLEANUP: mux-h1: Fix comments and error messages for global options
* BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
* BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
* BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
* DOC: install: update gcc version requirements
* BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
* BUILD: listener: shut report of possible null-deref in listener_accept()
* BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
* BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
* CI: dynamically determine actual version of h2spec
* DOC: fix typo &quot;ant&quot; for &quot;and&quot; in INSTALL
* BUG/MINOR: map/cli: make sure patterns don't vanish under &quot;show map&quot;'s init
* BUG/MINOR: map/cli: protect the backref list during &quot;show map&quot; errors
* BUG/MEDIUM: cli: make &quot;show cli sockets&quot; really yield
* BUG/MEDIUM: resolvers: make &quot;show resolvers&quot; properly yield
* BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
* DOC: config: Update doc for PR/PH session states to warn about rewrite failures
* MINOR: mux-h2: report a trace event when failing to create a new stream
* BUG/MINOR: mux-h2: mark the stream as open before processing it not after
* BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
* BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
* BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
* SCRIPTS: announce-release: add URL of dev packages
* CI: github actions: update LibreSSL to 3.5.2
* [RELEASE] Released version 2.4.16
* BUILD: opentracing: Fix OT build due to misuse of var_clear()
* BUILD: proto_uxst: do not set unused flag
* BUILD: sockpair: do not set unused flag
* BUILD: fd: remove unused variable totlen in fd_write_frag_line()
* CLEANUP: acl: Remove unused variable when releasing an acl expression
* BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
* BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
* BUILD: compiler: properly distinguish weak and global symbols
* REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
* MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
* MINOR: task: add a new task_instant_wakeup() function
* BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
* DOC: remove my name from the config doc
* BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
* BUG/MINOR: cache: Disable cache if applet creation fails
* SCRIPTS: announce-release: add shortened links to pending issues
* DOC: lua: update a few doc URLs
* SCRIPTS: announce-release: update the doc's URL
* BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
* BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
* BUG/MEDIUM: stream: do not abort connection setup too early
* BUILD: compiler: use a more portable set of asm(&quot;.weak&quot;) statements
* BUILD: sched: workaround crazy and dangerous warning in Clang 14
* BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
* BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
* BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
* BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
* BUG/MINOR: cache: do not display expired entries in &quot;show cache&quot;
* BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
* CI: cirrus: switch to FreeBSD-13.0
* CI: Update to actions/cache@v3
* CI: Update to actions/checkout@v3
* DEBUG: opentracing: show return values of all functions in the debug output
* CLEANUP: opentracing: added variable to store variable length
* CLEANUP: opentracing: added flt_ot_smp_init() function
* CLEANUP: opentracing: removed unused function flt_ot_var_get()
* CLEANUP: opentracing: removed unused function flt_ot_var_unset()
* DOC: opentracing: corrected comments in function descriptions
* EXAMPLES: opentracing: refined shell scripts for testing filter performance
* BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
* BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
* BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
* BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
* BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
* BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
* BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
* BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
* CI: github actions: update OpenSSL to 3.0.2
* BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
* BUG/MINOR: cli/stream: fix &quot;shutdown session&quot; to iterate over all threads
* BUG/MINOR: samples: add missing context names for sample fetch functions
* DOC: reflect H2 timeout changes
* BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
* MEDIUM: mux-h2: slightly relax timeout management rules
* BUG/MEDIUM: stream-int: do not rely on the connection error once established
* BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
* BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
* BUG/MINOR: tools: url2sa reads too far when no port nor path
* DOC: config: Explictly add supported MQTT versions
* MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
* BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
* BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
* CI: github actions: switch to LibreSSL-3.5.1
* BUG/MINOR: server/ssl: free the SNI sample expression
* BUG/MINOR: tools: fix url2sa return value with IPv4
* [RELEASE] Released version 2.4.15
* BUILD: tree-wide: mark a few numeric constants as explicitly long long
* DOC: Fix usage/examples of deprecated ACLs
* BUG/MINOR: stream: make the call_rate only count the no-progress calls
* BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
* BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
* DEBUG: stream: Fix stream trace message to print response buffer state
* DEBUG: stream: Add the missing descriptions for stream trace events
* BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
* DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
* BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: cli: shows correct mode in &quot;show sess&quot;
* BUG/MINOR: add missing modes in proxy_mode_str()
* BUILD: pools: fix backport of no-memory-trimming on non-linux OS
* MINOR: pools: add a new global option &quot;no-memory-trimming&quot;
* BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
* BUG/MINOR: pool: always align pool_heads to 64 bytes
* REGTESTS: fix the race conditions in secure_memcmp.vtc
* REGTESTS: fix the race conditions in normalize_uri.vtc
* BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
* CI: github actions: use cache for SSL libs
* CI: github actions: use cache for OpenTracing
* CI: github actions: add OpenTracing builds
* CI: github actions: add the output of $CC -dM -E-
* [RELEASE] Released version 2.4.14
* BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
* CI: github: enable pool debugging by default
* REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
* BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
* BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
* BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
* BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
* BUG/MINOR: tools: url2sa reads ipv4 too far
* BUG/MINOR: mailers: negotiate SMTP, not ESMTP
* CI: github actions: update OpenSSL to 3.0.1
* CI: github: switch to OpenSSL 3.0.0
* CI: github actions: relax OpenSSL-3.0.0 version comparision
* CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
* CI: github actions: add OpenSSL-3.0.0 builds
* BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
* BUILD: fix compilation for OpenSSL-3.0.0-alpha17
* CI: ssl: keep the old method for ancient OpenSSL versions
* CI: ssl: do not needlessly build the OpenSSL docs
* CI: ssl: enable parallel builds for OpenSSL on Linux
* BUG/MAJOR: compiler: relax alignment constraints on certain structures
* BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
* BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
* BUG/MINOR: sink: Use the right field in appctx context in release callback
* BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
* BUG/MEDIUM: mworker: close unused transferred FDs on load failure
* MINOR: sock: move the unused socket cleaning code into its own function
* [RELEASE] Released version 2.4.13
* BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
* BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
* REGTESTS: peers: leave a bit more time to peers to synchronize
* BUG/MAJOR: spoe: properly detach all agents when releasing the applet
* BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
* BUG/MEDIUM: listener: read-lock the listener during accept()
* MINOR: listener: replace the listener's spinlock with an rwlock
* BUG/MINOR: mworker: does not erase the pidfile upon reload
* BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
* DEBUG: pools: replace the link pointer with the caller's address on pool_free()
* DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
* DEBUG: pools: add extra sanity checks when picking objects from a local cache
* BUG/MINOR: pools: always flush pools about to be destroyed
* BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
* DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
* BUILD: debug/cli: condition test of O_ASYNC to its existence
* DEBUG: cli: add a new &quot;debug dev fd&quot; expert command
* MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
* BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
* BUG/MEDIUM: mcli: do not try to parse empty buffers
* BUG/MEDIUM: cli: Never wait for more data on client shutdown
* BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
* MINOR: channel: add new function co_getdelim() to support multiple delimiters
* MEDIUM: cli: yield between each pipelined command
* BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
* BUILD/MINOR: fix solaris build with clang.
* BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
* BUG/MEDIUM: connection: properly leave stopping list on error
* [RELEASE] Released version 2.4.12
* BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
* BUG/MEDIUM: mworker: don't use _getsocks in wait mode
* [RELEASE] Released version 2.4.11
* BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
* BUG/MINOR: cli: fix _getsocks with musl libc
* BUILD/MINOR: tools: solaris build fix on dladdr.
* BUILD/MINOR: cpuset FreeBSD 14 build fix.
* BUG/MEDIUM: ssl: free the ckch instance linked to a server
* BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
* MINOR: debug: add support for -dL to dump library names at boot
* MINOR: debug: add ability to dump loaded shared libraries
* MINOR: compat: detect support for dl_iterate_phdr()
* BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
* BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
* BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
* MINOR: proxy: add option idle-close-on-response
* REGTESTS: ssl: fix ssl_default_server.vtc
* BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
* DOC: fix misspelled keyword &quot;resolve_retries&quot; in resolvers
* BUILD: ssl: unbreak the build with newer libressl
* BUILD: cli: clear a maybe-unused  warning on some older compilers
* BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
* BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
* [RELEASE] Released version 2.4.10
* BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
* BUG/MINOR: backend: do not set sni on connection reuse
* MINOR: pools: work around possibly slow malloc_trim() during gc
* BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
* DOC: config: retry-on list is space-delimited
* DOC: config: Specify %Ta is only available in HTTP mode
* DOC: spoe: Clarify use of the event directive in spoe-message section
* BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
* IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
* BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
* MINOR: cli: &quot;show version&quot; displays the current process version
* CI: Github Actions: temporarily disable BoringSSL builds
* BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
* MINOR: mux-h1: Improve H1 traces by adding info about http parsers
* BUG/MAJOR: segfault using multiple log forward sections.
* BUG/MEDIUM: resolvers: Detach query item on response error
* BUG/MINOR: server: Don't rely on last default-server to init server SSL context
* BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
* BUILD/MINOR: server: fix compilation without SSL
* [RELEASE] Released version 2.4.9
* BUG/MINOR: cache: Fix loop on cache entries in &quot;show cache&quot;
* MINOR: promex: backend aggregated server check status
* MINOR: server: add ws keyword
* MEDIUM: server/backend: implement websocket protocol selection
* MINOR: connection: add alternative mux_ops param for conn_install_mux_be
* MINOR: connection: implement function to update ALPN
* MINOR: stream/mux: implement websocket stream flag
* BUG/MINOR: ssl: make SSL counters atomic
* MINOR: shctx: add a few BUG_ON() for consistency checks
* BUG/MINOR: shctx: do not look for available blocks when the first one is enough
* BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
* BUG/MEDIUM: cache/cli: make &quot;show cache&quot; thread-safe
* BUG/MEDIUM: mux-h2: always process a pending shut read
* BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
* CLEANUP: ssl: fix wrong #else commentary
* BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
* BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
* BUILD: makefile: simplify detection of libatomic
* BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
* BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
* BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
* BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
* BUG/MINOR: mworker: doesn't launch the program postparser
* BUG/MEDIUM: conn-stream: Don't reset CS flags on close
* MINOR: mux-h1: Slightly Improve H1 traces
* DOC: lua: Be explicit with the Reply object limits
* Revert &quot;BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back&quot;
* BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
* DOC: config: Fix typo in ssl_fc_unique_id description
* BUG/MINOR: cache: properly ignore unparsable max-age in quotes
* BUG/MINOR: resolvers: throw log message if trash not large enough for query
* BUG/MINOR: resolvers: fix sent messages were counted twice
* BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
* MINOR: mux-h2: add trace on extended connect usage
* MINOR: mux-h2: perform a full cycle shutdown+drain on close
* MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="src" src="src/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.src.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="x86_64" src="x86_64/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.x86_64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="aarch64" src="aarch64/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.aarch64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2234</id>
    <title>Security update for ovmf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684333348"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14560" id="CVE-2019-14560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38578" id="CVE-2021-38578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38578" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196741" id="1196741" title="VUL-0: CVE-2021-38578: ovmf: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174246" id="1174246" title="VUL-0: CVE-2019-14560: ovmf: improper check of GetEfiGlobalVariable2() return can potentially lead to to secure boot bypass" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205613" id="1205613" title="win 2k22 UEFI xen VMs  cannot boot in xen after upgrade" type="bugzilla"/>
    </references>
    <description>This update for ovmf fixes the following issues:

- CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize (bsc#1196741).
- CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2() return value (bsc#1174246).
- revert a patch to fix xen boot problems (bsc#1205613)
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202202" release="150400.5.10.1" arch="src" src="src/ovmf-202202-150400.5.10.1.src.rpm">
          <filename>ovmf-202202-150400.5.10.1.src.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202202" release="150400.5.10.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202202-150400.5.10.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202202-150400.5.10.1.noarch.rpm</filename>
        </package>
        <package name="qemu-uefi-aarch64" epoch="0" version="202202" release="150400.5.10.1" arch="noarch" src="noarch/qemu-uefi-aarch64-202202-150400.5.10.1.noarch.rpm">
          <filename>qemu-uefi-aarch64-202202-150400.5.10.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2133</id>
    <title>Recommended update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683632248"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206513" id="1206513" title="SLES 15 SP4 - zlib: add DFLTCC support for using inflate() with a small window" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issues:

- Add DFLTCC support for using inflate() with a small window (bsc#1206513)
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.42.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.42.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.42.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.42.1" arch="src" src="src/zlib-1.2.11-150000.3.42.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.42.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.42.1" arch="x86_64" src="x86_64/zlib-devel-1.2.11-150000.3.42.1.x86_64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.42.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.42.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.42.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.42.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.42.1" arch="aarch64" src="aarch64/zlib-devel-1.2.11-150000.3.42.1.aarch64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.42.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2341</id>
    <title>Recommended update for libsigc++2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685611897"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209094" id="1209094" title="L3-Question: file permissions changed after upgrade from SP1 to SP4 on SLES15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209140" id="1209140" title="Wrongly set executable permission for file /usr/share/doc/packages/libsigc-2_0-0/NEWS" type="bugzilla"/>
    </references>
    <description>This update for libsigc++2 fixes the following issues:

- Remove executable permission for file (bsc#1209094, bsc#1209140)
</description>
    <pkglist>
      <collection>
        <package name="libsigc++2" epoch="0" version="2.10.7" release="150400.3.3.1" arch="src" src="src/libsigc++2-2.10.7-150400.3.3.1.src.rpm">
          <filename>libsigc++2-2.10.7-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libsigc-2_0-0" epoch="0" version="2.10.7" release="150400.3.3.1" arch="x86_64" src="x86_64/libsigc-2_0-0-2.10.7-150400.3.3.1.x86_64.rpm">
          <filename>libsigc-2_0-0-2.10.7-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsigc-2_0-0" epoch="0" version="2.10.7" release="150400.3.3.1" arch="aarch64" src="aarch64/libsigc-2_0-0-2.10.7-150400.3.3.1.aarch64.rpm">
          <filename>libsigc-2_0-0-2.10.7-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2224</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684310050"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2580" id="PED-2580" title="https://jira.suse.com/browse/PED-2580" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211230" id="1211230" title="VUL-0: EMBARGOED: CVE-2023-28319: curl:  use-after-free in SSH sha256 fingerprint check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211233" id="1211233" title="VUL-0: EMBARGOED: CVE-2023-28322: curl: POST-after-PUT confusion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211231" id="1211231" title="VUL-0: EMBARGOED: CVE-2023-28320: curl: siglongjmp race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211232" id="1211232" title="VUL-0: EMBARGOED: CVE-2023-28321: curl: IDN wildcard match" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28319" id="CVE-2023-28319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320" id="CVE-2023-28320" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321" id="CVE-2023-28321" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322" id="CVE-2023-28322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322" type="cve"/>
    </references>
    <description>This update for curl adds the following feature:

Update to version 8.0.1 (jsc#PED-2580)

- CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230).
- CVE-2023-28320: siglongjmp race condition (bsc#1211231).
- CVE-2023-28321: IDN wildcard matching (bsc#1211232).
- CVE-2023-28322: POST-after-PUT confusion (bsc#1211233).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="src" src="src/curl-8.0.1-150400.5.23.1.src.rpm">
          <filename>curl-8.0.1-150400.5.23.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.23.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.23.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.23.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.23.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.23.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.23.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.23.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.23.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.23.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2231</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684310924"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1142685" id="1142685" title="SLES 15 SP1 - next set of kernel patches in support of FATE 327775 [SCM/vpmem]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1155798" id="1155798" title="Placeholder bug for CPU scheduler backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174777" id="1174777" title="Disable NVMe kABI checkers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189999" id="1189999" title="Scheduler functional and performance backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203039" id="1203039" title="PVT:1030:virt:vPMEM: BTRFS reports read errors from multipath device after installing 5.14.21-150400.24.18 kernel [REGRESSION]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203325" id="1203325" title="[EAR - NOT FOR USA Citizens] workqueue issue rendering XFS and the system unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206649" id="1206649" title="[PATCH] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206891" id="1206891" title="[PATCH] ext4: fix corruption when online resizing a 1K bigalloc fs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207088" id="1207088" title="L3: Kernel BUG at ../lib/assoc_array.c:652 — ref:_00D1igLOd._5005qJQ2E6:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208076" id="1208076" title="[VT][Xen][15SP5-beta3] Sequential write on iozone(single thread) with 4k block size suffer 27%-49% regression on both xen PV/HV on all QA test boxes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208845" id="1208845" title="VUL-0: CVE-2023-23006: kernel-source-rt,kernel-source,kernel-source-azure: drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209615" id="1209615" title="VUL-0: CVE-2023-0386: kernel: FUSE filesystem low-privileged user privileges escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209693" id="1209693" title="[NetApp SLES15 SP4 Bug] Send Identify with CNS 06h only to I/O controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209739" id="1209739" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209871" id="1209871" title="VUL-0: CVE-2023-1670: kernel-source-rt,kernel-source-azure,kernel-source: Use after free bug in xirc2ps_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209927" id="1209927" title="backport sev-guest security fix for SNP into SLES15 for GCP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209999" id="1209999" title="SLES15 SP5 - [P10][DD2.0] - Wrong numa_node is assigned to vpmem device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210034" id="1210034" title="1GB Hugepages are generated very slowly on SLES 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210158" id="1210158" title="ice / E810 issues with &gt;= 5.14.21-150400.24.41-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210202" id="1210202" title="VUL-0: CVE-2023-1855: kernel: use-after-free bug in remove function xgene_hwmon_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210206" id="1210206" title="DW PCIe driver update causes kABI breakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210301" id="1210301" title="VUL-0: kernel: cifs.ko out of bounds memory access in smb311_decode_neg_context()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210329" id="1210329" title="VUL-0: CVE-2023-30772: kernel: use after free bug in da9150_charger_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210336" id="1210336" title="VUL-0: CVE-2023-1989: kernel: Use after free bug in btsdio_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210337" id="1210337" title="VUL-0: CVE-2023-1990: kernel: Use after free bug in ndlc_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210439" id="1210439" title="signal handling: don't use BUG_ON() for debugging" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210453" id="1210453" title="VUL-0: CVE-2023-2008: kernel: udmabuf Improper Validation of Array Index Local Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210454" id="1210454" title="VUL-0: CVE-2023-2019: kernel: netdevsim Improper Update of Reference Count Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210469" id="1210469" title="Obsolete KMP obsoletes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210506" id="1210506" title="VUL-0: CVE-2023-1998: kernel: x86/speculation: Allow enabling STIBP with legacy IBRS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210629" id="1210629" title="VUL-0: CVE-2023-2176: kernel: Slab-out-of-bound read in compare_netdev_and_ip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210725" id="1210725" title="NFS Null pointer with 5.14.21-150400.24.60" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210762" id="1210762" title="[PATCH] ext4: fix bad checksum after online resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210763" id="1210763" title="[PATCH] ext4: Fix possible corruption when moving a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210764" id="1210764" title="[PATCH] ext4: fix incorrect options show of original mount_opt and  extend mount_opt2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210765" id="1210765" title="[PATCH] ext4: fix cgroup writeback accounting with fs-layer  encryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210766" id="1210766" title="[PATCH] ext4: fix RENAME_WHITEOUT handling for inline directories" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210767" id="1210767" title="[PATCH] ext4: fix another off-by-one fsmap error on 1k block  filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210768" id="1210768" title="[PATCH] mm/filemap: fix page end in filemap_get_read_batch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210769" id="1210769" title="[PATCH] writeback, cgroup: fix null-ptr-deref write in  bdi_split_work_to_wbs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210770" id="1210770" title="[PATCH] udf: Support splicing to file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210771" id="1210771" title="[PATCH] udf: Check consistency of Space Bitmap Descriptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210793" id="1210793" title="Processes stuck waiting jbd2_fc_begin_commit prevent zombies from being killed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210816" id="1210816" title="signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210817" id="1210817" title="seccomp: Move copy_seccomp() to no failure path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210827" id="1210827" title="cgroup/cpuset: Wake up cpuset_attach_wq tasks in  cpuset_cancel_attach()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210943" id="1210943" title="Update Broadcom Emulex lpfc driver to 14.2.0.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210953" id="1210953" title="arm64: CPPC: high cpu overhead if FIE is enabled and registers are in PCC subspace" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" id="CVE-2023-23006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" id="CVE-2023-1670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" id="CVE-2023-2176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" id="CVE-2023-0386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" id="CVE-2023-1998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" id="CVE-2023-1855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" id="CVE-2023-30772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" id="CVE-2023-2019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" id="CVE-2023-2008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" id="CVE-2023-1989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" id="CVE-2023-1990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3750" id="PED-3750" title="https://jira.suse.com/browse/PED-3750" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3759" id="PED-3759" title="https://jira.suse.com/browse/PED-3759" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206992" id="1206992" title="VUL-0: CVE-2022-2196: kernel-source,kernel-source-rt,kernel-source-azure: kvm: L2 can carry out Spectre v2 attacks on L1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210986" id="1210986" title="VUL-0: CVE-2023-2235: kernel: use-after-free inside the Performance Events" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211025" id="1211025" title="mm: take a page reference when removing device exclusive entries" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" id="CVE-2023-2235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" id="CVE-2022-2196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).
- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).
- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).
- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).
- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).

The following non-security bugs were fixed:

- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).
- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).
- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).
- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).
- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).
- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).
- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).
- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).
- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).
- ARM: dts: gta04: fix excess dma channel usage (git-fixes).
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).
- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).
- ASN.1: Fix check for strdup() success (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).
- Add 42a11bf5c543 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- Add eee878537941 cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).
- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).
- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).
- KEYS: Add missing function documentation (git-fixes).
- KEYS: Create static version of public_key_verify_signature (git-fixes).
- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL (git-fixes).
- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).
- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match (git-fixes).
- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).
- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).
- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)
- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)
- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)
- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)
- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)
- Remove obsolete KMP obsoletes (bsc#1210469).
- Revert &quot;Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work&quot; (git-fixes).
- Revert &quot;pinctrl: amd: Disable and mask interrupts on resume&quot; (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).
- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).
- USB: serial: option: add Telit FE990 compositions (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).
- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).
- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).
- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).
- arm64: enable jump-label jump-label was disabled on arm64 by a backport error.
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).
- cifs: fix negotiate context parsing (bsc#1210301).
- clk: add missing of_node_put() in &quot;assigned-clocks&quot; property parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).
- clk: sprd: set max_register according to mapping range (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).
- config: arm64: enable ERRATUM_843419 Config option was incorrectly replaced by the rt-refresh-configs script
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).
- crypto: caam - Clear some memory in instantiate_rng (git-fixes).
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).
- crypto: sa2ul - Select CRYPTO_DES (git-fixes).
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).
- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).
- drm/amd/display: Fix potential null dereference (git-fixes).
- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).
- drm/armada: Fix a potential double free in an error handling path (git-fixes).
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).
- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).
- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).
- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).
- drm/i915: Fix fast wake AUX sync len (git-fixes).
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).
- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).
- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).
- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).
- drm/probe-helper: Cancel previous job before starting new one (git-fixes).
- drm/rockchip: Drop unbalanced obj unref (git-fixes).
- drm/vgem: add missing mutex_destroy (git-fixes).
- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).
- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).
- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).
- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).
- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).
- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).
- ext4: Fix deadlock during directory rename (bsc#1210763).
- ext4: Fix possible corruption when moving a directory (bsc#1210763).
- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).
- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).
- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).
- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).
- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).
- ext4: fix possible double unlock when moving a directory (bsc#1210763).
- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).
- firmware: qcom_scm: Clear download bit during reboot (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).
- i2c: hisi: Avoid redundant interrupts (git-fixes).
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).
- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).
- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).
- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- k-m-s: Drop Linux 2.6 support
- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).
- kABI: x86/msi: Fix msi message data shadow struct (kabi).
- kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users.
- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- locking/rwbase: Mitigate indefinite writer starvation.
- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).
- media: max9286: Free control handler (git-fixes).
- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).
- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).
- media: venus: dec: Fix handling of the start cmd (git-fixes).
- memstick: fix memory leak if card device is never registered (git-fixes).
- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).
- mm: take a page reference when removing device exclusive entries (bsc#1211025).
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).
- mtd: core: fix error path for nvmem provider (git-fixes).
- mtd: core: fix nvmem error reporting (git-fixes).
- mtd: core: provide unique name for nvmem device, take two (git-fixes).
- mtd: spi-nor: Fix a trivial typo (git-fixes).
- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).
- nfsd: call op_release, even when op_func returns an error (git-fixes).
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).
- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).
- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).
- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).
- nvme-fcloop: fix &quot;inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W} usage&quot; (git-fixes).
- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).
- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).
- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).
- nvme-pci: fix doorbell buffer value endianness (git-fixes).
- nvme-pci: fix mempool alloc size (git-fixes).
- nvme-pci: fix page size checks (git-fixes).
- nvme-pci: fix timeout request state check (git-fixes).
- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).
- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).
- nvme: add device name to warning in uuid_show() (git-fixes).
- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).
- nvme: copy firmware_rev on each init (git-fixes).
- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvme: fix handling single range discard request (git-fixes).
- nvme: fix per-namespace chardev deletion (git-fixes).
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).
- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).
- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- nvme: move nvme_multi_css into nvme.h (git-fixes).
- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).
- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).
- nvme: set dma alignment to dword (git-fixes).
- nvme: use command_id instead of req-&gt;tag in trace_nvme_complete_rq() (git-fixes).
- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).
- nvmet-tcp: fix incomplete data digest send (git-fixes).
- nvmet-tcp: fix regression in data_digest calculation (git-fixes).
- nvmet: add helpers to set the result field for connect commands (git-fixes).
- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).
- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- nvmet: fix a memory leak (git-fixes).
- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).
- nvmet: fix a use-after-free (git-fixes).
- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).
- nvmet: force reconnect when number of queue changes (git-fixes).
- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).
- nvmet: only allocate a single slab for bvecs (git-fixes).
- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).
- perf/core: Fix the same task check in perf_event_set_output (git fixes).
- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).
- perf: fix perf_event_context-&gt;time (git fixes).
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).
- power: supply: cros_usbpd: reclassify &quot;default case!&quot; as debug (git-fixes).
- power: supply: generic-adc-battery: fix unit scaling (git-fixes).
- powerpc/64: Always build with 128-bit long double (bsc#1194869).
- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).
- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).
- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).
- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc: declare unmodified attribute_group usages const (git-fixes).
- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).
- regulator: fan53555: Explicitly include bits header (git-fixes).
- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).
- regulator: stm32-pwr: fix of_iomap leak (git-fixes).
- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).
- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).
- remoteproc: st: Call of_node_put() on iteration error (git-fixes).
- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).
- sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)).
- sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)).
- sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)).
- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).
- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).
- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)).
- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)).
- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream)
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).
- scsi: core: Fix a procfs host directory removal regression (git-fixes).
- scsi: core: Fix a source code comment (git-fixes).
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).
- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).
- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).
- scsi: ipr: Work around fortify-string warning (git-fixes).
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).
- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).
- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).
- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).
- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).
- scsi: mpt3sas: Fix a memory leak (git-fixes).
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).
- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).
- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).
- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).
- scsi: ses: Do not attach if enclosure has no components (git-fixes).
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).
- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).
- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).
- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).
- selftests: sigaltstack: fix -Wuninitialized (git-fixes).
- selinux: ensure av_permissions.h is built when needed (git-fixes).
- selinux: fix Makefile dependencies of flask.h (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).
- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).
- signal handling: do not use BUG_ON() for debugging (bsc#1210439).
- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).
- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).
- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Do not skip cleanup in remove's error path (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).
- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- supported.conf: declaring usb_f_ncm supported as requested in (jsc#PED-3750) Support for the legacy functionality g_ncm is still under discussion (see jsc-PED#3200) For maintainance see (jsc#PED-3759)
- supported.conf: support u_ether and libcomposite (jsc-PED#3750) This is necessary for g_ncm (for maintainance see jsc-PED#3759)
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).
- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).
- udf: Support splicing to file (bsc#1210770).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).
- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).
- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).
- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).
- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).
- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).
- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).
- virtio_ring: do not update event idx on get_buf (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).
- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).
- wifi: ath6kl: minor fix for allocation size (git-fixes).
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).
- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).
- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).
- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).
- wifi: iwlwifi: fw: move memset before early return (git-fixes).
- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).
- wifi: iwlwifi: mvm: check firmware response size (git-fixes).
- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).
- wifi: iwlwifi: mvm: fix mvmtxq-&gt;stopped handling (git-fixes).
- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).
- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).
- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).
- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).
- wifi: mac80211: adjust scan cancel comment/check (git-fixes).
- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).
- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).
- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).
- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).
- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).
- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).
- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).
- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- x86/entry: Avoid very early RET (git-fixes).
- x86/entry: Do not call error_entry() for XENPV (git-fixes).
- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).
- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).
- x86/entry: Switch the stack after error_entry() returns (git-fixes).
- x86/fpu: Prevent FPU state corruption (git-fixes).
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).
- x86/msi: Fix msi message data shadow struct (git-fixes).
- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).
- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).
- x86/tsx: Disable TSX development mode at boot (git-fixes).
- x86: __memcpy_flushcache: fix wrong alignment if size &gt; 2^32 (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.28.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.28.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.28.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.28.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.28.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.28.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2254</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684502454"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210298" id="1210298" title="VUL-0: containerd: go1.18 is EOL" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

- Rebuild containerd with a current version of go to catch up on bugfixes and security fixes (bsc#1210298)
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="src" src="src/containerd-1.6.19-150000.90.3.src.rpm">
          <filename>containerd-1.6.19-150000.90.3.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="x86_64" src="x86_64/containerd-1.6.19-150000.90.3.x86_64.rpm">
          <filename>containerd-1.6.19-150000.90.3.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="aarch64" src="aarch64/containerd-1.6.19-150000.90.3.aarch64.rpm">
          <filename>containerd-1.6.19-150000.90.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2325</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685455113"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="src" src="src/cni-0.7.1-150100.3.10.1.src.rpm">
          <filename>cni-0.7.1-150100.3.10.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.10.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.10.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.10.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2324</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685454794"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.13.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.13.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.13.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2157</id>
    <title>Security update for conmon</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1683717694"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of conmon fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="src" src="src/conmon-2.1.5-150400.3.8.1.src.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="x86_64" src="x86_64/conmon-2.1.5-150400.3.8.1.x86_64.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="aarch64" src="aarch64/conmon-2.1.5-150400.3.8.1.aarch64.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2256</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684502833"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of runc fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="src" src="src/runc-1.1.5-150000.43.1.src.rpm">
          <filename>runc-1.1.5-150000.43.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="x86_64" src="x86_64/runc-1.1.5-150000.43.1.x86_64.rpm">
          <filename>runc-1.1.5-150000.43.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="aarch64" src="aarch64/runc-1.1.5-150000.43.1.aarch64.rpm">
          <filename>runc-1.1.5-150000.43.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2761</id>
    <title>Recommended update for libjansson</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688390226"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201817" id="1201817" title="Update libjansson from 2.9 to 2.14 on Leap" type="bugzilla"/>
    </references>
    <description>This update for libjansson fixes the following issues:

- Update to 2.14 (bsc#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
      corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime version checking
    + Add json_object_update_new(), json_object_update_existing_new()
      and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
      that can be omitted if null 
    + Add `json_error_code()` to retrieve numeric error codes
    + Enable thread safety for `json_dump()` on all systems.
      Enable thread safe `json_decref()` and `json_incref()` for
      modern compilers 
    + Add `json_sprintf()` and `json_vsprintf()` 
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object 
    + Avoid invalid memory read in `json_pack()` 
    + Call va_end after va_copy in `json_vsprintf()` 
    + Improve handling of formats with '?' and '*' in `json_pack()`
    + Remove inappropriate `jsonp_free()` which caused
      segmentation fault in error handling 
    + Fix incorrect report of success from `json_dump_file()` when
      an error is returned by `fclose()` 
    + Make json_equal() const-correct 
    + Fix incomplete stealing of references by `json_pack()` 
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.
</description>
    <pkglist>
      <collection>
        <package name="libjansson" epoch="0" version="2.14" release="150000.3.3.1" arch="src" src="src/libjansson-2.14-150000.3.3.1.src.rpm">
          <filename>libjansson-2.14-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.3.1" arch="x86_64" src="x86_64/libjansson4-2.14-150000.3.3.1.x86_64.rpm">
          <filename>libjansson4-2.14-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.3.1" arch="aarch64" src="aarch64/libjansson4-2.14-150000.3.3.1.aarch64.rpm">
          <filename>libjansson4-2.14-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2585</id>
    <title>Security update for salt and python-pyzmq</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687349773"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-666" id="MSQA-666" title="https://jira.suse.com/browse/MSQA-666" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186945" id="1186945" title="python3-jupyter_console has a missing requirement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207071" id="1207071" title="[Build 20230111] fails to start salt: AttributeError: 'EntryPoints' object has no attribute 'items'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209233" id="1209233" title="salt 3005.1: Need to add python3-jmespath to python3-salt's RPM Requires" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211612" id="1211612" title="salt update to 3006 has excessively tight requirements for python-pyzmq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211754" id="1211754" title="SLE Micro 5.x: Module function `transactional_update.pkg_install` is not available" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212516" id="1212516" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212517" id="1212517" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-4361" id="PED-4361" title="https://jira.suse.com/browse/PED-4361" type="jira"/>
    </references>
    <description>This update for salt and python-pyzmq fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for &quot;importlib-metadata&gt;=5.0.0&quot; (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)

python-pyzmq:

- Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)
</description>
    <pkglist>
      <collection>
        <package name="python-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="src" src="src/python-pyzmq-17.1.2-150000.3.5.2.src.rpm">
          <filename>python-pyzmq-17.1.2-150000.3.5.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="x86_64" src="x86_64/python3-pyzmq-17.1.2-150000.3.5.2.x86_64.rpm">
          <filename>python3-pyzmq-17.1.2-150000.3.5.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="aarch64" src="aarch64/python3-pyzmq-17.1.2-150000.3.5.2.aarch64.rpm">
          <filename>python3-pyzmq-17.1.2-150000.3.5.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2571</id>
    <title>Security update for Salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687346824"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-666" id="MSQA-666" title="https://jira.suse.com/browse/MSQA-666" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207071" id="1207071" title="[Build 20230111] fails to start salt: AttributeError: 'EntryPoints' object has no attribute 'items'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209233" id="1209233" title="salt 3005.1: Need to add python3-jmespath to python3-salt's RPM Requires" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211612" id="1211612" title="salt update to 3006 has excessively tight requirements for python-pyzmq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211754" id="1211754" title="SLE Micro 5.x: Module function `transactional_update.pkg_install` is not available" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212516" id="1212516" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212517" id="1212517" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-4361" id="PED-4361" title="https://jira.suse.com/browse/PED-4361" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for &quot;importlib-metadata&gt;=5.0.0&quot; (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
    
python-jmespath:
    
- Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt
  (no source changes)
    
python-ply:
    
- Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath
  (no source changes)
 </description>
    <pkglist>
      <collection>
        <package name="python-jmespath" epoch="0" version="0.9.3" release="150000.3.3.4" arch="src" src="src/python-jmespath-0.9.3-150000.3.3.4.src.rpm">
          <filename>python-jmespath-0.9.3-150000.3.3.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python-ply" epoch="0" version="3.10" release="150000.3.3.4" arch="src" src="src/python-ply-3.10-150000.3.3.4.src.rpm">
          <filename>python-ply-3.10-150000.3.3.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="src" src="src/python-simplejson-3.17.2-150300.3.2.3.src.rpm">
          <filename>python-simplejson-3.17.2-150300.3.2.3.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-jmespath" epoch="0" version="0.9.3" release="150000.3.3.4" arch="noarch" src="noarch/python3-jmespath-0.9.3-150000.3.3.4.noarch.rpm">
          <filename>python3-jmespath-0.9.3-150000.3.3.4.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-ply" epoch="0" version="3.10" release="150000.3.3.4" arch="noarch" src="noarch/python3-ply-3.10-150000.3.3.4.noarch.rpm">
          <filename>python3-ply-3.10-150000.3.3.4.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="x86_64" src="x86_64/python3-simplejson-3.17.2-150300.3.2.3.x86_64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.2.3.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="src" src="src/salt-3006.0-150400.8.34.2.src.rpm">
          <filename>salt-3006.0-150400.8.34.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/salt-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>salt-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="aarch64" src="aarch64/python3-simplejson-3.17.2-150300.3.2.3.aarch64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.2.3.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/salt-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>salt-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2214</id>
    <title>Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684228612"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210906" id="1210906" title="[Kubevirt][PublicBeta][Build72.4] Unable to execute QEMU command 'migrate-set-capabilities'" type="bugzilla"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

- Always render block devices in hp-volume- pod template
- Detect ServiceMonitor and PrometheusRule CRDs
- TSC frequencies: add 250PPM tolerance (bsc#1210906)
- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.16.1" arch="src" src="src/kubevirt-0.54.0-150400.3.16.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.16.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.16.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.16.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.16.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.16.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.16.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2236</id>
    <title>Security update for python-looseversion</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684334665"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-666" id="MSQA-666" title="https://jira.suse.com/browse/MSQA-666" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4360" id="PED-4360" title="https://jira.suse.com/browse/PED-4360" type="jira"/>
    </references>
    <description>This update for python-looseversion fixes the following issues:

- Provide python-looseversion version 1.0.2 as new Salt 3006 dependency. (jsc#PED-4360)
</description>
    <pkglist>
      <collection>
        <package name="python-looseversion" epoch="0" version="1.0.2" release="150100.3.3.1" arch="src" src="src/python-looseversion-1.0.2-150100.3.3.1.src.rpm">
          <filename>python-looseversion-1.0.2-150100.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-looseversion" epoch="0" version="1.0.2" release="150100.3.3.1" arch="noarch" src="noarch/python3-looseversion-1.0.2-150100.3.3.1.noarch.rpm">
          <filename>python3-looseversion-1.0.2-150100.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2237</id>
    <title>Recommended update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684336247"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211144" id="1211144" title="[Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim" type="bugzilla"/>
    </references>
    <description>This update for vim fixes the following issues:

* Make xxd conflict with the previous vim packages to avoid a file conflict during migration (bsc#1211144)
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="src" src="src/vim-9.0.1443-150000.5.43.1.src.rpm">
          <filename>vim-9.0.1443-150000.5.43.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="noarch" src="noarch/vim-data-common-9.0.1443-150000.5.43.1.noarch.rpm">
          <filename>vim-data-common-9.0.1443-150000.5.43.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="x86_64" src="x86_64/vim-small-9.0.1443-150000.5.43.1.x86_64.rpm">
          <filename>vim-small-9.0.1443-150000.5.43.1.x86_64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="x86_64" src="x86_64/xxd-9.0.1443-150000.5.43.1.x86_64.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.x86_64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="s390x" src="s390x/xxd-9.0.1443-150000.5.43.1.s390x.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.s390x.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="ppc64le" src="ppc64le/xxd-9.0.1443-150000.5.43.1.ppc64le.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.ppc64le.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="aarch64" src="aarch64/vim-small-9.0.1443-150000.5.43.1.aarch64.rpm">
          <filename>vim-small-9.0.1443-150000.5.43.1.aarch64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="aarch64" src="aarch64/xxd-9.0.1443-150000.5.43.1.aarch64.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2262</id>
    <title>Recommended update for nftables</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684749573"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210773" id="1210773" title="firewalld: crash in libnftables when trying to apply a rich reject rules based on MAC address" type="bugzilla"/>
    </references>
    <description>This update for nftables fixes the following issue:

- A crash in nftables if layer2 reject rules are processed (bsc#1210773).
</description>
    <pkglist>
      <collection>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150300.3.6.1" arch="x86_64" src="x86_64/libnftables1-0.9.8-150300.3.6.1.x86_64.rpm">
          <filename>libnftables1-0.9.8-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="src" src="src/nftables-0.9.8-150300.3.6.1.src.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="x86_64" src="x86_64/nftables-0.9.8-150300.3.6.1.x86_64.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="x86_64" src="x86_64/python3-nftables-0.9.8-150300.3.6.1.x86_64.rpm">
          <filename>python3-nftables-0.9.8-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150300.3.6.1" arch="aarch64" src="aarch64/libnftables1-0.9.8-150300.3.6.1.aarch64.rpm">
          <filename>libnftables1-0.9.8-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="aarch64" src="aarch64/nftables-0.9.8-150300.3.6.1.aarch64.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="aarch64" src="aarch64/python3-nftables-0.9.8-150300.3.6.1.aarch64.rpm">
          <filename>python3-nftables-0.9.8-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2279</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684907892"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210640" id="1210640" title="dracut network-legacy creates lease info file without IP version suffix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204478" id="1204478" title="unable to boot on fips mode with  disk encryption" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="src" src="src/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.src.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="x86_64" src="x86_64/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="aarch64" src="aarch64/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2243</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684413678"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208479" id="1208479" title="VUL-0: CVE-2022-33972: ucode-intel: kernel: Intel firmware update for incorrect calculation in microcode keying mechanism" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211382" id="1211382" title="VUL-0: ucode-intel: 20230512  release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33972" id="CVE-2022-33972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33972" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382).
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
- Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20230512" release="150200.24.1" arch="src" src="src/ucode-intel-20230512-150200.24.1.src.rpm">
          <filename>ucode-intel-20230512-150200.24.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20230512" release="150200.24.1" arch="x86_64" src="x86_64/ucode-intel-20230512-150200.24.1.x86_64.rpm">
          <filename>ucode-intel-20230512-150200.24.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2276</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1684907712"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208581" id="1208581" title="SAP LPAR deployment with 90 cores with PowerVS fail to boot with SRC B2008105" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204563" id="1204563" title="grub2-once --list outputs sh: line 1: terminal_output: command not found" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563) 

- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="src" src="src/grub2-2.06-150400.11.33.1.src.rpm">
          <filename>grub2-2.06-150400.11.33.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.33.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.33.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.33.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.33.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2307</id>
    <title>Recommended update for kbd</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685348999"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210702" id="1210702" title="Update keyboard layouts 'korean' and 'arabic'" type="bugzilla"/>
    </references>
    <description>This update for kbd fixes the following issue:

- Add 'ara' vc keymap, 'ara' is slightly better than 'arabic' as it matches the name of its X11 layout counterpart. (bsc#1210702)
</description>
    <pkglist>
      <collection>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="src" src="src/kbd-2.4.0-150400.5.6.1.src.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="x86_64" src="x86_64/kbd-2.4.0-150400.5.6.1.x86_64.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="kbd-legacy" epoch="0" version="2.4.0" release="150400.5.6.1" arch="noarch" src="noarch/kbd-legacy-2.4.0-150400.5.6.1.noarch.rpm">
          <filename>kbd-legacy-2.4.0-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="aarch64" src="aarch64/kbd-2.4.0-150400.5.6.1.aarch64.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2649</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687852940"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- update to 0.371:
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.371" release="150000.3.62.1" arch="noarch" src="noarch/hwdata-0.371-150000.3.62.1.noarch.rpm">
          <filename>hwdata-0.371-150000.3.62.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.371" release="150000.3.62.1" arch="src" src="src/hwdata-0.371-150000.3.62.1.src.rpm">
          <filename>hwdata-0.371-150000.3.62.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2482</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686547204"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211272" id="1211272" title="%sysctl_apply() and %binfmt_apply() rpm macros provided by systemd can incorrectly operate in a chroot" type="bugzilla"/>
    </references>
    <description>This update for systemd-rpm-macros fixes the following issues:

- Adjust functions so they are disabled when called from a chroot (bsc#1211272)
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="13" release="150000.7.33.1" arch="noarch" src="noarch/systemd-rpm-macros-13-150000.7.33.1.noarch.rpm">
          <filename>systemd-rpm-macros-13-150000.7.33.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="13" release="150000.7.33.1" arch="src" src="src/systemd-rpm-macros-13-150000.7.33.1.src.rpm">
          <filename>systemd-rpm-macros-13-150000.7.33.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2510</id>
    <title>Recommended update for drbd-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686747933"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209783" id="1209783" title="drbd-utils: crm-fence-peer incompatible with Pacemaker 2.1 and need backport 854a5f6 and 8a28be7" type="bugzilla"/>
    </references>
    <description>This update for drbd-utils fixes the following issues:

- Improve compatibility with Pacemaker 2.1 (bsc#1209783)
</description>
    <pkglist>
      <collection>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="src" src="src/drbd-utils-9.19.0-150400.3.17.1.src.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.src.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="x86_64" src="x86_64/drbd-utils-9.19.0-150400.3.17.1.x86_64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="aarch64" src="aarch64/drbd-utils-9.19.0-150400.3.17.1.aarch64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2333</id>
    <title>Recommended update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685516576"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210593" id="1210593" title="Crash in zlib deflateBound() function on s390x" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issue:

- Fix function calling order to avoid crashes (bsc#1210593)
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.45.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.45.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.45.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.45.1" arch="src" src="src/zlib-1.2.11-150000.3.45.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.45.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.45.1" arch="x86_64" src="x86_64/zlib-devel-1.2.11-150000.3.45.1.x86_64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.45.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.45.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.45.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.45.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.45.1" arch="aarch64" src="aarch64/zlib-devel-1.2.11-150000.3.45.1.aarch64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2625</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687533448"/>
    <references/>
    <description>This update for gcc12 fixes the following issues:

- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204

  * includes regression and other bug fixes

- Speed up builds with --enable-link-serialization.

- Update embedded newlib to version 4.2.0
</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="src" src="src/gcc12-12.3.0+git1204-150000.1.10.1.src.rpm">
          <filename>gcc12-12.3.0+git1204-150000.1.10.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="x86_64" src="x86_64/libgcc_s1-12.3.0+git1204-150000.1.10.1.x86_64.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.10.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="x86_64" src="x86_64/libstdc++6-12.3.0+git1204-150000.1.10.1.x86_64.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.10.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="aarch64" src="aarch64/libgcc_s1-12.3.0+git1204-150000.1.10.1.aarch64.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.10.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="aarch64" src="aarch64/libstdc++6-12.3.0+git1204-150000.1.10.1.aarch64.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2366</id>
    <title>Recommended update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685949795"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209245" id="1209245" title="Xen HVM fails to be destroyed if it crashes with crashkernel+kdump configured" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209237" id="1209237" title="xen-syms doesn't contain debug-info" type="bugzilla"/>
    </references>
    <description>This update for xen fixes the following issues:

- Added debug-info to xen-syms (bsc#1209237)

- Update to Xen 4.16.4 bug fix release (bsc#1027519)

- Added upstream bug fixes (bsc#1027519)
  
- Fix host-assisted kexec/kdump for HVM domUs (bsc#1209245)

- Drop patches contained in new tarball and switch to upstream backports for some patches
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.4_02" release="150400.4.28.1" arch="src" src="src/xen-4.16.4_02-150400.4.28.1.src.rpm">
          <filename>xen-4.16.4_02-150400.4.28.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.4_02" release="150400.4.28.1" arch="x86_64" src="x86_64/xen-libs-4.16.4_02-150400.4.28.1.x86_64.rpm">
          <filename>xen-libs-4.16.4_02-150400.4.28.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2313</id>
    <title>Security update for c-ares</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685431812"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31124" id="CVE-2023-31124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31124" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32067" id="CVE-2023-32067" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32067" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31147" id="CVE-2023-31147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31130" id="CVE-2023-31130" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31130" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211604" id="1211604" title="VUL-0: CVE-2023-32067: c-ares: 0-byte UDP payload causes Denial of Service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211607" id="1211607" title="VUL-0: CVE-2023-31124: c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211605" id="1211605" title="VUL-0: CVE-2023-31147: c-ares: Insufficient randomness in generation of DNS query IDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211606" id="1211606" title="VUL-0: CVE-2023-31130: c-ares: Buffer Underwrite in ares_inet_net_pton()" type="bugzilla"/>
    </references>
    <description>This update for c-ares fixes the following issues:

Update to version 1.19.1:

- CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604)
- CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605)
- CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606)
- CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607)
- Fix uninitialized memory warning in test
- ares_getaddrinfo() should allow a port of 0
- Fix memory leak in ares_send() on error
- Fix comment style in ares_data.h
- Fix typo in ares_init_options.3
- Sync ax_pthread.m4 with upstream
- Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support 
</description>
    <pkglist>
      <collection>
        <package name="c-ares" epoch="0" version="1.19.1" release="150000.3.23.1" arch="src" src="src/c-ares-1.19.1-150000.3.23.1.src.rpm">
          <filename>c-ares-1.19.1-150000.3.23.1.src.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.23.1" arch="x86_64" src="x86_64/libcares2-1.19.1-150000.3.23.1.x86_64.rpm">
          <filename>libcares2-1.19.1-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.23.1" arch="aarch64" src="aarch64/libcares2-1.19.1-150000.3.23.1.aarch64.rpm">
          <filename>libcares2-1.19.1-150000.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2658</id>
    <title>Recommended update for containerd, docker, runc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687870032"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211578" id="1211578" title="docker 23.0.6-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210298" id="1210298" title="VUL-0: containerd: go1.18 is EOL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208074" id="1208074" title="docker 23.0.0-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207004" id="1207004" title="runc changes owner of the /dev/null - ref:_00D1igLOd._5005qIpzdl:ref" type="bugzilla"/>
    </references>
    <description>This update for containerd, docker, runc fixes the following issues:

- Update to containerd v1.6.21 (bsc#1211578)
- Update to Docker 23.0.6-ce (bsc#1211578)
- Update to runc v1.1.7
- Require a minimum Go version explicitly (bsc#1210298)
- Re-unify packaging for SLE-12 and SLE-15
- Fix build on SLE-12 by switching back to libbtrfs-devel headers
- Allow man pages to be built without internet access in OBS
- Add apparmor-parser as a Recommends to make sure that most users will end up with it installed   
  even if they are primarily running SELinux
- Fix syntax of boolean dependency
- Allow to install container-selinux instead of apparmor-parser
- Change to using systemd-sysusers
- Update runc.keyring to upstream version
- Fix the inability to use `/dev/null` when inside a container (bsc#1207004)
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="src" src="src/containerd-1.6.21-150000.93.1.src.rpm">
          <filename>containerd-1.6.21-150000.93.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="x86_64" src="x86_64/containerd-1.6.21-150000.93.1.x86_64.rpm">
          <filename>containerd-1.6.21-150000.93.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="src" src="src/docker-23.0.6_ce-150000.178.1.src.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="x86_64" src="x86_64/docker-23.0.6_ce-150000.178.1.x86_64.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="src" src="src/runc-1.1.7-150000.46.1.src.rpm">
          <filename>runc-1.1.7-150000.46.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="x86_64" src="x86_64/runc-1.1.7-150000.46.1.x86_64.rpm">
          <filename>runc-1.1.7-150000.46.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="aarch64" src="aarch64/containerd-1.6.21-150000.93.1.aarch64.rpm">
          <filename>containerd-1.6.21-150000.93.1.aarch64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="aarch64" src="aarch64/docker-23.0.6_ce-150000.178.1.aarch64.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.aarch64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="aarch64" src="aarch64/runc-1.1.7-150000.46.1.aarch64.rpm">
          <filename>runc-1.1.7-150000.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2347</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685622815"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32324" id="CVE-2023-32324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32324" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211643" id="1211643" title="VUL-0: EMBARGOED: CVE-2023-32324: cups: buffer overflow vulnerability in the function format_log_line could cause a denial-of-service" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643).
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.43.1" arch="src" src="src/cups-2.2.7-150000.3.43.1.src.rpm">
          <filename>cups-2.2.7-150000.3.43.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.43.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.43.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.43.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.43.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.43.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.43.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.43.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.43.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.43.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.43.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.43.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.43.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2334</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685518100"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0800" id="CVE-2023-0800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0802" id="CVE-2023-0802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0803" id="CVE-2023-0803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0803" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0799" id="CVE-2023-0799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0795" id="CVE-2023-0795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0795" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0804" id="CVE-2023-0804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0801" id="CVE-2023-0801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0796" id="CVE-2023-0796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0798" id="CVE-2023-0798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0797" id="CVE-2023-0797" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0797" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208234" id="1208234" title="VUL-1: CVE-2023-0803: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208228" id="1208228" title="VUL-1: CVE-2023-0797: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208232" id="1208232" title="VUL-1: CVE-2023-0801: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208233" id="1208233" title="VUL-1: CVE-2023-0802: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208230" id="1208230" title="VUL-1: CVE-2023-0799: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208231" id="1208231" title="VUL-1: CVE-2023-0800: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208227" id="1208227" title="VUL-1: CVE-2023-0796: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208236" id="1208236" title="VUL-1: CVE-2023-0804: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208226" id="1208226" title="VUL-1: CVE-2023-0795: tiff: out-of-bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208229" id="1208229" title="VUL-1: CVE-2023-0798: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

Fixed multiple out of bounds read/write security issues:

  CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228),
  CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231),
  CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234),
  CVE-2023-0804 (bsc#1208236).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.28.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.28.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.28.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.28.1" arch="src" src="src/tiff-4.0.9-150000.45.28.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.28.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.28.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.28.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2912</id>
    <title>Recommended update for linux-glibc-devel</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689844391"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211096" id="1211096" title="sev-guest.h missing from linux-glibc-devel package" type="bugzilla"/>
    </references>
    <description>This update for linux-glibc-devel fixes the following issues:

- Add linux/sev-guest.h (bsc#1211096)
</description>
    <pkglist>
      <collection>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="src" src="src/linux-glibc-devel-5.14-150400.6.6.1.src.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.src.rpm</filename>
        </package>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="x86_64" src="x86_64/linux-glibc-devel-5.14-150400.6.6.1.x86_64.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.x86_64.rpm</filename>
        </package>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="aarch64" src="aarch64/linux-glibc-devel-5.14-150400.6.6.1.aarch64.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2342</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685612072"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" id="CVE-2023-2650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211430" id="1211430" title="VUL-0: CVE-2023-2650: EMBARGOED: openssl-3,openssl-1_1,compat-openssl098,openssl1,openssl-1_0_0,openssl: Possible DoS translating ASN.1 object identifiers" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.37.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2363</id>
    <title>Recommended update for libnvme, nvme-cli</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685949706"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209131" id="1209131" title="Segfault in libnvme during garbage collection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209550" id="1209550" title="Misc fixes required for nvme supported-log-pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209905" id="1209905" title="libnvme: Fix segmentation fault during garbage collection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209669" id="1209669" title="nvme admin-passthru command displays junk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210105" id="1210105" title="NVMe/FC autoconnect scripts fail to parse config JSON file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210089" id="1210089" title="NVMe/FC config JSON file handling is broken" type="bugzilla"/>
    </references>
    <description>This update for libnvme, nvme-cli fixes the following issues:

- Fix GC in Python binding (bsc#1209905 bsc#1209131)
- Fix crash when printing json output for supported log pages (bsc#1209550)
- Add coverity reported fixes (bsc#1209669)
- Update host_traddr when using config.json file (bsc#1210089)
- Fix compiler warning (git-fixes)
- Fix condition in autoconnect service (bsc#1210105)
- Set version-tag so that version are correctly reported
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="src" src="src/libnvme-1.0+32.gb30ab4c96c2d-150400.3.21.1.src.rpm">
          <filename>libnvme-1.0+32.gb30ab4c96c2d-150400.3.21.1.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="x86_64" src="x86_64/libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.x86_64.rpm">
          <filename>libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="src" src="src/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.src.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="x86_64" src="x86_64/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.x86_64.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="aarch64" src="aarch64/libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.aarch64.rpm">
          <filename>libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="aarch64" src="aarch64/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.aarch64.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2657</id>
    <title>Recommended update for libcontainers-common</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687869861"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211124" id="1211124" title="Path &quot;/etc/SUSEConnect&quot; from &quot;/etc/containers/mounts.conf&quot; (and others) doesn't exist on every container startup" type="bugzilla"/>
    </references>
    <description>This update for libcontainers-common fixes the following issues:

- New subpackage libcontainers-sles-mounts which adds SLE-specific mounts on SLE systems (bsc#1211124)
- Own /etc/containers/systemd and /usr/share/containers/systemd for podman quadlet
- Remove container-storage-driver.sh to default to the overlay driver instead of btrfs
</description>
    <pkglist>
      <collection>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.8.1" arch="noarch" src="noarch/libcontainers-common-20230214-150400.3.8.1.noarch.rpm">
          <filename>libcontainers-common-20230214-150400.3.8.1.noarch.rpm</filename>
        </package>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.8.1" arch="src" src="src/libcontainers-common-20230214-150400.3.8.1.src.rpm">
          <filename>libcontainers-common-20230214-150400.3.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2484</id>
    <title>Security update for openldap2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686552793"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211795" id="1211795" title="VUL-0: CVE-2023-2953: openldap2: null pointer dereference in  ber_memalloc_x  function" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953" id="CVE-2023-2953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953" type="cve"/>
    </references>
    <description>This update for openldap2 fixes the following issues:

- CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).
</description>
    <pkglist>
      <collection>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="x86_64" src="x86_64/libldap-2_4-2-2.4.46-150200.14.14.1.x86_64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.14.1.x86_64.rpm</filename>
        </package>
        <package name="libldap-data" epoch="0" version="2.4.46" release="150200.14.14.1" arch="noarch" src="noarch/libldap-data-2.4.46-150200.14.14.1.noarch.rpm">
          <filename>libldap-data-2.4.46-150200.14.14.1.noarch.rpm</filename>
        </package>
        <package name="openldap2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="src" src="src/openldap2-2.4.46-150200.14.14.1.src.rpm">
          <filename>openldap2-2.4.46-150200.14.14.1.src.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="aarch64" src="aarch64/libldap-2_4-2-2.4.46-150200.14.14.1.aarch64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2885</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689778759"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209229" id="1209229" title="&quot;logname&quot; returns &quot;No login name&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208721" id="1208721" title="ulp livepatchable reports non-livepatchable libraries as livepatchable." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211828" id="1211828" title="getaddrinfo may deadlock in out-of-memory situation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235)
- Exclude static archives from preparation for live patching (bsc#1208721)
- resolv_conf: release lock on allocation failure (bsc#1211828, BZ #30527)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="src" src="src/glibc-2.31-150300.52.2.src.rpm">
          <filename>glibc-2.31-150300.52.2.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2356</id>
    <title>Security update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1685705766"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2700" id="CVE-2023-2700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2700" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199583" id="1199583" title="KVM guest does not start with 5TB of memory assigned to it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211390" id="1211390" title="VUL-0: CVE-2023-2700: libvirt: Memory leak in virPCIVirtualFunctionList cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208567" id="1208567" title="qemu-system-x86_64: Failed to lock byte 100" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183247" id="1183247" title="starting lxc container failes with GDBus.Error:org.freedesktop.machine1.NoMachineForPID: PID 4370 does not belong to any known machine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209861" id="1209861" title="SLE-15 SP2 libvirtd core dump due to race condition [ref:_00D1igLOd._5005qOEA8t:ref]" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- CVE-2023-2700: Fixed a memory leak that could be triggered by
  repeatedly querying an SR-IOV PCI device's capabilities
  (bsc#1211390).

Non-security fixes:

- Fixed a potential crash during driver cleanup (bsc#1209861).
- Added Apparmor support for SUSE edk2 firmware paths (boo#1208567).
- Fixed lxc container initialization with systemd and hybrid groups
  (boo#1183247).
- Added the option to specify the virtual CPU address size in bits for
  qemu (bsc#1199583).
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="8.0.0" release="150400.7.6.1" arch="src" src="src/libvirt-8.0.0-150400.7.6.1.src.rpm">
          <filename>libvirt-8.0.0-150400.7.6.1.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-client-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-client-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-libs-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-client-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-client-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-network-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-qemu-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-libs-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2648</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687852369"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201627" id="1201627" title="openssl-1_0_0 FTBFS 2023-05-26" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207534" id="1207534" title="VUL-0: CVE-2022-4304: openssl: Timing Oracle in RSA Decryption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" id="CVE-2022-4304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.
  The previous fix for this timing side channel turned out to cause a
  severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect the testsuite (bsc#1201627).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.42.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2516</id>
    <title>Security update for opensc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686805717"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2977" id="CVE-2023-2977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2977" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211894" id="1211894" title="VUL-0: CVE-2023-2977: opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()" type="bugzilla"/>
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-2977: Fixed out of bounds read in pkcs15 cardos_have_verifyrc_package() (bsc#1211894).
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="src" src="src/opensc-0.22.0-150400.3.3.1.src.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="x86_64" src="x86_64/opensc-0.22.0-150400.3.3.1.x86_64.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="aarch64" src="aarch64/opensc-0.22.0-150400.3.3.1.aarch64.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2517</id>
    <title>Security update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686805819"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203750" id="1203750" title="VUL-0: CVE-2007-4559: python36,python3,python39,python310,python,python27: python tarfile module directory traversal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211158" id="1211158" title="python39: unittest.mock.patch.dict returns function when applied to coroutines" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559" id="CVE-2007-4559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).

- Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.48.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.48.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.48.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="src" src="src/python3-3.6.15-150300.10.48.1.src.rpm">
          <filename>python3-3.6.15-150300.10.48.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.48.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.48.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.48.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.48.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.48.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.48.1" arch="src" src="src/python3-core-3.6.15-150300.10.48.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.48.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.48.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.48.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.48.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.48.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.48.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.48.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.48.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2519</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686810339"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203818" id="1203818" title="VUL-0: supportutils: Some passwords are not censored in supportconfig files" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

 - Added missed sanitation check on crash.txt (bsc#1203818)
 - Added check to _sanitize_file
 - Using variable for replement text in _sanitize_file
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.18.1" arch="noarch" src="noarch/supportutils-3.1.21-150300.7.35.18.1.noarch.rpm">
          <filename>supportutils-3.1.21-150300.7.35.18.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.18.1" arch="src" src="src/supportutils-3.1.21-150300.7.35.18.1.src.rpm">
          <filename>supportutils-3.1.21-150300.7.35.18.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2811</id>
    <title>Recommended update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689156257"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-4521" id="PED-4521" title="https://jira.suse.com/browse/PED-4521" type="jira"/>
    </references>
    <description>This update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt fixes the following issues:

This update provides a feature update to the FIDO2 stack.

Changes in libfido2:

- Version 1.13.0 (2023-02-20)

    * New API calls:

      + fido_assert_empty_allow_list;
      + fido_cred_empty_exclude_list.

    * fido2-token: fix issue when listing large blobs.

- Version 1.12.0 (2022-09-22)

  * Support for COSE_ES384.
  * Improved support for FIDO 2.1 authenticators.

  * New API calls:

    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.

   * Documentation and reliability fixes.

- Version 1.11.0 (2022-05-03)

  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise &quot;uv&quot; instead of &quot;clientPin&quot;.
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:

    + fido_cbor_info_maxlargeblob.

  * Documentation and reliability fixes.
  * Separate build and regress targets.

- Version 1.10.0 (2022-01-17)

  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * New API calls:

     - fido_dev_info_set;
     - fido_dev_io_handle;
     - fido_dev_new_with_info;
     - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.

- Version 1.9.0 (2021-10-27)

  * Enabled NFC support on Linux.
  * Support for FIDO 2.1 &quot;minPinLength&quot; extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:

       - es256_pk_from_EVP_PKEY;
       - fido_cred_attstmt_len;
       - fido_cred_attstmt_ptr;
       - fido_cred_pin_minlen;
       - fido_cred_set_attstmt;
       - fido_cred_set_pin_minlen;
       - fido_dev_set_pin_minlen_rpid;
       - fido_dev_set_timeout;
       - rs256_pk_from_EVP_PKEY.

  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.

- Update to version 1.8.0:

	* Better support for FIDO 2.1 authenticators.
	* Support for attestation format 'none'.
	* New API calls:

		- fido_assert_set_clientdata;
		- fido_cbor_info_algorithm_cose;
		- fido_cbor_info_algorithm_count;
		- fido_cbor_info_algorithm_type;
		- fido_cbor_info_transports_len;
		- fido_cbor_info_transports_ptr;
		- fido_cred_set_clientdata;
		- fido_cred_set_id;
		- fido_credman_set_dev_rk;
		- fido_dev_is_winhello.

	* fido2-token: new -Sc option to update a resident credential.
	* Documentation and reliability fixes.
	* HID access serialisation on Linux.

- Update to version 1.7.0:

  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 &quot;credBlobs&quot; and &quot;largeBlobs&quot; extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.

- Enabled hidapi again, issues related to hidapi are fixed upstream

- Update to version 1.6.0:

  * Documentation and reliability fixes.

  * New API calls:

    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.

- Create a udev subpackage and ship the udev rule.

Changes in python-fido2:

- update to 0.9.3:

  * Don't fail device discovery when hidraw doesn't support HIDIOCGRAWUNIQ
  * Support the latest Windows webauthn.h API (included in Windows 11).
  * Add product name and serial number to HidDescriptors.
  * Remove the need for the uhid-freebsd dependency on FreeBSD.

- Update to version 0.9.1

  * Add new CTAP error codes and improve handling of unknown codes.
  * Client: API changes to better support extensions.
  * Client.make_credential now returns a AuthenticatorAttestationResponse,
    which holds the AttestationObject and ClientData, as well as any
    client extension results for the credential.
  * Client.get_assertion now returns an AssertionSelection object,
    which is used to select between multiple assertions
  * Renames: The CTAP1 and CTAP2 classes have been renamed to
    Ctap1 and Ctap2, respectively.
  * ClientPin: The ClientPin API has been restructured to support
    multiple PIN protocols, UV tokens, and token permissions.
  * CTAP 2.1 PRE: Several new features have been added for CTAP 2.1
  * HID: The platform specific HID code has been revamped

- Version 0.8.1 (released 2019-11-25)

  * Bugfix: WindowsClient.make_credential error when resident key requirement is unspecified.

- Version 0.8.0 (released 2019-11-25)

  * New fido2.webauthn classes modeled after the W3C WebAuthn spec introduced.
  * CTAP2 send_cbor/make_credential/get_assertion and U2fClient request/authenticate timeout arguments replaced with event used to cancel a request.
  * Fido2Client:

    - make_credential/get_assertion now take WebAuthn options objects.
    - timeout is now provided in ms in WebAuthn options objects. Event based cancelation also available by passing an Event.

  * Fido2Server:

    - ATTESTATION, USER_VERIFICATION, and AUTHENTICATOR_ATTACHMENT enums have been replaced with fido2.webauthn classes.
    - RelyingParty has been replaced with PublicKeyCredentialRpEntity, and name is no longer optional.
    - Options returned by register_begin/authenticate_begin now omit unspecified values if they are optional, instead of filling in default values.
    - Fido2Server.allowed_algorithms now contains a list of PublicKeyCredentialParameters instead of algorithm identifiers.
    - Fido2Server.timeout is now in ms and of type int.

  * Support native WebAuthn API on Windows through WindowsClient.

- Version 0.7.2 (released 2019-10-24)

  * Support for the TPM attestation format.
  * Allow passing custom challenges to register/authenticate in Fido2Server.
  * Bugfix: CTAP2 CANCEL command response handling fixed.
  * Bugfix: Fido2Client fix handling of empty allow_list.
  * Bugfix: Fix typo in CTAP2.get_assertions() causing it to fail.

- Version 0.7.1 (released 2019-09-20)

  * Enforce canonical CBOR on Authenticator responses by default.
  * PCSC: Support extended APDUs.
  * Server: Verify that UP flag is set.
  * U2FFido2Server: Implement AppID exclusion extension.
  * U2FFido2Server: Allow custom U2F facet verification.
  * Bugfix: U2FFido2Server.authenticate_complete now returns the result.

- Version 0.7.0 (released 2019-06-17)

  * Add support for NFC devices using PCSC.
  * Add support for the hmac-secret Authenticator extension.
  * Honor max credential ID length and number of credentials to Authenticator.
  * Add close() method to CTAP devices to explicitly release their resources.

- Version 0.6.0 (released 2019-05-10)

  * Don't fail if CTAP2 Info contains unknown fields.
  * Replace cbor loads/dumps functions with encode/decode/decode_from.
  * Server: Add support for AuthenticatorAttachment.
  * Server: Add support for more key algorithms.
  * Client: Expose CTAP2 Info object as Fido2Client.info. 

Changes in yubikey-manager:

- Update to version 4.0.9 (released 2022-06-17)

  * Dependency: Add support for python-fido2 1.x
  * Fix: Drop stated support for Click 6 as features from 7 are being used.

- Update to version 4.0.8 (released 2022-01-31)

  * Bugfix: Fix error message for invalid modhex when programing a YubiOTP credential.
  * Bugfix: Fix issue with displaying a Steam credential when it is the only account.
  * Bugfix: Prevent installation of files in site-packages root.
  * Bugfix: Fix cleanup logic in PIV for protected management key.
  * Add support for token identifier when programming slot-based HOTP.
  * Add support for programming NDEF in text mode.
  * Dependency: Add support for Cryptography ⇐ 38.

- version update to 4.0.7

  ** Bugfix release: Fix broken naming for &quot;YubiKey 4&quot;, and a small OATH issue with
      touch Steam credentials.

- version 4.0.6 (released 2021-09-08)

   ** Improve handling of YubiKey device reboots.
   ** More consistently mask PIN/password input in prompts.
   ** Support switching mode over CCID for YubiKey Edge.
   ** Run pkill from PATH instead of fixed location.

- version 4.0.5 (released 2021-07-16)

   ** Bugfix: Fix PIV feature detection for some YubiKey NEO versions.
   ** Bugfix: Fix argument short form for --period when adding TOTP credentials.
   ** Bugfix: More strict validation for some arguments, resulting in better error messages.
   ** Bugfix: Correctly handle TOTP credentials using period != 30 AND touch_required.
   ** Bugfix: Fix prompting for access code in the otp settings command (now uses &quot;-A -&quot;).

- Update to version 4.0.3

  * Add support for fido reset over NFC.
  * Bugfix: The --touch argument to piv change-management-key was
    ignored.
  * Bugfix: Don’t prompt for password when importing PIV key/cert
    if file is invalid.
  * Bugfix: Fix setting touch-eject/auto-eject for YubiKey 4 and NEO.
  * Bugfix: Detect PKCS#12 format when outer sequence uses
    indefinite length.
  * Dependency: Add support for Click 8.

- Update to version 4.0.2

  * Update device names
  * Add read_info output to the --diagnose command, and show
    exception types.
  * Bugfix: Fix read_info for YubiKey Plus.
  * Add support for YK5-based FIPS YubiKeys.
  * Bugfix: Fix OTP device enumeration on Win32.
  * Drop reliance on libusb and libykpersonalize.
  * Support the &quot;fido&quot; and &quot;otp&quot; subcommands over NFC
  * New &quot;ykman --diagnose&quot; command to aid in troubleshooting.
  * New &quot;ykman apdu&quot; command for sending raw APDUs over the smart
    card interface.
  * New &quot;yubikit&quot; package added for custom development and advanced
    scripting.
  * OpenPGP: Add support for KDF enabled YubiKeys.
  * Static password: Add support for FR, IT, UK and BEPO keyboard
    layouts.

- Update to 3.1.1

  * Add support for YubiKey 5C NFC
  * OpenPGP: set-touch now performs compatibility checks before prompting for PIN
  * OpenPGP: Improve error messages and documentation for set-touch
  * PIV: read-object command no longer adds a trailing newline
  * CLI: Hint at missing permissions when opening a device fails
  * Linux: Improve error handling when pcscd is not running
  * Windows: Improve how .DLL files are loaded, thanks to Marius Gabriel Mihai for reporting this!
  * Bugfix: set-touch now accepts the cached-fixed option
  * Bugfix: Fix crash in OtpController.prepare_upload_key() error parsing
  * Bugfix: Fix crash in piv info command when a certificate slot contains an invalid certificate
  * Library: PivController.read_certificate(slot) now wraps certificate parsing exceptions in new exception type InvalidCertificate
  * Library: PivController.list_certificates() now returns None for slots containing invalid certificate, instead of raising an exception

- Version 3.1.0 (released 2019-08-20)

  * Add support for YubiKey 5Ci
  * OpenPGP: the info command now prints OpenPGP specification version as well
  * OpenPGP: Update support for attestation to match OpenPGP v3.4
  * PIV: Use UTC time for self-signed certificates
  * OTP: Static password now supports the Norman keyboard layout

- Version 3.0.0 (released 2019-06-24)

  * Add support for new YubiKey Preview and lightning form factor
  * FIDO: Support for credential management
  * OpenPGP: Support for OpenPGP attestation, cardholder certificates and
    cached touch policies
  * OTP: Add flag for using numeric keypad when sending digits 

- Version 2.1.1 (released 2019-05-28)

  * OTP: Add initial support for uploading Yubico OTP credentials to YubiCloud
  * Don’t automatically select the U2F applet on YubiKey NEO, it might be
    blocked by the OS
  * ChalResp: Always pad challenge correctly
  * Bugfix: Don’t crash with older versions of cryptography
  * Bugfix: Password was always prompted in OATH command, even if sent as
    argument

Changes in yubikey-manager-qt:

- update to 1.2.5:

  * Compatibility update for ykman 5.0.1.
  * Update to Python 3.11.
  * Update product images.

- Update to version 1.2.4 (released 2021-10-26)

  * Update device names and images.
  * PIV: Fix import of certificate.

- Update to version 1.2.3

  * Improved error handling when using Security Key Series devices.
  * PIV: Fix generation of certificate in slot 9c.

- Update to version 1.2.2

  * Fix detection of YubiKey Plus
  * Compatibility update for yubikey-manager 4.0
  * Bugfix: Device caching with multiple devices
  * Drop dependencies on libusb and libykpers.
  * Add additional product names and images

- update to 1.1.5

  * Add support for YubiKey 5C NFC

- Update to version 1.1.4

 * OTP: Add option to upload YubiOTP credential to YubiCloud
 * Linux: Show hint about pcscd service if opening device fails
 * Bugfix: Signal handling now compatible with Python 3.8

- Version 1.1.3 (released 2019-08-20)

  * Add suppport for YubiKey 5Ci
  * PIV: Use UTC time for self-signed certificates

- Version 1.1.2 (released 2019-06-24)

  * Add support for new YubiKey Preview
  * PIV: The popup for the management key now have a &quot;Use default&quot; option
  * Windows: Fix issue with importing PIV certificates
  * Bugfix: generate static password now works correctly 
</description>
    <pkglist>
      <collection>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="x86_64" src="x86_64/libfido2-1-1.13.0-150400.5.3.1.x86_64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfido2" epoch="0" version="1.13.0" release="150400.5.3.1" arch="src" src="src/libfido2-1.13.0-150400.5.3.1.src.rpm">
          <filename>libfido2-1.13.0-150400.5.3.1.src.rpm</filename>
        </package>
        <package name="libfido2-udev" epoch="0" version="1.13.0" release="150400.5.3.1" arch="noarch" src="noarch/libfido2-udev-1.13.0-150400.5.3.1.noarch.rpm">
          <filename>libfido2-udev-1.13.0-150400.5.3.1.noarch.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="aarch64" src="aarch64/libfido2-1-1.13.0-150400.5.3.1.aarch64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2742</id>
    <title>Recommended update for autoyast2, libzypp, yast2-pkg-bindings, yast2-update, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688118222"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="libzypp started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211261" id="1211261" title="'zypper targetos' produces just an empty output line" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212222" id="1212222" title="libzypp fails to build against libproxy 0.5.x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209565" id="1209565" title="L3: Bad upgrade from 12 SP5 to 15 SP3: rpm database problem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202234" id="1202234" title="Release packages of addon products are not installed by autoyast" type="bugzilla"/>
    </references>
    <description>This update for yast2-pkg-bindings fixes the following issues:

libzypp was updated to version 17.31.14 (22):

- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- build: honor libproxy.pc's includedir (bsc#1212222)

zypper was updated to version 1.14.61:

- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)

yast2-pkg-bindings, autoyast:

- Added a new option for rebuilding the RPM database (--rebuilddb) (bsc#1209565)
- Selected products are not installed after resetting the package manager internally (bsc#1202234)

yast2-update:

- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
</description>
    <pkglist>
      <collection>
        <package name="libprotobuf-lite20" epoch="0" version="3.9.2" release="150200.4.21.1" arch="x86_64" src="x86_64/libprotobuf-lite20-3.9.2-150200.4.21.1.x86_64.rpm">
          <filename>libprotobuf-lite20-3.9.2-150200.4.21.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="protobuf" epoch="0" version="3.9.2" release="150200.4.21.1" arch="src" src="src/protobuf-3.9.2-150200.4.21.1.src.rpm">
          <filename>protobuf-3.9.2-150200.4.21.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite20" epoch="0" version="3.9.2" release="150200.4.21.1" arch="aarch64" src="aarch64/libprotobuf-lite20-3.9.2-150200.4.21.1.aarch64.rpm">
          <filename>libprotobuf-lite20-3.9.2-150200.4.21.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2640</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687784989"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211257" id="1211257" title="VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210996" id="1210996" title="VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211256" id="1211256" title="VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2426" id="CVE-2023-2426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2426" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2609" id="CVE-2023-2609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2610" id="CVE-2023-2610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2610" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
- CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
- CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="src" src="src/vim-9.0.1572-150000.5.46.1.src.rpm">
          <filename>vim-9.0.1572-150000.5.46.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="noarch" src="noarch/vim-data-common-9.0.1572-150000.5.46.1.noarch.rpm">
          <filename>vim-data-common-9.0.1572-150000.5.46.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="x86_64" src="x86_64/vim-small-9.0.1572-150000.5.46.1.x86_64.rpm">
          <filename>vim-small-9.0.1572-150000.5.46.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="aarch64" src="aarch64/vim-small-9.0.1572-150000.5.46.1.aarch64.rpm">
          <filename>vim-small-9.0.1572-150000.5.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2653</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687860561"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1172073" id="1172073" title="kernel-devel and kernel-source need Obsolete for previous package rebuilds of the same version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191731" id="1191731" title="kernel-default-base from SLE-15-SP4-JeOS-Alpha-202110-1 conflicts with kernel-default-base from the &quot;moving target&quot; repository" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195655" id="1195655" title="SLES15 SP4 - [P8][P9][P10]- Hard lockups are observed while running stress-ng and LPAR hangs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195921" id="1195921" title="ACPI patch for supporting nBFT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205650" id="1205650" title="cgroup: Honor caller's cgroup NS when resolving path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205756" id="1205756" title="VUL-0: CVE-2022-45884: kernel-source-azure,kernel-source-rt,kernel-source: UaF in drivers/media/dvb-core/dvbdev.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205758" id="1205758" title="VUL-0: CVE-2022-45885: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_frontend.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205760" id="1205760" title="VUL-0: CVE-2022-45886: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_net.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205762" id="1205762" title="VUL-0: CVE-2022-45887: kernel-source-rt,kernel-source,kernel-source-azure: Memory leak in drivers/media/usb/ttusb-dec/ttusb_dec.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205803" id="1205803" title="VUL-0: CVE-2022-45919: kernel: use-after-free when there is a disconnect after an open in drivers/media/dvb-core/dvb_ca_en50221.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206024" id="1206024" title="VUL-0: CVE-2022-4269: kernel-source,kernel-source-rt,kernel-source-azure: kernel: net: CPU soft lockup in TC mirred egress-to-ingress action" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206578" id="1206578" title="Cannot boot into OS when Enhanced REP MOVSB/STOSB set Disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207553" id="1207553" title="Missing '/usr/lib/firmware/iwlwifi-so-a0-gf-a0.pnvm', so Intel Wi-Fi 6E AX211 fails to work with iwlwifi module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208604" id="1208604" title="VUL-0: CVE-2023-1079: kernel: Use After Free in asus_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208758" id="1208758" title="L3: BUG: kernel NULL pointer dereference, address: 0000000000000028 - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209287" id="1209287" title="VUL-0: CVE-2023-1380: kernel: A USB-accessible slab-out-of-bounds read in Linux kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209288" id="1209288" title="VUL-0: CVE-2023-1382: kernel: denial of service in tipc_conn_close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209856" id="1209856" title="SLES 15 SP4 - kernel: fix __clear_user() inline assembly constraints" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209982" id="1209982" title="[Azure][MANA][Debuggability] Add new MANA VF performance counters for easier troubleshooting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210165" id="1210165" title="Kernel WARNING &quot;thunderbolt 0000:34:00.6: interrupt for TX ring 0 is already enabled&quot; at S3/S4 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210294" id="1210294" title="VUL-0: CVE-2023-30456: kernel: nVMX CR0 and CR4 consistency checks issue on x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210449" id="1210449" title="SLES 15 SP4 - s390/qeth: NET2016 - fix use-after-free in HSCI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210450" id="1210450" title="SLES 15 SP4 - s390/extmem: return correct segment type in __segment_load()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210498" id="1210498" title="VUL-0: CVE-2023-2124: kernel-source: OOB access in the XFS subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210533" id="1210533" title="VUL-0: CVE-2023-2002: kernel-source-azure,kernel-source-rt,kernel-source: unauthorized management command execution" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210551" id="1210551" title="[Azure][MANA] Backport Patches for MANA Jumbo Frame Support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210647" id="1210647" title="VUL-0: CVE-2023-2162: kernel-source-rt,kernel-source,kernel-source-azure: UAF during login when accessing the shost ipaddress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210741" id="1210741" title="[Azure][MANA][InfinitiBand] Features Support and InfiniBand for MANA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210775" id="1210775" title="[859215.187505] kernel BUG at ../mm/slub.c:379! - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210783" id="1210783" title="VUL-0: CVE-2023-31084: kernel: blocking operation when a task is in !TASK_RUNNING when dvb_frontend_get_event, wait_event_interruptible is called" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210791" id="1210791" title="KMP build fails with ld: cannot find arch/s390/lib/expoline/expoline.o" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210806" id="1210806" title="VUL-0: CVE-2023-2269: kernel-source-azure,kernel-source-rt,kernel-source: deadlock in dm_get_inactive_table() in dm-ioctl.c leads to local DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210940" id="1210940" title="VUL-0: CVE-2023-31436: kernel: out-of-bounds write because lmax can exceed QFQ_MIN_LMAX in qfq_change_class in net/sched/sch_qfq.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210947" id="1210947" title="s390/ap: fix crash on older machines based on QCI info missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211037" id="1211037" title="VUL-0: CVE-2023-2483: kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211043" id="1211043" title="VUL-0: CVE-2023-32233: kernel: LPE due to use-after-free in Netfilter nf_tables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211044" id="1211044" title="kernel: Improve workqueue stall reports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211089" id="1211089" title="ALP Workbench: kmod-testsuite fails to build on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211105" id="1211105" title="VUL-0: CVE-2023-2513: kernel-source-azure,kernel-source,kernel-source-rt: ext4: use-after-free in ext4_xattr_set_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211113" id="1211113" title="apparmor DENIED errors for gzip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211131" id="1211131" title="VUL-0: CVE-2023-2156: kernel-source-rt,kernel-source,kernel-source-azure: Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211205" id="1211205" title="Regression: 5.14.21-150400.24.60 lacks avx cpu flags on Sapphire Rapids processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211263" id="1211263" title="VUL-0: CVE-2023-28410: kernel-source: A potential security vulnerability in some Intel i915 Graphics drivers for linux may allow escalation of privilege" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211280" id="1211280" title="Add patch to support rumble on latest xbox controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211281" id="1211281" title="[Azure][Hyper-V]  Backport request for the the bug Unable to send packet via vmbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211449" id="1211449" title="VUL-1: kernel: Use after free bug in r592_remov due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211465" id="1211465" title="SLES 15 SP4 - net/iucv: Fix size of interrupt data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211519" id="1211519" title="Update gve kernel module to 6.2 upstream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211564" id="1211564" title="mlxbf_gige driver crash during YES Certification testing, kernel BUG at ../net/core/skbuff.c:111!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211590" id="1211590" title="VUL-0: CVE-2023-33288: kernel-source-rt,kernel-source,kernel-source-azure: Use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211686" id="1211686" title="s390/ctcm: Fix return type of ctc{mp,}m_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211687" id="1211687" title="s390/dasd: fix hanging blockdevice after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211688" id="1211688" title="s390/kprobes: fix current_kprobe never cleared after kprobes reenter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211689" id="1211689" title="s390/kprobes: fix irq mask clobbering on kprobe reenter from  post_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211690" id="1211690" title="s390/lcs: Fix return type of lcs_start_xmit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211691" id="1211691" title="s390/mem_detect: fix detect_memory() error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211692" id="1211692" title="s390/netiucv: Fix return type of netiucv_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211693" id="1211693" title="s390/qdio: fix do_sqbs() inline assembly constraint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211714" id="1211714" title="s390/vdso: remove -nostdlib compiler flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211796" id="1211796" title="kernel modules not usrmerged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211804" id="1211804" title="ceph: force updating the msg pointer in non-split case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211807" id="1211807" title="fuse: fix attr version comparison in fuse_read_update_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211808" id="1211808" title="fuse: always revalidate rename target dentry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211847" id="1211847" title="Update Broadcom Emulex lpfc driver to 14.2.0.12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211855" id="1211855" title="VUL-0: CVE-2023-3006: kernel: Add Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211960" id="1211960" title="qla2xxx: update driver to 10.02.08.300-k" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" id="CVE-2023-28410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" id="CVE-2023-2156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" id="CVE-2023-1382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" id="CVE-2023-3006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" id="CVE-2023-2269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" id="CVE-2023-1079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" id="CVE-2023-2162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" id="CVE-2023-33288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" id="CVE-2022-45886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" id="CVE-2022-45885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" id="CVE-2022-45887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" id="CVE-2022-45919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" id="CVE-2022-45884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" id="CVE-2023-31084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" id="CVE-2023-2002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" id="CVE-2023-31436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" id="CVE-2023-30456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" id="CVE-2022-4269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" id="CVE-2023-32233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" id="CVE-2023-1380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" id="CVE-2023-2513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" id="CVE-2023-2483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" id="CVE-2023-2124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3692" id="PED-3692" title="https://jira.suse.com/browse/PED-3692" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4022" id="PED-4022" title="https://jira.suse.com/browse/PED-4022" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19556" id="SLE-19556" title="https://jira.suse.com/browse/SLE-19556" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18383" id="SLE-18383" title="https://jira.suse.com/browse/SLE-18383" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18385" id="SLE-18385" title="https://jira.suse.com/browse/SLE-18385" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18377" id="SLE-18377" title="https://jira.suse.com/browse/SLE-18377" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18384" id="SLE-18384" title="https://jira.suse.com/browse/SLE-18384" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19255" id="SLE-19255" title="https://jira.suse.com/browse/SLE-19255" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18378" id="SLE-18378" title="https://jira.suse.com/browse/SLE-18378" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18379" id="SLE-18379" title="https://jira.suse.com/browse/SLE-18379" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18375" id="SLE-18375" title="https://jira.suse.com/browse/SLE-18375" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18978" id="SLE-18978" title="https://jira.suse.com/browse/SLE-18978" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19001" id="SLE-19001" title="https://jira.suse.com/browse/SLE-19001" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18992" id="SLE-18992" title="https://jira.suse.com/browse/SLE-18992" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
- CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
- CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855).
- CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806).
- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294).
- CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024).
- CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
- CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).


The following non-security bugs were fixed:

- 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes).
- ACPI: EC: Fix oops when removing custom query handlers (git-fixes).
- ACPI: bus: Ensure that notify handlers are not running after removal (git-fixes).
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes).
- ACPI: tables: Add support for NBFT (bsc#1195921).
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes).
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (git-fixes).
- ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes).
- ALSA: cs46xx: mark snd_cs46xx_download_image as static (git-fixes).
- ALSA: firewire-digi00x: prevent potential use after free (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes).
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo L140AU (git-fixes).
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes).
- ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes).
- ALSA: hda/realtek: Apply HP B&amp;O top speaker profile to Pavilion 15 (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes).
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes).
- ALSA: hda: Fix Oops by 9.1 surround channel names (git-fixes).
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes).
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes).
- ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes).
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes).
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes).
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes).
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes).
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds (git-fixes).
- ASoC: rt5682: Disable jack detection interrupt during suspend (git-fixes).
- ASoC: soc-pcm: fix hw-&gt;formats cleared by soc_pcm_hw_init() for dpcm (git-fixes).
- Bluetooth: L2CAP: fix &quot;bad unlock balance&quot; in l2cap_disconnect_rsp (git-fixes).
- Bluetooth: btintel: Add LE States quirk support (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes).
- HID: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes).
- HID: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes).
- HID: microsoft: Add rumble support to latest xbox controllers (bsc#1211280).
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes).
- HID: wacom: Force pen out of prox if no events have been received in a while (git-fixes).
- HID: wacom: Set a default resolution for older tablets (git-fixes).
- HID: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes).
- HID: wacom: generic: Set battery quirk only when we see battery data (git-fixes).
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes)
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes)
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes)
- Input: xpad - add constants for GIP interface numbers (git-fixes).
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes).
- KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes)
- KVM: Disallow user memslot with size that exceeds &quot;unsigned long&quot; (git-fixes)
- KVM: Do not create VM debugfs files outside of the VM directory (git-fixes)
- KVM: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes)
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes).
- KVM: Prevent module exit until all VMs are freed (git-fixes)
- KVM: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes).
- KVM: SVM: Fix benign &quot;bool vs. int&quot; comparison in svm_set_cr0() (git-fixes).
- KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes).
- KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes).
- KVM: SVM: hyper-v: placate modpost section mismatch error (git-fixes).
- KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes).
- KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes).
- KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes).
- KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes).
- KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes).
- KVM: arm64: Do not arm a hrtimer for an already pending timer (git-fixes)
- KVM: arm64: Do not return from void function (git-fixes)
- KVM: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes)
- KVM: arm64: Fix S1PTW handling on RO memslots (git-fixes)
- KVM: arm64: Fix bad dereference on MTE-enabled systems (git-fixes)
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes)
- KVM: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes)
- KVM: arm64: Free hypervisor allocations if vector slot init fails (git-fixes)
- KVM: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes)
- KVM: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes)
- KVM: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes)
- KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes)
- KVM: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes)
- KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes)
- KVM: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes)
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes)
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes).
- KVM: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes).
- KVM: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes).
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes).
- KVM: nVMX: Inject #GP, not #UD, if &quot;generic&quot; VMXON CR0/CR4 check fails (git-fixes).
- KVM: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes).
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes).
- KVM: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes).
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes).
- KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes).
- KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes).
- KVM: x86/pmu: Ignore pmu-&gt;global_ctrl check if vPMU does not support global_ctrl (git-fixes).
- KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes).
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes).
- KVM: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes).
- KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes).
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes).
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes).
- KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes).
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes).
- KVM: x86: Protect the unused bits in MSR exiting flags (git-fixes).
- KVM: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes).
- KVM: x86: Report deprecated x87 features in supported CPUID (git-fixes).
- KVM: x86: do not set st-&gt;preempted when going back to user space (git-fixes).
- KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes).
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes).
- PCI/ASPM: Remove pcie_aspm_pm_state_change() (git-fixes).
- PM: hibernate: Do not get block device exclusively in test_resume mode (git-fixes).
- PM: hibernate: Turn snapshot_test into global variable (git-fixes).
- PM: hibernate: fix load_image_and_restore() error path (git-fixes).
- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes)
- RDMA/bnxt_re: Fix the page_size used during the MR creation (git-fixes)
- RDMA/cm: Trace icm_send_rej event before the cm state is reset (git-fixes)
- RDMA/core: Fix multiple -Warray-bounds warnings (git-fixes)
- RDMA/efa: Fix unsupported page sizes in device (git-fixes)
- RDMA/hns: Fix base address table allocation (git-fixes)
- RDMA/hns: Fix timeout attr in query qp for HIP08 (git-fixes)
- RDMA/hns: Modify the value of long message loopback slice (git-fixes)
- RDMA/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383).
- RDMA/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383).
- RDMA/irdma: Fix Local Invalidate fencing (git-fixes)
- RDMA/irdma: Fix RQ completion opcode (jsc#SLE-18383).
- RDMA/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383).
- RDMA/irdma: Fix inline for multiple SGE's (jsc#SLE-18383).
- RDMA/irdma: Prevent QP use after free (git-fixes)
- RDMA/irdma: Remove enum irdma_status_code (jsc#SLE-18383).
- RDMA/irdma: Remove excess error variables (jsc#SLE-18383).
- RDMA/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022).
- RDMA/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022).
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255).
- RDMA/mlx5: Fix flow counter query via DEVX (git-fixes)
- RDMA/mlx5: Use correct device num_ports when modify DC (git-fixes)
- RDMA/rxe: Remove tasklet call from rxe_cq.c (git-fixes)
- RDMA/siw: Fix potential page_array out of range access (git-fixes)
- RDMA/siw: Remove namespace check from siw_netdev_event() (git-fixes)
- RDMA/srpt: Add a check for valid 'mad_agent' pointer (git-fixes)
- Revert &quot;KVM: set owner of cpu and vm file operations&quot; (git-fixes)
- SMB3.1.1: add new tree connect ShareFlags (bsc#1193629).
- SMB3: Add missing locks to protect deferred close file list (git-fixes).
- SMB3: Close all deferred handles of inode in case of handle lease break (bsc#1193629).
- SMB3: Close deferred file handles in case of handle lease break (bsc#1193629).
- SMB3: drop reference to cfile before sending oplock break (bsc#1193629).
- SMB3: force unmount was failing to close deferred close files (bsc#1193629).
- SUNRPC: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775).
- USB / dwc3: Fix a checkpatch warning in core.c (git-fixes).
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes).
- USB: core: Add routines for endpoint checks in old drivers (git-fixes).
- USB: sisusbvga: Add endpoint checks (git-fixes).
- USB: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes).
- apparmor: add a kernel label to use on kernel objects (bsc#1211113).
- arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes).
- arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes).
- arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes).
- arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes).
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes).
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage.
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes)
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes).
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes).
- ata: pata_octeon_cf: drop kernel-doc notation (git-fixes).
- block: add a bdev_max_zone_append_sectors helper (git-fixes).
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes).
- bnxt: Do not read past the end of test names (jsc#SLE-18978).
- bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978).
- bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978).
- bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978).
- bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978).
- bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978).
- bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978).
- bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978).
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978).
- bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978).
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes).
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes).
- can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes).
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes).
- can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes).
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes).
- can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes).
- can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes).
- cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes).
- ceph: force updating the msg pointer in non-split case (bsc#1211804).
- cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906).
- cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650).
- cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650).
- cgroup: Make cgroup_get_from_id() prettier (bsc#1205650).
- cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650).
- cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup  id (bsc#1205650).
- cgroup: reduce dependency on cgroup_mutex (bsc#1205650).
- cifs: Avoid a cast in add_lease_context() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes).
- cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758).
- cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629).
- cifs: fix potential race when tree connecting ipc (bsc#1208758).
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758).
- cifs: fix sharing of DFS connections (bsc#1208758).
- cifs: fix smb1 mount regression (bsc#1193629).
- cifs: mapchars mount option ignored (bsc#1193629).
- cifs: missing lock when updating session status (bsc#1193629).
- cifs: print smb3_fs_context::source when mounting (bsc#1193629).
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758).
- cifs: protect session status check in smb2_reconnect() (bsc#1208758).
- cifs: release leases for deferred close handles when freezing (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes).
- clk: qcom: regmap: add PHY clock source implementation (git-fixes).
- clk: tegra20: fix gcc-7 constant overflow warning (git-fixes).
- configfs: fix possible memory leak in configfs_create_dir() (git-fixes).
- crypto: acomp - define max size for destination (jsc#PED-3692)
- crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692)
- crypto: qat - Fix unsigned function returning negative (jsc#PED-3692)
- crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692)
- crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692)
- crypto: qat - abstract PFVF receive logic (jsc#PED-3692)
- crypto: qat - abstract PFVF send function (jsc#PED-3692)
- crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692)
- crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692)
- crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692)
- crypto: qat - add backlog mechanism (jsc#PED-3692)
- crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692)
- crypto: qat - add check to validate firmware images (jsc#PED-3692)
- crypto: qat - add limit to linked list parsing (jsc#PED-3692)
- crypto: qat - add misc workqueue (jsc#PED-3692)
- crypto: qat - add missing restarting event notification in (jsc#PED-3692)
- crypto: qat - add param check for DH (jsc#PED-3692)
- crypto: qat - add param check for RSA (jsc#PED-3692)
- crypto: qat - add pfvf_ops (jsc#PED-3692)
- crypto: qat - add resubmit logic for decompression (jsc#PED-3692)
- crypto: qat - add support for 401xx devices (jsc#PED-3692)
- crypto: qat - add support for compression for 4xxx (jsc#PED-3692)
- crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692)
- crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692)
- crypto: qat - change PFVF ACK behaviour (jsc#PED-3692)
- crypto: qat - change behaviour of (jsc#PED-3692)
- crypto: qat - change bufferlist logic interface (jsc#PED-3692)
- crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692)
- crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692)
- crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692)
- crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692)
- crypto: qat - do not rely on min version (jsc#PED-3692)
- crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692)
- crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692)
- crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692)
- crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692)
- crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692)
- crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - extend buffer list interface (jsc#PED-3692)
- crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692)
- crypto: qat - extract send and wait from (jsc#PED-3692)
- crypto: qat - fix DMA transfer direction (jsc#PED-3692)
- crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692)
- crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692)
- crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692)
- crypto: qat - fix a typo in a comment (jsc#PED-3692)
- crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692)
- crypto: qat - fix definition of ring reset results (jsc#PED-3692)
- crypto: qat - fix error return code in adf_probe (jsc#PED-3692)
- crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692)
- crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692)
- crypto: qat - fix wording and formatting in code comment (jsc#PED-3692)
- crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692)
- crypto: qat - free irq in case of failure (jsc#PED-3692)
- crypto: qat - free irqs only if allocated (jsc#PED-3692)
- crypto: qat - generalize crypto request buffers (jsc#PED-3692)
- crypto: qat - get compression extended capabilities (jsc#PED-3692)
- crypto: qat - handle retries due to collisions in (jsc#PED-3692)
- crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692)
- crypto: qat - improve logging of PFVF messages (jsc#PED-3692)
- crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692)
- crypto: qat - introduce support for PFVF block messages (jsc#PED-3692)
- crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692)
- crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692)
- crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692)
- crypto: qat - make PFVF message construction direction (jsc#PED-3692)
- crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692)
- crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692)
- crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692)
- crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692)
- crypto: qat - move pfvf collision detection values (jsc#PED-3692)
- crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692)
- crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692)
- crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692)
- crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692)
- crypto: qat - re-enable registration of algorithms (jsc#PED-3692)
- crypto: qat - refactor PF top half for PFVF (jsc#PED-3692)
- crypto: qat - refactor pfvf version request messages (jsc#PED-3692)
- crypto: qat - refactor submission logic (jsc#PED-3692)
- crypto: qat - relocate PFVF PF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF VF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF disabled function (jsc#PED-3692)
- crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692)
- crypto: qat - relocate backlog related structures (jsc#PED-3692)
- crypto: qat - relocate bufferlist logic (jsc#PED-3692)
- crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692)
- crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692)
- crypto: qat - remove empty sriov_configure() (jsc#PED-3692)
- crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692)
- crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692)
- crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692)
- crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692)
- crypto: qat - remove unneeded assignment (jsc#PED-3692)
- crypto: qat - remove unneeded braces (jsc#PED-3692)
- crypto: qat - remove unneeded packed attribute (jsc#PED-3692)
- crypto: qat - remove unused PFVF stubs (jsc#PED-3692)
- crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692)
- crypto: qat - rename bufferlist functions (jsc#PED-3692)
- crypto: qat - rename pfvf collision constants (jsc#PED-3692)
- crypto: qat - reorganize PFVF code (jsc#PED-3692)
- crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692)
- crypto: qat - replace deprecated MSI API (jsc#PED-3692)
- crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692)
- crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692)
- crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692)
- crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692)
- crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692)
- crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692)
- crypto: qat - simplify adf_enable_aer() (jsc#PED-3692)
- crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692)
- crypto: qat - split PFVF message decoding from handling (jsc#PED-3692)
- crypto: qat - stop using iommu_present() (jsc#PED-3692)
- crypto: qat - store the PFVF protocol version of the (jsc#PED-3692)
- crypto: qat - store the ring-to-service mapping (jsc#PED-3692)
- crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692)
- crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692)
- crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692)
- crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692)
- crypto: qat - use hweight for bit counting (jsc#PED-3692)
- crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692)
- crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692)
- crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692)
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes).
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992).
- debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes).
- dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes).
- dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes).
- dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes).
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes).
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes).
- dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes).
- dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes).
- dmaengine: mv_xor_v2: Fix an error code (git-fixes).
- do not reuse connection if share marked as isolated (bsc#1193629).
- docs: networking: fix x25-iface.rst heading &amp; index order (git-fixes).
- drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes).
- drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes).
- drm-hyperv: Add a bug reference to two existing changes (bsc#1211281).
- drm/amd/display: Fix hang when skipping modeset (git-fixes).
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes).
- drm/amd/display: fix flickering caused by S/G mode (git-fixes).
- drm/amd: Fix an out of bounds error in BIOS parser (git-fixes).
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes).
- drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes).
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes).
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes).
- drm/displayid: add displayid_get_header() and check bounds better (git-fixes).
- drm/exynos: fix g2d_open/close helper function definitions (git-fixes).
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes).
- drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes).
- drm/i915/dg2: Support 4k@30 on HDMI (git-fixes).
- drm/i915/dp: prevent potential div-by-zero (git-fixes).
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes).
- drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes).
- drm/msm/dp: unregister audio driver during unbind (git-fixes).
- drm/msm/dpu: Add INTF_5 interrupts (git-fixes).
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes).
- drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- drm/tegra: Avoid potential 32-bit integer overflow (git-fixes).
- drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes).
- drm/ttm: optimize pool allocations a bit v2 (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix &quot;snps,hsphy_interface&quot; type (git-fixes).
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes).
- fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes).
- fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes).
- fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes).
- fbdev: udlfb: Fix endpoint check (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes).
- fuse: always revalidate rename target dentry (bsc#1211808).
- fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807).
- futex: Resend potentially swallowed owner death notification (git-fixes).
- google/gve:fix repeated words in comments (bsc#1211519).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (git-fixes).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake &quot;droping&quot; -&gt; &quot;dropping&quot; (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (git-fixes).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes).
- gve: enhance no queue page list detection (bsc#1211519).
- i2c: omap: Fix standard mode false ACK readings (git-fixes).
- i2c: tegra: Fix PEC support for SMBUS block read (git-fixes).
- i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378).
- i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378).
- i40e: Fix DMA mappings leak (jsc#SLE-18378).
- i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378).
- i40e: Fix VF set max MTU size (jsc#SLE-18378).
- i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378).
- i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378).
- i40e: Fix calculating the number of queue pairs (jsc#SLE-18378).
- i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378).
- i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378).
- i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378).
- i40e: Fix for VF MAC address 0 (jsc#SLE-18378).
- i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378).
- i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378).
- i40e: Fix kernel crash during module removal (jsc#SLE-18378).
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378).
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378).
- i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378).
- i40e: Refactor tc mqprio checks (jsc#SLE-18378).
- i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378).
- i40e: fix accessing vsi-&gt;active_filters without holding lock (jsc#SLE-18378).
- i40e: fix flow director packet filter programming (jsc#SLE-18378).
- i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378).
- i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378).
- iavf/iavf_main: actually log -&gt;src mask when talking about it (jsc#SLE-18385).
- iavf: Detach device during reset task (jsc#SLE-18385).
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385).
- iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385).
- iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385).
- iavf: Fix a crash during reset task (jsc#SLE-18385).
- iavf: Fix bad page state (jsc#SLE-18385).
- iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385).
- iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385).
- iavf: Fix max_rate limiting (jsc#SLE-18385).
- iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385).
- iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385).
- iavf: fix hang on reboot with ice (jsc#SLE-18385).
- iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385).
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385).
- ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375).
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375).
- igb: Add lock to avoid data race (jsc#SLE-18379).
- igb: Enable SR-IOV after reinit (jsc#SLE-18379).
- igb: Initialize mailbox message for VF reset (jsc#SLE-18379).
- igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379).
- igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379).
- igbvf: Regard vf reset nack as success (jsc#SLE-18379).
- igc: Add checking for basetime less than zero (jsc#SLE-18377).
- igc: Add ndo_tx_timeout support (jsc#SLE-18377).
- igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377).
- igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377).
- igc: Lift TAPRIO schedule restriction (jsc#SLE-18377).
- igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377).
- igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377).
- igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377).
- igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377).
- igc: fix the validation logic for taprio's gate list (jsc#SLE-18377).
- igc: read before write to SRRCTL register (jsc#SLE-18377).
- igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377).
- igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377).
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes).
- iio: adc: ad7192: Change &quot;shorted&quot; channels to differential (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes).
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553).
- ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384).
- ixgbe: Enable setting RSS table to default values (jsc#SLE-18384).
- ixgbe: Fix panic during XDP_TX with &gt; 64 CPUs (jsc#SLE-18384).
- ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384).
- ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384).
- ixgbe: fix pci device refcount leak (jsc#SLE-18384).
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384).
- kABI workaround for btbcm.c (git-fixes).
- kABI workaround for mt76_poll_msec() (git-fixes).
- kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest  (git-fixes)
- kabi/severities: added Microsoft mana symbold (bsc#1210551)
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- kernel-source: Remove unused macro variant_symbols
- kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731).
- kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes).
- leds: Fix reference to led_set_brightness() in doc (git-fixes).
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes).
- leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes).
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes).
- locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes).
- mailbox: zynqmp: Fix IPI isr handling (git-fixes).
- mailbox: zynqmp: Fix typo in IPI documentation (git-fixes).
- mce: fix set_mce_nospec to always unmap the whole page (git-fixes).
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes).
- media: netup_unidvb: fix use-after-free at del_timer() (git-fixes).
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes).
- media: radio-shark: Add endpoint checks (git-fixes).
- media: rcar_fdp1: Fix the correct variable assignments (git-fixes).
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449).
- mfd: dln2: Fix memory leak in dln2_probe() (git-fixes).
- mfd: tqmx86: Correct board names for TQMxE39x (git-fixes).
- mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes).
- misc: fastrpc: reject new invocations during device removal (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes).
- mmc: sdhci-esdhc-imx: make &quot;no-mmc-hs400&quot; works (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes).
- mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written (git-fixes).
- net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes).
- net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes).
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes).
- net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982).
- net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022).
- net: mana: Add support for jumbo frame (bsc#1210551).
- net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551).
- net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022).
- net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022).
- net: mana: Enable RX path to handle various MTU sizes (bsc#1210551).
- net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022).
- net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes).
- net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022).
- net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022).
- net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022).
- net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022).
- net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551).
- net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551).
- net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022).
- net: mana: Use napi_build_skb in RX path (bsc#1210551).
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes).
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564).
- net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes).
- net: qrtr: correct types of trace event parameters (git-fixes).
- net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes).
- net: tun: avoid disabling NAPI twice (git-fixes).
- net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes).
- net: tun: stop NAPI when detaching queues (git-fixes).
- net: tun: unlink NAPI from device on destruction (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes).
- net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes).
- nilfs2: do not write dirty data after degenerating to read-only (git-fixes).
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes).
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes).
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes).
- nvme-multipath: fix hang when disk goes live over reconnect (git-fixes).
- nvme-pci: add quirks for Samsung X5 SSDs (git-fixes).
- nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes).
- nvme-pci: clear the prp2 field when not used (git-fixes).
- nvme-pci: disable write zeroes on various Kingston SSD (git-fixes).
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes).
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes).
- nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes).
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes).
- nvme-tcp: fix bogus request completion when failing to send AER (git-fixes).
- nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes).
- nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes).
- nvme: also return I/O command effects from nvme_command_effects (git-fixes).
- nvme: check for duplicate identifiers earlier (git-fixes).
- nvme: cleanup __nvme_check_ids (git-fixes).
- nvme: fix discard support without oncs (git-fixes).
- nvme: fix interpretation of DMRSL (git-fixes).
- nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes).
- nvme: fix passthrough csi check (git-fixes).
- nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes).
- nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes).
- nvme: set non-mdts limits in nvme_scan_work (git-fixes).
- nvmet-tcp: add bounds check on Transfer Tag (git-fixes).
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes).
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes).
- nvmet: fix mar and mor off-by-one errors (git-fixes).
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes).
- nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes).
- nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes).
- nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes).
- phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes).
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes).
- pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes).
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes).
- platform/x86: hp-wmi: Support touchpad on/off (git-fixes).
- platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes).
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes).
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes).
- power: supply: bq27xxx: expose battery data when CI=1 (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes).
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes).
- powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729).
- powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729).
- pstore: Revert pmsg_lock back to a normal mutex (git-fixes).
- purgatory: fix disabling debug info (git-fixes).
- pwm: meson: Fix axg ao mux parents (git-fixes).
- pwm: meson: Fix g12a ao clk81 name (git-fixes).
- qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001).
- qed/qed_mng_tlv: correctly zero out -&gt;min instead of -&gt;hour (jsc#SLE-19001).
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001).
- qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001).
- qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001).
- r8152: fix flow control issue of RTL8156A (git-fixes).
- r8152: fix the poor throughput for 2.5G devices (git-fixes).
- r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes).
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes).
- regulator: mt6359: add read check for PMIC MT6359 (git-fixes).
- regulator: pca9450: Fix BUCK2 enable_mask (git-fixes).
- remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes).
- ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes).
- ring-buffer: Fix kernel-doc (git-fixes).
- ring-buffer: Sync IRQ works before buffer destruction (git-fixes).
- rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
- rtmutex: Ensure that the top waiter is always woken up (git-fixes).
- s390/ap: fix crash on older machines based on QCI info missing (bsc#1210947)
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686).
- s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687).
- s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes).
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688).
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689).
- s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690).
- s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691).
- s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692).
- s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693).
- s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes).
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes).
- s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714).
- s390x: Fixed hard lockups while running stress-ng and LPAR hangs (bsc#1195655 ltc#195733).
- scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes).
- scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes).
- scsi: libsas: Add sas_ata_device_link_abort() (git-fixes).
- scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes).
- scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847).
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847).
- scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847).
- scsi: lpfc: Match lock ordering of lpfc_cmd-&gt;buf_lock and hbalock for abort paths (bsc#1211847).
- scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847).
- scsi: lpfc: Update congestion warning notification period (bsc#1211847).
- scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847).
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes).
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes).
- scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes).
- scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960).
- scsi: qla2xxx: Fix hang in task management (bsc#1211960).
- scsi: qla2xxx: Fix mem access after free (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd failure (bsc#1211960).
- scsi: qla2xxx: Multi-que support for TMF (bsc#1211960).
- scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960).
- scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960).
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960).
- scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960).
- scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960).
- scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes).
- scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes).
- selftests mount: Fix mount_setattr_test builds failed (git-fixes).
- selftests/resctrl: Allow -&gt;setup() to return errors (git-fixes).
- selftests/resctrl: Check for return value after write_schemata() (git-fixes).
- selftests/resctrl: Extend CPU vendor detection (git-fixes).
- selftests/resctrl: Move -&gt;setup() call outside of test specific branches (git-fixes).
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes).
- selftests/sgx: Add &quot;test_encl.elf&quot; to TEST_FILES (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes).
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes).
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes).
- selftests: xsk: Disable IPv6 on VETH1 (git-fixes).
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes).
- selinux: do not use make's grouped targets feature yet (git-fixes).
- serial: 8250: Reinit port-&gt;pm on port specific driver unbind (git-fixes).
- serial: 8250_bcm7271: balance clk_enable calls (git-fixes).
- serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes).
- serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes).
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes).
- serial: Add support for Advantech PCI-1611U card (git-fixes).
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes).
- serial: qcom-geni: fix enabling deactivated interrupt (git-fixes).
- serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes).
- sfc: Change VF mac via PF as first preference if available (git-fixes).
- sfc: Fix module EEPROM reporting for QSFP modules (git-fixes).
- sfc: Fix use-after-free due to selftest_work (git-fixes).
- sfc: correctly advertise tunneled IPv6 segmentation (git-fixes).
- sfc: ef10: do not overwrite offload features at NIC reset (git-fixes).
- sfc: fix TX channel offset when using legacy interrupts (git-fixes).
- sfc: fix considering that all channels have TX queues (git-fixes).
- sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes).
- sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes).
- sfc: include vport_id in filter spec hash and equal() (git-fixes).
- smb3: display debug information better for encryption (bsc#1193629).
- smb3: fix problem remounting a share after shutdown (bsc#1193629).
- smb3: improve parallel reads of large files (bsc#1193629).
- smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629).
- smb3: move some common open context structs to smbfs_common (bsc#1193629).
- soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes).
- soundwire: qcom: gracefully handle too many ports in DT (git-fixes).
- spi: spi-imx: fix MX51_ECSPI_* macros when cs &gt; 3 (git-fixes).
- spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes).
- struct ci_hdrc: hide new member at end (git-fixes).
- supported.conf: mark mana_ib supported
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes).
- thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165).
- thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165).
- tools/virtio: compile with -pthread (git-fixes).
- tools/virtio: fix the vringh test for virtio ring changes (git-fixes).
- tools/virtio: fix virtio_test execution (git-fixes).
- tools/virtio: initialize spinlocks in vring_test.c (git-fixes).
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes).
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes).
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes).
- tracing: Fix permissions for the buffer_percent file (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes).
- usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes).
- usb: chipidea: core: fix possible concurrent when switch role (git-fixes).
- usb: dwc3: Align DWC3_EP_* flag macros (git-fixes).
- usb: dwc3: Fix a repeated word checkpatch warning (git-fixes).
- usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes).
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes).
- usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes).
- usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes).
- usb: dwc3: gadget: Delay issuing End Transfer (git-fixes).
- usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes).
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes).
- usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes).
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes).
- usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes).
- usb: gadget: u_ether: Fix host MAC address case (git-fixes).
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes).
- usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes).
- usb: typec: tcpm: fix multiple times discover svids error (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usrmerge: Remove usrmerge compatibility symlink in buildroot (boo#1211796).
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes).
- vdpa: fix use-after-free on vp_vdpa_remove (git-fixes).
- vhost/net: Clear the pending messages when the backend is removed (git-fixes).
- virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes).
- virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes).
- virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes).
- virtio_net: split free_unused_bufs() (git-fixes).
- virtio_net: suppress cpu stall when free_unused_bufs (git-fixes).
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes).
- wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes).
- wifi: ath: Silence memcpy run-time false positive warning (git-fixes).
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes).
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes).
- wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes).
- wifi: iwlwifi: fw: fix DBGI dump (git-fixes).
- wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes).
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes).
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes).
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes).
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes).
- wifi: mac80211: fix min center freq offset tracing (git-fixes).
- wifi: mt76: add flexible polling wait-interval support (git-fixes).
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes).
- wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes).
- wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes).
- wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes).
- workqueue: Fix hung time report of worker pools (bsc#1211044).
- workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044).
- workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044).
- workqueue: Warn when a new worker could not be created (bsc#1211044).
- workqueue: Warn when a rescuer could not be created (bsc#1211044).
- x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes).
- x86/MCE/AMD: Use an u64 for bank_map (git-fixes).
- x86/alternative: Make debug-alternative selective (bsc#1206578).
- x86/alternative: Report missing return thunk details (git-fixes).
- x86/alternative: Support relocations in alternatives (bsc#1206578).
- x86/amd: Use IBPB for firmware calls (git-fixes).
- x86/boot: Skip realmode init code when running as Xen PV guest  (git-fixes).
- x86/bugs: Add &quot;unknown&quot; reporting for MMIO Stale Data (git-fixes).
- x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes).
- x86/bugs: Warn when &quot;ibrs&quot; mitigation is selected on Enhanced IBRS parts (git-fixes).
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes).
- x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes).
- x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes).
- x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes).
- x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205).
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes).
- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes).
- x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes).
- x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578).
- x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes).
- x86/microcode/AMD: Fix mixed steppings support (git-fixes).
- x86/microcode/AMD: Track patch allocation size explicitly (git-fixes).
- x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes).
- x86/microcode: Add explicit CPU vendor dependency (git-fixes).
- x86/microcode: Adjust late loading result reporting message (git-fixes).
- x86/microcode: Rip out the OLD_INTERFACE (git-fixes).
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes).
- x86/mm: Use proper mask when setting PUD mapping (git-fixes).
- x86/nospec: Unwreck the RSB stuffing (git-fixes).
- x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes).
- x86/pat: Fix x86_has_pat_wp() (git-fixes).
- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes).
- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes).
- x86/signal: Fix the value returned by strict_sas_size() (git-fixes).
- x86/speculation/mmio: Print SMT warning (git-fixes).
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes).
- x86/static_call: Serialize __static_call_fixup() properly (git-fixes).
- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- x86/topology: Fix duplicated core ID within a package (git-fixes).
- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- x86: Fix return value of __setup handlers (git-fixes).
- x86: drop bogus &quot;cc&quot; clobber from __try_cmpxchg_user_asm() (git-fixes).
- xen/netback: do not do grant copy across page boundary (git-fixes).
- xen/netback: use same error messages for same errors (git-fixes).
- xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes).
- xhci: Fix incorrect tracking of free space on transfer rings (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.66.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.66.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.66.1.150400.24.29.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.66.1.150400.24.29.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.66.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.66.1.150400.24.29.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2495</id>
    <title>Recommended update for libzypp</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1686661578"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211661" id="1211661" title="Signature verification failed for repomd.xml after extra keys download failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="L3: SUSE Manager reposync has started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
    </references>
    <description>This update for libzypp fixes the following issues:

- Fix &quot;Curl error 92&quot; when synchronizing SUSE Manager repositories. [bsc#1212187]
- Do not unconditionally release a medium if provideFile failed. [bsc#1211661]
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="src" src="src/libzypp-17.31.13-150400.3.30.1.src.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="x86_64" src="x86_64/libzypp-17.31.13-150400.3.30.1.x86_64.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="aarch64" src="aarch64/libzypp-17.31.13-150400.3.30.1.aarch64.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2547</id>
    <title>Recommended update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687179089"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211000" id="1211000" title="vCPU stalls in Qemu when storage on NFS [ref:_00D1igLOd._5005qQ2Egk:ref]" type="bugzilla"/>
    </references>
    <description>This update for qemu fixes the following issues:

- vCPU stalls in Qemu with NFS storage (bsc#1211000) 
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="src" src="src/qemu-6.2.0-150400.37.17.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.17.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.17.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.17.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.17.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.17.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.17.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2782</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688484888"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152489" id="1152489" title="[TRACKERBUG] git-fixes pile for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1160435" id="1160435" title="5.5 kernel-docs package build failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1172073" id="1172073" title="kernel-devel and kernel-source need Obsolete for previous package rebuilds of the same version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191731" id="1191731" title="kernel-default-base from SLE-15-SP4-JeOS-Alpha-202110-1 conflicts with kernel-default-base from the &quot;moving target&quot; repository" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195655" id="1195655" title="SLES15 SP4 - [P8][P9][P10]- Hard lockups are observed while running stress-ng and LPAR hangs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195921" id="1195921" title="ACPI patch for supporting nBFT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205650" id="1205650" title="cgroup: Honor caller's cgroup NS when resolving path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205756" id="1205756" title="VUL-0: CVE-2022-45884: kernel-source-azure,kernel-source-rt,kernel-source: UaF in drivers/media/dvb-core/dvbdev.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205758" id="1205758" title="VUL-0: CVE-2022-45885: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_frontend.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205760" id="1205760" title="VUL-0: CVE-2022-45886: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_net.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205762" id="1205762" title="VUL-0: CVE-2022-45887: kernel-source-rt,kernel-source,kernel-source-azure: Memory leak in drivers/media/usb/ttusb-dec/ttusb_dec.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205803" id="1205803" title="VUL-0: CVE-2022-45919: kernel: use-after-free when there is a disconnect after an open in drivers/media/dvb-core/dvb_ca_en50221.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206024" id="1206024" title="VUL-0: CVE-2022-4269: kernel-source,kernel-source-rt,kernel-source-azure: kernel: net: CPU soft lockup in TC mirred egress-to-ingress action" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206578" id="1206578" title="Cannot boot into OS when Enhanced REP MOVSB/STOSB set Disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207553" id="1207553" title="Missing '/usr/lib/firmware/iwlwifi-so-a0-gf-a0.pnvm', so Intel Wi-Fi 6E AX211 fails to work with iwlwifi module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208050" id="1208050" title="Partner-L3: [HPS Bug] OOB NIC driver failed with SLES15-SP4-QU1.1 but passed with SLES15-SP4 GM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208410" id="1208410" title="[NetApp SLES15 SP5 Bug] multipathd hang seen on SAN-booted host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208600" id="1208600" title="VUL-0: CVE-2023-1077: kernel: type confusion in pick_next_rt_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208604" id="1208604" title="VUL-0: CVE-2023-1079: kernel: Use After Free in asus_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208758" id="1208758" title="BUG: kernel NULL pointer dereference, address: 0000000000000028 - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209287" id="1209287" title="VUL-0: CVE-2023-1380: kernel: A USB-accessible slab-out-of-bounds read in Linux kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209288" id="1209288" title="VUL-0: CVE-2023-1382: kernel: denial of service in tipc_conn_close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209367" id="1209367" title="PSP_CI: P10 Up-to 8% degradation using Unixbench 16 copy filecopy on SLES15SP4 SS1 compared to SLES15SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209856" id="1209856" title="SLES 15 SP4 - kernel: fix __clear_user() inline assembly constraints" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209982" id="1209982" title="[Azure][MANA][Debuggability] Add new MANA VF performance counters for easier troubleshooting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210165" id="1210165" title="Kernel WARNING &quot;thunderbolt 0000:34:00.6: interrupt for TX ring 0 is already enabled&quot; at S3/S4 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210294" id="1210294" title="VUL-0: CVE-2023-30456: kernel: nVMX CR0 and CR4 consistency checks issue on x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210449" id="1210449" title="SLES 15 SP4 - s390/qeth: NET2016 - fix use-after-free in HSCI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210450" id="1210450" title="SLES 15 SP4 - s390/extmem: return correct segment type in __segment_load()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210498" id="1210498" title="VUL-0: CVE-2023-2124: kernel-source: OOB access in the XFS subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210533" id="1210533" title="VUL-0: CVE-2023-2002: kernel-source-azure,kernel-source-rt,kernel-source: unauthorized management command execution" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210551" id="1210551" title="[Azure][MANA] Backport Patches for MANA Jumbo Frame Support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210647" id="1210647" title="VUL-0: CVE-2023-2162: kernel-source-rt,kernel-source,kernel-source-azure: UAF during login when accessing the shost ipaddress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210741" id="1210741" title="[Azure][MANA][InfinitiBand] Features Support and InfiniBand for MANA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210775" id="1210775" title="[859215.187505] kernel BUG at ../mm/slub.c:379! - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210783" id="1210783" title="VUL-0: CVE-2023-31084: kernel: blocking operation when a task is in !TASK_RUNNING when dvb_frontend_get_event, wait_event_interruptible is called" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210791" id="1210791" title="KMP build fails with ld: cannot find arch/s390/lib/expoline/expoline.o" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210806" id="1210806" title="VUL-0: CVE-2023-2269: kernel-source-azure,kernel-source-rt,kernel-source: deadlock in dm_get_inactive_table() in dm-ioctl.c leads to local DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210940" id="1210940" title="VUL-0: CVE-2023-31436: kernel: out-of-bounds write because lmax can exceed QFQ_MIN_LMAX in qfq_change_class in net/sched/sch_qfq.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210947" id="1210947" title="s390/ap: fix crash on older machines based on QCI info missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211037" id="1211037" title="VUL-0: CVE-2023-2483: kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211043" id="1211043" title="VUL-0: CVE-2023-32233: kernel: LPE due to use-after-free in Netfilter nf_tables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211044" id="1211044" title="kernel: Improve workqueue stall reports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211089" id="1211089" title="ALP Workbench: kmod-testsuite fails to build on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211105" id="1211105" title="VUL-0: CVE-2023-2513: kernel-source-azure,kernel-source,kernel-source-rt: ext4: use-after-free in ext4_xattr_set_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211113" id="1211113" title="apparmor DENIED errors for gzip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211131" id="1211131" title="VUL-0: CVE-2023-2156: kernel-source-rt,kernel-source,kernel-source-azure: Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211205" id="1211205" title="Regression: 5.14.21-150400.24.60 lacks avx cpu flags on Sapphire Rapids processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211263" id="1211263" title="VUL-0: CVE-2023-28410: kernel-source: A potential security vulnerability in some Intel i915 Graphics drivers for linux may allow escalation of privilege" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211280" id="1211280" title="Add patch to support rumble on latest xbox controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211281" id="1211281" title="[Azure][Hyper-V]  Backport request for the the bug Unable to send packet via vmbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211299" id="1211299" title="LTP nfs08.sh (cache invalidation for directories) fails on NFS &gt;= v4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211346" id="1211346" title="Partner-L3: NULL pointer dereference in lpfc_dev_loss_tmo_callbk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211387" id="1211387" title="VUL-0: kernel: Use after free bug in imsttfb_probe due to lack of error-handling of init_imstt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211414" id="1211414" title="Updating kernel causes 3rd party drivers error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211449" id="1211449" title="VUL-1: kernel: Use after free bug in r592_remov due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211465" id="1211465" title="SLES 15 SP4 - net/iucv: Fix size of interrupt data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211519" id="1211519" title="Update gve kernel module to 6.2 upstream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211564" id="1211564" title="mlxbf_gige driver crash during YES Certification testing, kernel BUG at ../net/core/skbuff.c:111!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211590" id="1211590" title="VUL-0: CVE-2023-33288: kernel-source-rt,kernel-source,kernel-source-azure: Use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211686" id="1211686" title="s390/ctcm: Fix return type of ctc{mp,}m_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211687" id="1211687" title="s390/dasd: fix hanging blockdevice after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211688" id="1211688" title="s390/kprobes: fix current_kprobe never cleared after kprobes reenter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211689" id="1211689" title="s390/kprobes: fix irq mask clobbering on kprobe reenter from  post_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211690" id="1211690" title="s390/lcs: Fix return type of lcs_start_xmit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211691" id="1211691" title="s390/mem_detect: fix detect_memory() error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211692" id="1211692" title="s390/netiucv: Fix return type of netiucv_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211693" id="1211693" title="s390/qdio: fix do_sqbs() inline assembly constraint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211714" id="1211714" title="s390/vdso: remove -nostdlib compiler flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211796" id="1211796" title="kernel modules not usrmerged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211804" id="1211804" title="ceph: force updating the msg pointer in non-split case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211807" id="1211807" title="fuse: fix attr version comparison in fuse_read_update_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211808" id="1211808" title="fuse: always revalidate rename target dentry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211847" id="1211847" title="Update Broadcom Emulex lpfc driver to 14.2.0.12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211852" id="1211852" title="Update Broadcom Emulex lpfc driver to 14.2.0.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211855" id="1211855" title="VUL-0: CVE-2023-3006: kernel: Add Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211960" id="1211960" title="qla2xxx: update driver to 10.02.08.300-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212129" id="1212129" title="VUL-0: CVE-2023-3141: kernel-source,kernel-source-azure,kernel-source-rt: kernel: Use after free bug in r592_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212154" id="1212154" title="VUL-0: CVE-2023-3161: kernel: fbcon: shift-out-of-bounds in fbcon_set_font()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212155" id="1212155" title="VUL-0: CVE-2023-21102: kernel: bypass of shadow stack protection due to a logic error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212158" id="1212158" title="kernel-docs missing top level chapter numbers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212350" id="1212350" title="SLE-15SP4 KOTD: Kernel warning during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212448" id="1212448" title="Backport of cleanup patches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212494" id="1212494" title="VUL-0: CVE-2023-35823: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212504" id="1212504" title="VUL-0: CVE-2023-35788: kernel: out-of-bounds write in net/sched/cls_flower.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212513" id="1212513" title="VUL-0: CVE-2023-35828: kernel: use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209039" id="1209039" title="VUL-0: CVE-2023-1249: kernel: missing mmap_lock in fill_files_note that could possibly lead to a use after free in the coredump code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212540" id="1212540" title="ceph: fix use-after-free bug for inodes when flushing capsnaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211410" id="1211410" title="Weird \vmalloc error\ kernel stack trace when lsof is executed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212561" id="1212561" title="cgroup: always put cset in cgroup_css_set_put_fork" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212563" id="1212563" title="cgroup: fix missing cpus_read_{lock,unlock}() in  cgroup_transfer_tasks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212564" id="1212564" title="bpf: Fix UAF in task local storage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212592" id="1212592" title="s390/dasd: Use correct lock while counting channel queue length" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" id="CVE-2023-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" id="CVE-2023-1249" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" id="CVE-2023-35788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" id="CVE-2023-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" id="CVE-2023-3161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" id="CVE-2023-21102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" id="CVE-2023-3141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" id="CVE-2023-1077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" id="CVE-2023-28410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" id="CVE-2023-2156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" id="CVE-2023-1382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" id="CVE-2023-3006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" id="CVE-2023-2269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" id="CVE-2023-1079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" id="CVE-2023-2162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" id="CVE-2023-33288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" id="CVE-2022-45886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" id="CVE-2022-45885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" id="CVE-2022-45887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" id="CVE-2022-45919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" id="CVE-2022-45884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" id="CVE-2023-31084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" id="CVE-2023-2002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" id="CVE-2023-31436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" id="CVE-2023-30456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" id="CVE-2022-4269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" id="CVE-2023-32233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" id="CVE-2023-1380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" id="CVE-2023-2513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" id="CVE-2023-2483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" id="CVE-2023-2124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3692" id="PED-3692" title="https://jira.suse.com/browse/PED-3692" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3931" id="PED-3931" title="https://jira.suse.com/browse/PED-3931" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4022" id="PED-4022" title="https://jira.suse.com/browse/PED-4022" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-35828: Fixed a use-after-free flaw inside renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
- CVE-2023-35823: Fixed a use-after-free in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
- CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590).
- CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294).
- CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855).
- CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove due caused by a race condition (bsc#1211037).
- CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
- CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-1249: Fixed a use-after-free flaw inside the core dump subsystem, that could have been used to crash the system (bsc#1209039).
- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024).

The following non-security bugs were fixed:

- 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes).
- ACPI: EC: Fix oops when removing custom query handlers (git-fixes).
- ACPI: bus: Ensure that notify handlers are not running after removal (git-fixes).
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes).
- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes).
- ACPI: tables: Add support for NBFT (bsc#1195921).
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes).
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (git-fixes).
- ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes).
- ALSA: cs46xx: mark snd_cs46xx_download_image as static (git-fixes).
- ALSA: firewire-digi00x: prevent potential use after free (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes).
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo L140AU (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes).
- ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes).
- ALSA: hda/realtek: Apply HP B&amp;O top speaker profile to Pavilion 15 (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes).
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes).
- ALSA: hda: Fix Oops by 9.1 surround channel names (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend period (git-fixes).
- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes).
- ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes).
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes).
- ALSA: usb-audio: Fix broken resume due to UAC3 power state (git-fixes).
- ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes).
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes)
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes).
- ARM: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes).
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes).
- ARM: dts: vexpress: add missing cache properties (git-fixes).
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes).
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds (git-fixes).
- ASoC: rt5682: Disable jack detection interrupt during suspend (git-fixes).
- ASoC: soc-pcm: fix hw-&gt;formats cleared by soc_pcm_hw_init() for dpcm (git-fixes).
- ASoC: soc-pcm: test if a BE can be prepared (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions (git-fixes).
- Add a bug reference to two existing drm-hyperv changes (bsc#1211281).
- Also include kernel-docs build requirements for ALP
- Avoid unsuported tar parameter on SLE12
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes).
- Bluetooth: L2CAP: fix &quot;bad unlock balance&quot; in l2cap_disconnect_rsp (git-fixes).
- Bluetooth: btintel: Add LE States quirk support (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- Documentation/filesystems: ramfs-rootfs-initramfs: use :Author: (git-fixes).
- Documentation/filesystems: sharedsubtree: add section headings (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- HID: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes).
- HID: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes).
- HID: microsoft: Add rumble support to latest xbox controllers (bsc#1211280).
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes).
- HID: wacom: Force pen out of prox if no events have been received in a while (git-fixes).
- HID: wacom: Set a default resolution for older tablets (git-fixes).
- HID: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes).
- HID: wacom: generic: Set battery quirk only when we see battery data (git-fixes).
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes)
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes)
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes)
- IB/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes)
- Input: fix open count when closing inhibited device (git-fixes).
- Input: psmouse - fix OOB access in Elantech protocol (git-fixes).
- Input: xpad - add constants for GIP interface numbers (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes).
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes).
- KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes)
- KVM: Disallow user memslot with size that exceeds &quot;unsigned long&quot; (git-fixes)
- KVM: Do not create VM debugfs files outside of the VM directory (git-fixes)
- KVM: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes)
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes).
- KVM: Prevent module exit until all VMs are freed (git-fixes)
- KVM: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes).
- KVM: SVM: Fix benign &quot;bool vs. int&quot; comparison in svm_set_cr0() (git-fixes).
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() (git-fixes).
- KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes).
- KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes).
- KVM: SVM: hyper-v: placate modpost section mismatch error (git-fixes).
- KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes).
- KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes).
- KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes).
- KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes).
- KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes).
- KVM: arm64: Do not arm a hrtimer for an already pending timer (git-fixes)
- KVM: arm64: Do not hypercall before EL2 init (git-fixes)
- KVM: arm64: Do not return from void function (git-fixes)
- KVM: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes)
- KVM: arm64: Fix S1PTW handling on RO memslots (git-fixes)
- KVM: arm64: Fix bad dereference on MTE-enabled systems (git-fixes)
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes)
- KVM: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes)
- KVM: arm64: Free hypervisor allocations if vector slot init fails (git-fixes)
- KVM: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes)
- KVM: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes)
- KVM: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes)
- KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes)
- KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes)
- KVM: arm64: Save PSTATE early on exit (git-fixes)
- KVM: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes)
- KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes)
- KVM: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes)
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes)
- KVM: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes)
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes).
- KVM: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes).
- KVM: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes).
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes).
- KVM: nVMX: Inject #GP, not #UD, if &quot;generic&quot; VMXON CR0/CR4 check fails (git-fixes).
- KVM: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes).
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes).
- KVM: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes).
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes).
- KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes).
- KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes).
- KVM: x86/pmu: Ignore pmu-&gt;global_ctrl check if vPMU does not support global_ctrl (git-fixes).
- KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes).
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes).
- KVM: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes).
- KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes).
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes).
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes).
- KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes).
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes).
- KVM: x86: Protect the unused bits in MSR exiting flags (git-fixes).
- KVM: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes).
- KVM: x86: Report deprecated x87 features in supported CPUID (git-fixes).
- KVM: x86: do not set st-&gt;preempted when going back to user space (git-fixes).
- KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes).
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes).
- PCI/ASPM: Remove pcie_aspm_pm_state_change() (git-fixes).
- PM: hibernate: Do not get block device exclusively in test_resume mode (git-fixes).
- PM: hibernate: Turn snapshot_test into global variable (git-fixes).
- PM: hibernate: fix load_image_and_restore() error path (git-fixes).
- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes)
- RDMA/bnxt_re: Fix the page_size used during the MR creation (git-fixes)
- RDMA/cm: Trace icm_send_rej event before the cm state is reset (git-fixes)
- RDMA/core: Fix multiple -Warray-bounds warnings (git-fixes)
- RDMA/efa: Fix unsupported page sizes in device (git-fixes)
- RDMA/hns: Fix base address table allocation (git-fixes)
- RDMA/hns: Fix timeout attr in query qp for HIP08 (git-fixes)
- RDMA/hns: Modify the value of long message loopback slice (git-fixes)
- RDMA/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383).
- RDMA/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383).
- RDMA/irdma: Fix Local Invalidate fencing (git-fixes)
- RDMA/irdma: Fix RQ completion opcode (jsc#SLE-18383).
- RDMA/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383).
- RDMA/irdma: Fix inline for multiple SGE's (jsc#SLE-18383).
- RDMA/irdma: Prevent QP use after free (git-fixes)
- RDMA/irdma: Remove enum irdma_status_code (jsc#SLE-18383).
- RDMA/irdma: Remove excess error variables (jsc#SLE-18383).
- RDMA/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022).
- RDMA/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022).
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255).
- RDMA/mlx5: Fix flow counter query via DEVX (git-fixes)
- RDMA/mlx5: Use correct device num_ports when modify DC (git-fixes)
- RDMA/rdmavt: Delete unnecessary NULL check (git-fixes)
- RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes)
- RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes)
- RDMA/rxe: Fix the error &quot;trying to register non-static key in rxe_cleanup_task&quot; (git-fixes)
- RDMA/rxe: Remove tasklet call from rxe_cq.c (git-fixes)
- RDMA/siw: Fix potential page_array out of range access (git-fixes)
- RDMA/siw: Remove namespace check from siw_netdev_event() (git-fixes)
- RDMA/srpt: Add a check for valid 'mad_agent' pointer (git-fixes)
- Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes).
- Revert &quot;KVM: set owner of cpu and vm file operations&quot; (git-fixes)
- SMB3.1.1: add new tree connect ShareFlags (bsc#1193629).
- SMB3: Add missing locks to protect deferred close file list (git-fixes).
- SMB3: Close all deferred handles of inode in case of handle lease break (bsc#1193629).
- SMB3: Close deferred file handles in case of handle lease break (bsc#1193629).
- SMB3: drop reference to cfile before sending oplock break (bsc#1193629).
- SMB3: force unmount was failing to close deferred close files (bsc#1193629).
- SUNRPC: Clean up svc_deferred_class trace events (git-fixes).
- SUNRPC: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775).
- Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
- Trim obsolete KMP list. SLE11 is out of support, we do not need to handle upgrading from SLE11 SP1.
- USB / dwc3: Fix a checkpatch warning in core.c (git-fixes).
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes).
- USB: core: Add routines for endpoint checks in old drivers (git-fixes).
- USB: dwc3: fix use-after-free on core driver unbind (git-fixes).
- USB: dwc3: qcom: fix NULL-deref on suspend (git-fixes).
- USB: serial: option: add Quectel EM061KGL series (git-fixes).
- USB: sisusbvga: Add endpoint checks (git-fixes).
- USB: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes).
- affs: initialize fsdata in affs_truncate() (git-fixes).
- apparmor: add a kernel label to use on kernel objects (bsc#1211113).
- arm64: Always load shadow stack pointer directly from the task struct (git-fixes)
- arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes)
- arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes).
- arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes).
- arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes).
- arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes).
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes).
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes).
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes)
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes).
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes).
- ata: pata_octeon_cf: drop kernel-doc notation (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work (git-fixes).
- block: add a bdev_max_zone_append_sectors helper (git-fixes).
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes).
- bnxt: Do not read past the end of test names (jsc#SLE-18978).
- bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978).
- bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978).
- bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978).
- bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978).
- bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes).
- bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978).
- bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978).
- bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978).
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes).
- bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes).
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978).
- bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978).
- bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes)
- bpf, arm64: Clear prog-&gt;jited_len along prog-&gt;jited (git-fixes)
- bpf, arm64: Feed byte-offset into bpf line info (git-fixes)
- bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes)
- bpf: Add extra path pointer check to d_path helper (git-fixes).
- bpf: Fix UAF in task local storage (bsc#1212564).
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes).
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes).
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes).
- can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes).
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes).
- can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes).
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes).
- can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes).
- can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes).
- cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes).
- ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540).
- ceph: force updating the msg pointer in non-split case (bsc#1211804).
- cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906).
- cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650).
- cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650).
- cgroup: Make cgroup_get_from_id() prettier (bsc#1205650).
- cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650).
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563).
- cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561).
- cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup  id (bsc#1205650).
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563).
- cgroup: reduce dependency on cgroup_mutex (bsc#1205650).
- cifs: Avoid a cast in add_lease_context() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes).
- cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758).
- cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629).
- cifs: fix potential race when tree connecting ipc (bsc#1208758).
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758).
- cifs: fix sharing of DFS connections (bsc#1208758).
- cifs: fix smb1 mount regression (bsc#1193629).
- cifs: mapchars mount option ignored (bsc#1193629).
- cifs: missing lock when updating session status (bsc#1193629).
- cifs: print smb3_fs_context::source when mounting (bsc#1193629).
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758).
- cifs: protect session status check in smb2_reconnect() (bsc#1208758).
- cifs: release leases for deferred close handles when freezing (bsc#1193629).
- cifs: sanitize paths in cifs_update_super_prepath (git-fixes).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes).
- clk: qcom: regmap: add PHY clock source implementation (git-fixes).
- clk: tegra20: fix gcc-7 constant overflow warning (git-fixes).
- configfs: fix possible memory leak in configfs_create_dir() (git-fixes).
- crypto: acomp - define max size for destination (jsc#PED-3692)
- crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692)
- crypto: qat - Fix unsigned function returning negative (jsc#PED-3692)
- crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692)
- crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692)
- crypto: qat - abstract PFVF receive logic (jsc#PED-3692)
- crypto: qat - abstract PFVF send function (jsc#PED-3692)
- crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692)
- crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692)
- crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692)
- crypto: qat - add backlog mechanism (jsc#PED-3692)
- crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692)
- crypto: qat - add check to validate firmware images (jsc#PED-3692)
- crypto: qat - add limit to linked list parsing (jsc#PED-3692)
- crypto: qat - add misc workqueue (jsc#PED-3692)
- crypto: qat - add missing restarting event notification in (jsc#PED-3692)
- crypto: qat - add param check for DH (jsc#PED-3692)
- crypto: qat - add param check for RSA (jsc#PED-3692)
- crypto: qat - add pfvf_ops (jsc#PED-3692)
- crypto: qat - add resubmit logic for decompression (jsc#PED-3692)
- crypto: qat - add support for 401xx devices (jsc#PED-3692)
- crypto: qat - add support for compression for 4xxx (jsc#PED-3692)
- crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692)
- crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692)
- crypto: qat - change PFVF ACK behaviour (jsc#PED-3692)
- crypto: qat - change behaviour of (jsc#PED-3692)
- crypto: qat - change bufferlist logic interface (jsc#PED-3692)
- crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692)
- crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692)
- crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692)
- crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692)
- crypto: qat - do not rely on min version (jsc#PED-3692)
- crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692)
- crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692)
- crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692)
- crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692)
- crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692)
- crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - extend buffer list interface (jsc#PED-3692)
- crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692)
- crypto: qat - extract send and wait from (jsc#PED-3692)
- crypto: qat - fix DMA transfer direction (jsc#PED-3692)
- crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692)
- crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692)
- crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692)
- crypto: qat - fix a typo in a comment (jsc#PED-3692)
- crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692)
- crypto: qat - fix definition of ring reset results (jsc#PED-3692)
- crypto: qat - fix error return code in adf_probe (jsc#PED-3692)
- crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692)
- crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692)
- crypto: qat - fix wording and formatting in code comment (jsc#PED-3692)
- crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692)
- crypto: qat - free irq in case of failure (jsc#PED-3692)
- crypto: qat - free irqs only if allocated (jsc#PED-3692)
- crypto: qat - generalize crypto request buffers (jsc#PED-3692)
- crypto: qat - get compression extended capabilities (jsc#PED-3692)
- crypto: qat - handle retries due to collisions in (jsc#PED-3692)
- crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692)
- crypto: qat - improve logging of PFVF messages (jsc#PED-3692)
- crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692)
- crypto: qat - introduce support for PFVF block messages (jsc#PED-3692)
- crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692)
- crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692)
- crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692)
- crypto: qat - make PFVF message construction direction (jsc#PED-3692)
- crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692)
- crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692)
- crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692)
- crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692)
- crypto: qat - move pfvf collision detection values (jsc#PED-3692)
- crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692)
- crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692)
- crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692)
- crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692)
- crypto: qat - re-enable registration of algorithms (jsc#PED-3692)
- crypto: qat - refactor PF top half for PFVF (jsc#PED-3692)
- crypto: qat - refactor pfvf version request messages (jsc#PED-3692)
- crypto: qat - refactor submission logic (jsc#PED-3692)
- crypto: qat - relocate PFVF PF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF VF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF disabled function (jsc#PED-3692)
- crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692)
- crypto: qat - relocate backlog related structures (jsc#PED-3692)
- crypto: qat - relocate bufferlist logic (jsc#PED-3692)
- crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692)
- crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692)
- crypto: qat - remove empty sriov_configure() (jsc#PED-3692)
- crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692)
- crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692)
- crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692)
- crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692)
- crypto: qat - remove unneeded assignment (jsc#PED-3692)
- crypto: qat - remove unneeded braces (jsc#PED-3692)
- crypto: qat - remove unneeded packed attribute (jsc#PED-3692)
- crypto: qat - remove unused PFVF stubs (jsc#PED-3692)
- crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692)
- crypto: qat - rename bufferlist functions (jsc#PED-3692)
- crypto: qat - rename pfvf collision constants (jsc#PED-3692)
- crypto: qat - reorganize PFVF code (jsc#PED-3692)
- crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692)
- crypto: qat - replace deprecated MSI API (jsc#PED-3692)
- crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692)
- crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692)
- crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692)
- crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692)
- crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692)
- crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692)
- crypto: qat - simplify adf_enable_aer() (jsc#PED-3692)
- crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692)
- crypto: qat - split PFVF message decoding from handling (jsc#PED-3692)
- crypto: qat - stop using iommu_present() (jsc#PED-3692)
- crypto: qat - store the PFVF protocol version of the (jsc#PED-3692)
- crypto: qat - store the ring-to-service mapping (jsc#PED-3692)
- crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692)
- crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692)
- crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692)
- crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692)
- crypto: qat - use hweight for bit counting (jsc#PED-3692)
- crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692)
- crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692)
- crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692)
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes).
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992).
- debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes).
- dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes).
- dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes).
- dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes).
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes).
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes).
- dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes).
- dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes).
- dmaengine: mv_xor_v2: Fix an error code (git-fixes).
- dmaengine: pl330: rename _start to prevent build error (git-fixes).
- do not reuse connection if share marked as isolated (bsc#1193629).
- docs: networking: fix x25-iface.rst heading &amp; index order (git-fixes).
- drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes).
- drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes).
- drm/amd/display: Fix hang when skipping modeset (git-fixes).
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- drm/amd/display: fix flickering caused by S/G mode (git-fixes).
- drm/amd/pm: Fix power context allocation in SMU13 (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes).
- drm/amd: Fix an out of bounds error in BIOS parser (git-fixes).
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes).
- drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes).
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes).
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes).
- drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes).
- drm/amdgpu: release gpu full access after &quot;amdgpu_device_ip_late_init&quot; (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes).
- drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes).
- drm/ast: Fix ARM compatibility (git-fixes).
- drm/displayid: add displayid_get_header() and check bounds better (git-fixes).
- drm/exynos: fix g2d_open/close helper function definitions (git-fixes).
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes).
- drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes).
- drm/i915/dg2: Support 4k@30 on HDMI (git-fixes).
- drm/i915/dp: prevent potential div-by-zero (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes).
- drm/i915/selftests: Add some missing error propagation (git-fixes).
- drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes).
- drm/i915/selftests: Stop using kthread_stop() (git-fixes).
- drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes).
- drm/i915: Use 18 fast wake AUX sync len (git-fixes).
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes).
- drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes).
- drm/msm/dp: unregister audio driver during unbind (git-fixes).
- drm/msm/dpu: Add INTF_5 interrupts (git-fixes).
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes).
- drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes).
- drm/msm: Be more shouty if per-process pgtables are not working (git-fixes).
- drm/msm: Set max segment size earlier (git-fixes).
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (git-fixes).
- drm/nouveau: add nv_encoder pointer check for NULL (git-fixes).
- drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- drm/tegra: Avoid potential 32-bit integer overflow (git-fixes).
- drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes).
- drm/ttm: optimize pool allocations a bit v2 (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix &quot;snps,hsphy_interface&quot; type (git-fixes).
- eeprom: at24: also select REGMAP (git-fixes).
- ext4: unconditionally enable the i_version counter (bsc#1211299).
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472).
- fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes).
- fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes).
- fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489)
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes).
- fbdev: udlfb: Fix endpoint check (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes).
- fs/jfs: fix shift exponent db_agl2size negative (git-fixes).
- fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes).
- fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes).
- fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes).
- fuse: always revalidate rename target dentry (bsc#1211808).
- fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807).
- futex: Resend potentially swallowed owner death notification (git-fixes).
- google/gve:fix repeated words in comments (bsc#1211519).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (git-fixes).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake &quot;droping&quot; -&gt; &quot;dropping&quot; (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (git-fixes).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes).
- gve: enhance no queue page list detection (bsc#1211519).
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes).
- hfs/hfsplus: use WARN_ON for sanity check (git-fixes).
- hfs: Fix OOB Write in hfs_asc2mac (git-fixes).
- hfs: fix OOB Read in __hfs_brec_find (git-fixes).
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes).
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes).
- i2c: omap: Fix standard mode false ACK readings (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes).
- i2c: tegra: Fix PEC support for SMBUS block read (git-fixes).
- i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378).
- i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378).
- i40e: Fix DMA mappings leak (jsc#SLE-18378).
- i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378).
- i40e: Fix VF set max MTU size (jsc#SLE-18378).
- i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378).
- i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378).
- i40e: Fix calculating the number of queue pairs (jsc#SLE-18378).
- i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378).
- i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378).
- i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378).
- i40e: Fix for VF MAC address 0 (jsc#SLE-18378).
- i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378).
- i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378).
- i40e: Fix kernel crash during module removal (jsc#SLE-18378).
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378).
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378).
- i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378).
- i40e: Refactor tc mqprio checks (jsc#SLE-18378).
- i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378).
- i40e: fix accessing vsi-&gt;active_filters without holding lock (jsc#SLE-18378).
- i40e: fix flow director packet filter programming (jsc#SLE-18378).
- i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378).
- i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378).
- iavf/iavf_main: actually log -&gt;src mask when talking about it (jsc#SLE-18385).
- iavf: Detach device during reset task (jsc#SLE-18385).
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385).
- iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385).
- iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385).
- iavf: Fix a crash during reset task (jsc#SLE-18385).
- iavf: Fix bad page state (jsc#SLE-18385).
- iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385).
- iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385).
- iavf: Fix max_rate limiting (jsc#SLE-18385).
- iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385).
- iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385).
- iavf: fix hang on reboot with ice (jsc#SLE-18385).
- iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385).
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385).
- iavf: remove mask from iavf_irq_enable_queues() (git-fixes).
- ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375).
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375).
- igb: Add lock to avoid data race (jsc#SLE-18379).
- igb: Enable SR-IOV after reinit (jsc#SLE-18379).
- igb: Initialize mailbox message for VF reset (jsc#SLE-18379).
- igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379).
- igb: fix bit_shift to be in [1..8] range (git-fixes).
- igb: fix nvm.ops.read() error handling (git-fixes).
- igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379).
- igbvf: Regard vf reset nack as success (jsc#SLE-18379).
- igc: Add checking for basetime less than zero (jsc#SLE-18377).
- igc: Add ndo_tx_timeout support (jsc#SLE-18377).
- igc: Clean the TX buffer and TX descriptor ring (git-fixes).
- igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377).
- igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377).
- igc: Fix possible system crash when loading module (git-fixes).
- igc: Lift TAPRIO schedule restriction (jsc#SLE-18377).
- igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377).
- igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377).
- igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377).
- igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377).
- igc: fix the validation logic for taprio's gate list (jsc#SLE-18377).
- igc: read before write to SRRCTL register (jsc#SLE-18377).
- igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377).
- igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377).
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes).
- iio: adc: ad7192: Change &quot;shorted&quot; channels to differential (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes).
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448).
- init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448).
- init: Provide arch_cpu_finalize_init() (bsc#1212448).
- init: Remove check_bugs() leftovers (bsc#1212448).
- intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553).
- ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384).
- ixgbe: Enable setting RSS table to default values (jsc#SLE-18384).
- ixgbe: Fix panic during XDP_TX with &gt; 64 CPUs (jsc#SLE-18384).
- ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384).
- ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384).
- ixgbe: fix pci device refcount leak (jsc#SLE-18384).
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384).
- jfs: Fix fortify moan in symlink (git-fixes).
- kABI workaround for btbcm.c (git-fixes).
- kABI workaround for mt76_poll_msec() (git-fixes).
- kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest  (git-fixes)
- kABI: Fixed broken 3rd party dirvers issue (bsc#1208050 bsc#1211414).
- kabi/severities: added Microsoft mana symbold (bsc#1210551)
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base.
- kernel-docs: Add missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- kernel-source: Remove unused macro variant_symbols
- kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731).
- kprobe: reverse kp-&gt;flags when arm_kprobe failed (git-fixes).
- kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes).
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes).
- kprobes: Forbid probing on trampoline and BPF code areas (git-fixes).
- kprobes: Prohibit probes in gate area (git-fixes).
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes).
- kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes).
- kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes).
- leds: Fix reference to led_set_brightness() in doc (git-fixes).
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes).
- leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes).
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes).
- locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes).
- lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852).
- lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852).
- lpfc: Clean up SLI-4 CQE status handling (bsc#1211852).
- lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852).
- lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852).
- lpfc: Enhance congestion statistics collection (bsc#1211852).
- lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346).
- lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852).
- lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852).
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes).
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes).
- mailbox: zynqmp: Fix IPI isr handling (git-fixes).
- mailbox: zynqmp: Fix typo in IPI documentation (git-fixes).
- mce: fix set_mce_nospec to always unmap the whole page (git-fixes).
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes).
- media: netup_unidvb: fix use-after-free at del_timer() (git-fixes).
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes).
- media: radio-shark: Add endpoint checks (git-fixes).
- media: rcar_fdp1: Fix the correct variable assignments (git-fixes).
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449).
- mfd: dln2: Fix memory leak in dln2_probe() (git-fixes).
- mfd: tqmx86: Correct board names for TQMxE39x (git-fixes).
- mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes).
- misc: fastrpc: reject new invocations during device removal (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes).
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes).
- mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410).
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410).
- mmc: sdhci-esdhc-imx: make &quot;no-mmc-hs400&quot; works (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes).
- mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written (git-fixes).
- net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes).
- net/net_failover: fix txq exceeding warning (git-fixes).
- net/sched: fix initialization order when updating chain 0 head (git-fixes).
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes).
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes).
- net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes).
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes).
- net: ena: Account for the number of processed bytes in XDP (git-fixes).
- net: ena: Do not register memory info on XDP exchange (git-fixes).
- net: ena: Fix rx_copybreak value update (git-fixes).
- net: ena: Fix toeplitz initial hash value (git-fixes).
- net: ena: Set default value for RX interrupt moderation (git-fixes).
- net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes).
- net: ena: Use bitmask to indicate packet redirection (git-fixes).
- net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes).
- net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes).
- net: hns3: fix reset delay time to avoid configuration timeout (git-fixes).
- net: hns3: fix sending pfc frames after reset issue (git-fixes).
- net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes).
- net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982).
- net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022).
- net: mana: Add support for jumbo frame (bsc#1210551).
- net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551).
- net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022).
- net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022).
- net: mana: Enable RX path to handle various MTU sizes (bsc#1210551).
- net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022).
- net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes).
- net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022).
- net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022).
- net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022).
- net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022).
- net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551).
- net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551).
- net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022).
- net: mana: Use napi_build_skb in RX path (bsc#1210551).
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes).
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564).
- net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes).
- net: qrtr: correct types of trace event parameters (git-fixes).
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes).
- net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes).
- net: tun: avoid disabling NAPI twice (git-fixes).
- net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes).
- net: tun: stop NAPI when detaching queues (git-fixes).
- net: tun: unlink NAPI from device on destruction (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes).
- nfp: only report pause frame configuration for physical device (git-fixes).
- nilfs2: do not write dirty data after degenerating to read-only (git-fixes).
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes).
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes).
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes).
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes).
- nouveau: fix client work fence deletion race (git-fixes).
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes).
- nvme-multipath: fix hang when disk goes live over reconnect (git-fixes).
- nvme-pci: add quirks for Samsung X5 SSDs (git-fixes).
- nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes).
- nvme-pci: clear the prp2 field when not used (git-fixes).
- nvme-pci: disable write zeroes on various Kingston SSD (git-fixes).
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes).
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes).
- nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes).
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes).
- nvme-tcp: fix bogus request completion when failing to send AER (git-fixes).
- nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes).
- nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes).
- nvme: also return I/O command effects from nvme_command_effects (git-fixes).
- nvme: check for duplicate identifiers earlier (git-fixes).
- nvme: cleanup __nvme_check_ids (git-fixes).
- nvme: fix discard support without oncs (git-fixes).
- nvme: fix interpretation of DMRSL (git-fixes).
- nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes).
- nvme: fix passthrough csi check (git-fixes).
- nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes).
- nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes).
- nvme: set non-mdts limits in nvme_scan_work (git-fixes).
- nvmet-tcp: add bounds check on Transfer Tag (git-fixes).
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes).
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes).
- nvmet: fix mar and mor off-by-one errors (git-fixes).
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes).
- nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes).
- nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes).
- nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes).
- octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes).
- octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes).
- octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes).
- octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes).
- phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes).
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes).
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes).
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes).
- platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes).
- platform/x86: hp-wmi: Support touchpad on/off (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes).
- platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes).
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes).
- power: supply: Fix logic checking if system is running from battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: ab8500: Fix external_power_changed race (git-fixes).
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes).
- power: supply: bq27xxx: expose battery data when CI=1 (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race (git-fixes).
- powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729).
- powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662).
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes).
- powerpc/purgatory: remove PGO flags (bsc#1194869).
- powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729).
- powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729).
- powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662).
- powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662).
- pstore: Revert pmsg_lock back to a normal mutex (git-fixes).
- purgatory: fix disabling debug info (git-fixes).
- pwm: meson: Fix axg ao mux parents (git-fixes).
- pwm: meson: Fix g12a ao clk81 name (git-fixes).
- qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001).
- qed/qed_mng_tlv: correctly zero out -&gt;min instead of -&gt;hour (jsc#SLE-19001).
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001).
- qed/qede: Fix scheduling while atomic (git-fixes).
- qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001).
- qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001).
- r8152: fix flow control issue of RTL8156A (git-fixes).
- r8152: fix the poor throughput for 2.5G devices (git-fixes).
- r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes).
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- regulator: Fix error checking for debugfs_create_dir (git-fixes).
- regulator: mt6359: add read check for PMIC MT6359 (git-fixes).
- regulator: pca9450: Fix BUCK2 enable_mask (git-fixes).
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- reiserfs: Add missing calls to reiserfs_security_free() (git-fixes).
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes).
- remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes).
- revert &quot;squashfs: harden sanity check in squashfs_read_xattr_id_table&quot; (git-fixes).
- ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes).
- ring-buffer: Fix kernel-doc (git-fixes).
- ring-buffer: Sync IRQ works before buffer destruction (git-fixes).
- rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
- rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches
- rtmutex: Ensure that the top waiter is always woken up (git-fixes).
- s390/ap: fix crash on older machines based on QCI info missing (bsc#1210947)
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686).
- s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592).
- s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687).
- s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes).
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688).
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689).
- s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690).
- s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691).
- s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692).
- s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693).
- s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes).
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes).
- s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714).
- s390: Hard lockups are observed while running stress-ng and LPAR hangs (bsc#1195655 ltc#195733).
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes).
- scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes).
- scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes).
- scsi: libsas: Add sas_ata_device_link_abort() (git-fixes).
- scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes).
- scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847).
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847).
- scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847).
- scsi: lpfc: Match lock ordering of lpfc_cmd-&gt;buf_lock and hbalock for abort paths (bsc#1211847).
- scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847).
- scsi: lpfc: Update congestion warning notification period (bsc#1211847).
- scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847).
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes).
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes).
- scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes).
- scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960).
- scsi: qla2xxx: Fix hang in task management (bsc#1211960).
- scsi: qla2xxx: Fix mem access after free (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd failure (bsc#1211960).
- scsi: qla2xxx: Multi-que support for TMF (bsc#1211960).
- scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960).
- scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960).
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960).
- scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960).
- scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960).
- scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes).
- scsi: stex: Fix gcc 13 warnings (git-fixes).
- scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes).
- selftests mount: Fix mount_setattr_test builds failed (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes).
- selftests/resctrl: Allow -&gt;setup() to return errors (git-fixes).
- selftests/resctrl: Check for return value after write_schemata() (git-fixes).
- selftests/resctrl: Extend CPU vendor detection (git-fixes).
- selftests/resctrl: Move -&gt;setup() call outside of test specific branches (git-fixes).
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes).
- selftests/sgx: Add &quot;test_encl.elf&quot; to TEST_FILES (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes).
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes).
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes).
- selftests: xsk: Disable IPv6 on VETH1 (git-fixes).
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes).
- selinux: do not use make's grouped targets feature yet (git-fixes).
- serial: 8250: Reinit port-&gt;pm on port specific driver unbind (git-fixes).
- serial: 8250_bcm7271: balance clk_enable calls (git-fixes).
- serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes).
- serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes).
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes).
- serial: Add support for Advantech PCI-1611U card (git-fixes).
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes).
- serial: lantiq: add missing interrupt ack (git-fixes).
- serial: qcom-geni: fix enabling deactivated interrupt (git-fixes).
- serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes).
- sfc: Change VF mac via PF as first preference if available (git-fixes).
- sfc: Fix module EEPROM reporting for QSFP modules (git-fixes).
- sfc: Fix use-after-free due to selftest_work (git-fixes).
- sfc: correctly advertise tunneled IPv6 segmentation (git-fixes).
- sfc: disable RXFCS and RXALL features by default (git-fixes).
- sfc: ef10: do not overwrite offload features at NIC reset (git-fixes).
- sfc: fix TX channel offset when using legacy interrupts (git-fixes).
- sfc: fix considering that all channels have TX queues (git-fixes).
- sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes).
- sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes).
- sfc: include vport_id in filter spec hash and equal() (git-fixes).
- smb3: display debug information better for encryption (bsc#1193629).
- smb3: fix problem remounting a share after shutdown (bsc#1193629).
- smb3: improve parallel reads of large files (bsc#1193629).
- smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629).
- smb3: move some common open context structs to smbfs_common (bsc#1193629).
- soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes).
- soundwire: qcom: gracefully handle too many ports in DT (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes).
- spi: qup: Request DMA before enabling clocks (git-fixes).
- spi: spi-imx: fix MX51_ECSPI_* macros when cs &gt; 3 (git-fixes).
- spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes).
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes).
- struct ci_hdrc: hide new member at end (git-fixes).
- supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931)
- supported.conf: mark mana_ib supported
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes).
- test_firmware: Use kstrtobool() instead of strtobool() (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes).
- test_firmware: prevent race conditions by a correct implementation of locking (git-fixes).
- thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165).
- thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165).
- thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes).
- tls: Skip tls_append_frag on zero copy size (git-fixes).
- tools/virtio: compile with -pthread (git-fixes).
- tools/virtio: fix the vringh test for virtio ring changes (git-fixes).
- tools/virtio: fix virtio_test execution (git-fixes).
- tools/virtio: initialize spinlocks in vring_test.c (git-fixes).
- tools: bpftool: Remove invalid \' json escape (git-fixes).
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes).
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes).
- tracing/histograms: Allow variables to have some modifiers (git-fixes).
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes).
- tracing: Fix permissions for the buffer_percent file (git-fixes).
- tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350).
- tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes).
- tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes).
- usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes).
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes).
- usb: chipidea: core: fix possible concurrent when switch role (git-fixes).
- usb: dwc3: Align DWC3_EP_* flag macros (git-fixes).
- usb: dwc3: Fix a repeated word checkpatch warning (git-fixes).
- usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes).
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes).
- usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes).
- usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes).
- usb: dwc3: gadget: Delay issuing End Transfer (git-fixes).
- usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes).
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes).
- usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes).
- usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes).
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes).
- usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes).
- usb: gadget: u_ether: Fix host MAC address case (git-fixes).
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes).
- usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes).
- usb: typec: tcpm: fix multiple times discover svids error (git-fixes).
- usb: typec: ucsi: Fix command cancellation (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes).
- vdpa: fix use-after-free on vp_vdpa_remove (git-fixes).
- vhost/net: Clear the pending messages when the backend is removed (git-fixes).
- virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes).
- virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes).
- virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes).
- virtio_net: split free_unused_bufs() (git-fixes).
- virtio_net: suppress cpu stall when free_unused_bufs (git-fixes).
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes).
- wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes).
- wifi: ath: Silence memcpy run-time false positive warning (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes).
- wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes).
- wifi: iwlwifi: fw: fix DBGI dump (git-fixes).
- wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes).
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes).
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes).
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes).
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes).
- wifi: mac80211: fix min center freq offset tracing (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: mt76: add flexible polling wait-interval support (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes).
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes).
- wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes).
- wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes).
- wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes).
- workqueue: Fix hung time report of worker pools (bsc#1211044).
- workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044).
- workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044).
- workqueue: Warn when a new worker could not be created (bsc#1211044).
- workqueue: Warn when a rescuer could not be created (bsc#1211044).
- x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes).
- x86/MCE/AMD: Use an u64 for bank_map (git-fixes).
- x86/alternative: Make debug-alternative selective (bsc#1206578).
- x86/alternative: Report missing return thunk details (git-fixes).
- x86/alternative: Support relocations in alternatives (bsc#1206578).
- x86/amd: Use IBPB for firmware calls (git-fixes).
- x86/boot: Skip realmode init code when running as Xen PV guest  (git-fixes).
- x86/bugs: Add &quot;unknown&quot; reporting for MMIO Stale Data (git-fixes).
- x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes).
- x86/bugs: Warn when &quot;ibrs&quot; mitigation is selected on Enhanced IBRS parts (git-fixes).
- x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes).
- x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes).
- x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes).
- x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes).
- x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205).
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes).
- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- x86/fpu: Mark init functions __init (bsc#1212448).
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448).
- x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448).
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes).
- x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes).
- x86/init: Initialize signal frame size late (bsc#1212448).
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes).
- x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578).
- x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes).
- x86/microcode/AMD: Fix mixed steppings support (git-fixes).
- x86/microcode/AMD: Track patch allocation size explicitly (git-fixes).
- x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes).
- x86/microcode: Add explicit CPU vendor dependency (git-fixes).
- x86/microcode: Adjust late loading result reporting message (git-fixes).
- x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes).
- x86/microcode: Rip out the OLD_INTERFACE (git-fixes).
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes).
- x86/mm: Use proper mask when setting PUD mapping (git-fixes).
- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- x86/nospec: Unwreck the RSB stuffing (git-fixes).
- x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes).
- x86/pat: Fix x86_has_pat_wp() (git-fixes).
- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes).
- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes).
- x86/signal: Fix the value returned by strict_sas_size() (git-fixes).
- x86/speculation/mmio: Print SMT warning (git-fixes).
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes).
- x86/static_call: Serialize __static_call_fixup() properly (git-fixes).
- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- x86/topology: Fix duplicated core ID within a package (git-fixes).
- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- x86: Fix return value of __setup handlers (git-fixes).
- x86: drop bogus &quot;cc&quot; clobber from __try_cmpxchg_user_asm() (git-fixes).
- xen/netback: do not do grant copy across page boundary (git-fixes).
- xen/netback: use same error messages for same errors (git-fixes).
- xfs: fix rm_offset flag handling in rmap keys (git-fixes).
- xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes).
- xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes).
- xhci: Fix incorrect tracking of free space on transfer rings (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.37.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.37.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.37.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.37.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.37.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.37.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2942</id>
    <title>Recommended update for gtk3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690182699"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211952" id="1211952" title="nautilus dumps core in gtk_widget_get_sensitive() after bad password input" type="bugzilla"/>
    </references>
    <description>This update for gtk3 fixes the following issues:

- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
</description>
    <pkglist>
      <collection>
        <package name="gtk3" epoch="0" version="3.24.34" release="150400.3.6.1" arch="src" src="src/gtk3-3.24.34-150400.3.6.1.src.rpm">
          <filename>gtk3-3.24.34-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="gtk3-data" epoch="0" version="3.24.34" release="150400.3.6.1" arch="noarch" src="noarch/gtk3-data-3.24.34-150400.3.6.1.noarch.rpm">
          <filename>gtk3-data-3.24.34-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-schema" epoch="0" version="3.24.34" release="150400.3.6.1" arch="noarch" src="noarch/gtk3-schema-3.24.34-150400.3.6.1.noarch.rpm">
          <filename>gtk3-schema-3.24.34-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.6.1" arch="x86_64" src="x86_64/gtk3-tools-3.24.34-150400.3.6.1.x86_64.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="x86_64" src="x86_64/libgtk-3-0-3.24.34-150400.3.6.1.x86_64.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="x86_64" src="x86_64/typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.x86_64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.6.1" arch="aarch64" src="aarch64/gtk3-tools-3.24.34-150400.3.6.1.aarch64.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="aarch64" src="aarch64/libgtk-3-0-3.24.34-150400.3.6.1.aarch64.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="aarch64" src="aarch64/typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.aarch64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2632</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687774605"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211588" id="1211588" title="SUSEConnect keepalive timer gets disabled after update to suseconnect-ng" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.1.0~git2.f42b4b2a060e:
- Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="src" src="src/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.src.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="x86_64" src="x86_64/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.x86_64.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="aarch64" src="aarch64/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.aarch64.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2604</id>
    <title>Security update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687420144"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212143" id="1212143" title="VUL-0: EMBARGOED: CVE-2023-20867: open-vm-tools: Authentication Bypass vulnerability in the vgauth module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210695" id="1210695" title="open-vm-tools fails to build against grpc 1.54" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20867" id="CVE-2023-20867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20867" type="cve"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).

Bug fixes:

- Fixed build problem with grpc 1.54 (bsc#1210695).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.2.0" release="150300.29.1" arch="x86_64" src="x86_64/libvmtools0-12.2.0-150300.29.1.x86_64.rpm">
          <filename>libvmtools0-12.2.0-150300.29.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.29.1" arch="src" src="src/open-vm-tools-12.2.0-150300.29.1.src.rpm">
          <filename>open-vm-tools-12.2.0-150300.29.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.29.1" arch="x86_64" src="x86_64/open-vm-tools-12.2.0-150300.29.1.x86_64.rpm">
          <filename>open-vm-tools-12.2.0-150300.29.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2614</id>
    <title>Security update for libX11</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687435377"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212102" id="1212102" title="VUL-0: EMBARGOED: CVE-2023-3138: libX11,xorg-libX11: buffer overwrite in src/InitExt.c XESetEventToWire" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138" id="CVE-2023-3138" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138" type="cve"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- CVE-2023-3138: Fixed buffer overflows in InitExt.c (bsc#1212102).
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.30.1" arch="src" src="src/libX11-1.6.5-150000.3.30.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.30.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.30.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.30.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.30.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.30.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.30.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.30.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.30.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.30.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.30.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.30.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.30.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.30.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2616</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687445297"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34241" id="CVE-2023-34241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34241" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212230" id="1212230" title="VUL-0: EMBARGOED: CVE-2023-34241: cups: use-after-free bug that impacts the entire cupsd process" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.46.1" arch="src" src="src/cups-2.2.7-150000.3.46.1.src.rpm">
          <filename>cups-2.2.7-150000.3.46.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.46.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.46.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.46.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.46.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.46.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.46.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.46.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.46.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.46.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.46.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.46.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2994</id>
    <title>Recommended update for nfs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690433154"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209859" id="1209859" title="rpc.nfsd man page error for new -S option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200710" id="1200710" title="dracut-initqueue[581]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1157881" id="1157881" title="mount.nfs improve error reporting: &quot;Connection *WHERE*TO* timed out&quot;" type="bugzilla"/>
    </references>
    <description>This update for nfs-utils fixes the following issues:

- SLE15-SP5 and earlier don't use /usr/lib/modprobe.d (bsc#1200710)
- Avoid unhelpful warnings (bsc#1157881)
- Fix rpc.nfsd man pages (bsc#1209859)
- Allow scope to be set in sysconfig: NFSD_SCOPE
</description>
    <pkglist>
      <collection>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.37.1" arch="x86_64" src="x86_64/nfs-client-2.1.1-150100.10.37.1.x86_64.rpm">
          <filename>nfs-client-2.1.1-150100.10.37.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.37.1" arch="x86_64" src="x86_64/nfs-kernel-server-2.1.1-150100.10.37.1.x86_64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.37.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-utils" epoch="0" version="2.1.1" release="150100.10.37.1" arch="src" src="src/nfs-utils-2.1.1-150100.10.37.1.src.rpm">
          <filename>nfs-utils-2.1.1-150100.10.37.1.src.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.37.1" arch="aarch64" src="aarch64/nfs-client-2.1.1-150100.10.37.1.aarch64.rpm">
          <filename>nfs-client-2.1.1-150100.10.37.1.aarch64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.37.1" arch="aarch64" src="aarch64/nfs-kernel-server-2.1.1-150100.10.37.1.aarch64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2605</id>
    <title>Security update for bluez</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687420196"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210398" id="1210398" title="VUL-0: CVE-2023-27349: bluez: stack overflow during AVRCP event handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27349" id="CVE-2023-27349" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27349" type="cve"/>
    </references>
    <description>This update for bluez fixes the following issues:

- CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.62" release="150400.4.13.1" arch="src" src="src/bluez-5.62-150400.4.13.1.src.rpm">
          <filename>bluez-5.62-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.13.1" arch="x86_64" src="x86_64/libbluetooth3-5.62-150400.4.13.1.x86_64.rpm">
          <filename>libbluetooth3-5.62-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.13.1" arch="s390x" src="s390x/libbluetooth3-5.62-150400.4.13.1.s390x.rpm">
          <filename>libbluetooth3-5.62-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.13.1" arch="aarch64" src="aarch64/libbluetooth3-5.62-150400.4.13.1.aarch64.rpm">
          <filename>libbluetooth3-5.62-150400.4.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2851</id>
    <title>Recommended update for rdma-core</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689580801"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212069" id="1212069" title="Duplicate of Bug 1204271 - Spectrum Scale may exhibit a restart of the Spectrum Scale daemon or a failure to mount a filesystem when configured with RDMA (rdma-core)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204271" id="1204271" title="Spectrum Scale may exhibit a restart of the Spectrum Scale daemon or a failure to mount a filesystem when configured with RDMA (rdma-core)" type="bugzilla"/>
    </references>
    <description>This update for rdma-core fixes the following issues:

- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
</description>
    <pkglist>
      <collection>
        <package name="libefa1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libefa1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libefa1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libibverbs" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libibverbs-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libibverbs-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libibverbs1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libibverbs1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libibverbs1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmlx4-1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libmlx4-1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libmlx4-1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmlx5-1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libmlx5-1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libmlx5-1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="librdmacm1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/librdmacm1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>librdmacm1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="src" src="src/rdma-core-38.3-150400.6.3.1.src.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.src.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/rdma-core-38.3-150400.6.3.1.x86_64.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libefa1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libefa1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libefa1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libibverbs" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libibverbs-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libibverbs-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libibverbs1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libibverbs1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libibverbs1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libmlx4-1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libmlx4-1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libmlx4-1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libmlx5-1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libmlx5-1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libmlx5-1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="librdmacm1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/librdmacm1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>librdmacm1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/rdma-core-38.3-150400.6.3.1.aarch64.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2550</id>
    <title>Recommended update for autoyast2, libsolv, libyui, libzypp, yast2-pkg-bindings</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687189913"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209565" id="1209565" title="L3: Bad upgrade from 12 SP5 to 15 SP3: rpm database problem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202234" id="1202234" title="Release packages of addon products are not installed by autoyast" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="L3: SUSE Manager reposync has started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212189" id="1212189" title="NVIDIA Repository Fails: Curl error 92 - HTTP/2 stream 5 was not closed cleanly: PROTOCOL_ERROR (err 1)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191112" id="1191112" title="When navigating through YaST module screens the next screen appears, but its content is not loaded" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199020" id="1199020" title="Wrong resolution at Installation / Window background not cleared" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198097" id="1198097" title="Unlocalised Text on the Style Sheet Selections dialog on Yast" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211354" id="1211354" title="YaST (ncurses) closes &quot;User and Group Management&quot; immediately when opened" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210591" id="1210591" title="Loading Icons from Full Paths always Fails" type="bugzilla"/>
    </references>
    <description>
This update for autoyast2, libsolv, libyui, libzypp, yast2-pkg-bindings ships the update stack to
the INSTALLER self-update channel.

yast2-pkg-bindings:

- Added a new option for rebuilding the RPM database (--rebuilddb) (bsc#1209565)

autoyast2:

- Selected products are not installed after resetting the package manager internally (bsc#1202234)

libyui:

- Prevent buffer overflow when drawing very wide labels in ncurses (bsc#1211354)
- Fixed loading icons from an absolute path (bsc#1210591)
- Fix for main window stacking order to avoid unintentional transparency (bsc#1199020, bsc#1191112)
- Force messages from .ui file through our translation mechanism (bsc#1198097)
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.24" release="150400.3.8.1" arch="src" src="src/libsolv-0.7.24-150400.3.8.1.src.rpm">
          <filename>libsolv-0.7.24-150400.3.8.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.8.1" arch="x86_64" src="x86_64/libsolv-tools-0.7.24-150400.3.8.1.x86_64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck-devel" epoch="0" version="1.1.16" release="150400.3.4.1" arch="x86_64" src="x86_64/libzck-devel-1.1.16-150400.3.4.1.x86_64.rpm">
          <filename>libzck-devel-1.1.16-150400.3.4.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.4.1" arch="x86_64" src="x86_64/libzck1-1.1.16-150400.3.4.1.x86_64.rpm">
          <filename>libzck1-1.1.16-150400.3.4.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="src" src="src/libzypp-17.31.13-150400.3.32.1.src.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="x86_64" src="x86_64/libzypp-17.31.13-150400.3.32.1.x86_64.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zchunk" epoch="0" version="1.1.16" release="150400.3.4.1" arch="src" src="src/zchunk-1.1.16-150400.3.4.1.src.rpm">
          <filename>zchunk-1.1.16-150400.3.4.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zchunk" epoch="0" version="1.1.16" release="150400.3.4.1" arch="x86_64" src="x86_64/zchunk-1.1.16-150400.3.4.1.x86_64.rpm">
          <filename>zchunk-1.1.16-150400.3.4.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.8.1" arch="aarch64" src="aarch64/libsolv-tools-0.7.24-150400.3.8.1.aarch64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.8.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck-devel" epoch="0" version="1.1.16" release="150400.3.4.1" arch="aarch64" src="aarch64/libzck-devel-1.1.16-150400.3.4.1.aarch64.rpm">
          <filename>libzck-devel-1.1.16-150400.3.4.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.4.1" arch="aarch64" src="aarch64/libzck1-1.1.16-150400.3.4.1.aarch64.rpm">
          <filename>libzck1-1.1.16-150400.3.4.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="aarch64" src="aarch64/libzypp-17.31.13-150400.3.32.1.aarch64.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zchunk" epoch="0" version="1.1.16" release="150400.3.4.1" arch="aarch64" src="aarch64/zchunk-1.1.16-150400.3.4.1.aarch64.rpm">
          <filename>zchunk-1.1.16-150400.3.4.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2847</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689576074"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210004" id="1210004" title="Azure: &quot;aureport&quot; shows &quot;sun_path len too short&quot; after upgrading to SLE 15 SP4 - SFSC 00559155 - ref:_00D1igLOd._5005qM1owu:ref" type="bugzilla"/>
    </references>
    <description>This update for audit fixes the following issues:

- Check for AF_UNIX unnamed sockets (bsc#1210004)
- Enable livepatching on main library on x86_64
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="src" src="src/audit-3.0.6-150400.4.10.1.src.rpm">
          <filename>audit-3.0.6-150400.4.10.1.src.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.10.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.10.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.10.1.src.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/libaudit1-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>libaudit1-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/libauparse0-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>libauparse0-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/libaudit1-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>libaudit1-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/libauparse0-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>libauparse0-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2855</id>
    <title>Recommended update for openldap2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689604560"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212260" id="1212260" title="libldap2 crashes on ldap_sasl_bind_s" type="bugzilla"/>
    </references>
    <description>This update for openldap2 fixes the following issues:

- libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)
</description>
    <pkglist>
      <collection>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="x86_64" src="x86_64/libldap-2_4-2-2.4.46-150200.14.17.1.x86_64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.17.1.x86_64.rpm</filename>
        </package>
        <package name="libldap-data" epoch="0" version="2.4.46" release="150200.14.17.1" arch="noarch" src="noarch/libldap-data-2.4.46-150200.14.17.1.noarch.rpm">
          <filename>libldap-data-2.4.46-150200.14.17.1.noarch.rpm</filename>
        </package>
        <package name="openldap2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="src" src="src/openldap2-2.4.46-150200.14.17.1.src.rpm">
          <filename>openldap2-2.4.46-150200.14.17.1.src.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="aarch64" src="aarch64/libldap-2_4-2-2.4.46-150200.14.17.1.aarch64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2866</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689671377"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681" id="CVE-2023-32681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211674" id="1211674" title="VUL-0: CVE-2023-32681: python-requests,python36-requests,python3-requests: Unintended leak of Proxy-Authorization header" type="bugzilla"/>
    </references>
    <description>This update for python-requests fixes the following issues:

- CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.24.0" release="150300.3.3.1" arch="src" src="src/python-requests-2.24.0-150300.3.3.1.src.rpm">
          <filename>python-requests-2.24.0-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.24.0" release="150300.3.3.1" arch="noarch" src="noarch/python3-requests-2.24.0-150300.3.3.1.noarch.rpm">
          <filename>python3-requests-2.24.0-150300.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2893</id>
    <title>Recommended update for wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689828259"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206798" id="1206798" title="Deprecate the %usrmerged macro" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206674" id="1206674" title="No network (wicked) after 23-12-2022 updates - bond change in kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211026" id="1211026" title="wicked failing with wpa-enterprise" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203300" id="1203300" title="vlan interfaces don't get IP addresses during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206447" id="1206447" title="wicked-nanny: possible use-after-free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194557" id="1194557" title="/var/run leftovers in wicked and/or netconfig" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-90" id="PED-90" title="https://jira.suse.com/browse/PED-90" type="jira"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Update to version 0.6.73
- Fix arp notify loop and burst sending (boo#1212806)
- Allow verify/notify counter and interval configuration
- Handle ENOBUFS sending errors (bsc#1203300)
- Improve environment variable handling
- Refactor firmware extension definition
- Enable, disable and revert cli commands
- Fix memory leaks, add array/list utils
- Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- Cleanup /var/run leftovers in extension scripts (bsc#1194557)
- Output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (bsc#1206674)
  - Add `wicked firmware` command to improve `ibft`,`nbft`,`redfish`
  firmware extension and interface handling.
- Improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- Fix use-after-free in debug mode (bsc#1206447)
- Replace transitional `%usrmerged` macro with regular
  version check (bsc#1206798)
- Improve to show `no-carrier` in ifstatus output
- Cleanup inclusions and update uapi header to 6.0
- Link mode nwords cleanup and new advertise mode names
- Enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="src" src="src/wicked-0.6.73-150400.3.8.1.src.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="x86_64" src="x86_64/wicked-0.6.73-150400.3.8.1.x86_64.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.73" release="150400.3.8.1" arch="x86_64" src="x86_64/wicked-service-0.6.73-150400.3.8.1.x86_64.rpm">
          <filename>wicked-service-0.6.73-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="aarch64" src="aarch64/wicked-0.6.73-150400.3.8.1.aarch64.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.73" release="150400.3.8.1" arch="aarch64" src="aarch64/wicked-service-0.6.73-150400.3.8.1.aarch64.rpm">
          <filename>wicked-service-0.6.73-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2564</id>
    <title>Recommended update for microos-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687340090"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211356" id="1211356" title="SLEMicro 5.3 kernel panic on reboot after kernel update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205011" id="1205011" title="Product Migration fails for SLE Micro 5.2 to 5.3" type="bugzilla"/>
    </references>
    <description>This update for microos-tools fixes the following issues:

- Update to version 2.18
- Add TMPDIR to tukit binddirs for Salt (bsc#1211356, bsc#1205011)
- 98selinux-microos: Add chroot as dependency
- Fix spelling error in warning
</description>
    <pkglist>
      <collection>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.7.1" arch="src" src="src/microos-tools-2.18-150400.3.7.1.src.rpm">
          <filename>microos-tools-2.18-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.7.1" arch="x86_64" src="x86_64/microos-tools-2.18-150400.3.7.1.x86_64.rpm">
          <filename>microos-tools-2.18-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.7.1" arch="aarch64" src="aarch64/microos-tools-2.18-150400.3.7.1.aarch64.rpm">
          <filename>microos-tools-2.18-150400.3.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2645</id>
    <title>Recommended update for snapper</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1687850762"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211459" id="1211459" title="[Leap 15.4][btrfs][snapper-cleanup], 'systemctl start snapper-cleanup' causes infinite message  'BTRFS warning (device vda2): qgroup rescan is already in progress' in syslog and causes 'yast2 lan' command hang" type="bugzilla"/>
    </references>
    <description>This update for snapper fixes the following issues:

- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
</description>
    <pkglist>
      <collection>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.6.1" arch="x86_64" src="x86_64/libsnapper5-0.8.16-150300.3.6.1.x86_64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="src" src="src/snapper-0.8.16-150300.3.6.1.src.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="x86_64" src="x86_64/snapper-0.8.16-150300.3.6.1.x86_64.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.6.1" arch="aarch64" src="aarch64/libsnapper5-0.8.16-150300.3.6.1.aarch64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="aarch64" src="aarch64/snapper-0.8.16-150300.3.6.1.aarch64.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2868</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689672986"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206346" id="1206346" title="go1.20 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="src" src="src/cni-0.7.1-150100.3.12.1.src.rpm">
          <filename>cni-0.7.1-150100.3.12.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.12.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.12.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2869</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689673201"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206346" id="1206346" title="go1.20 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.15.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.15.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.15.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2877</id>
    <title>Security update for dbus-1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689752637"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34969" id="CVE-2023-34969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34969" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212126" id="1212126" title="VUL-0: CVE-2023-34969: dbus-1: D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon" type="bugzilla"/>
    </references>
    <description>This update for dbus-1 fixes the following issues:

- CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).
</description>
    <pkglist>
      <collection>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="src" src="src/dbus-1-1.12.2-150400.18.8.1.src.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.src.rpm</filename>
        </package>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="x86_64" src="x86_64/dbus-1-1.12.2-150400.18.8.1.x86_64.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="src" src="src/dbus-1-x11-1.12.2-150400.18.8.1.src.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.src.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="x86_64" src="x86_64/dbus-1-x11-1.12.2-150400.18.8.1.x86_64.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.x86_64.rpm</filename>
        </package>
        <package name="libdbus-1-3" epoch="0" version="1.12.2" release="150400.18.8.1" arch="x86_64" src="x86_64/libdbus-1-3-1.12.2-150400.18.8.1.x86_64.rpm">
          <filename>libdbus-1-3-1.12.2-150400.18.8.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="aarch64" src="aarch64/dbus-1-1.12.2-150400.18.8.1.aarch64.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.aarch64.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="aarch64" src="aarch64/dbus-1-x11-1.12.2-150400.18.8.1.aarch64.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.aarch64.rpm</filename>
        </package>
        <package name="libdbus-1-3" epoch="0" version="1.12.2" release="150400.18.8.1" arch="aarch64" src="aarch64/libdbus-1-3-1.12.2-150400.18.8.1.aarch64.rpm">
          <filename>libdbus-1-3-1.12.2-150400.18.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2772</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688457647"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="libzypp started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211261" id="1211261" title="'zypper targetos' produces just an empty output line" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212222" id="1212222" title="libzypp fails to build against libproxy 0.5.x" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

libzypp was updated to version 17.31.14 (22):

- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- build: honor libproxy.pc's includedir (bsc#1212222)

zypper was updated to version 1.14.61:

- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="src" src="src/libzypp-17.31.14-150400.3.35.1.src.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="x86_64" src="x86_64/libzypp-17.31.14-150400.3.35.1.x86_64.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="src" src="src/zypper-1.14.61-150400.3.24.1.src.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="x86_64" src="x86_64/zypper-1.14.61-150400.3.24.1.x86_64.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.61" release="150400.3.24.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.61-150400.3.24.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.61-150400.3.24.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="aarch64" src="aarch64/libzypp-17.31.14-150400.3.35.1.aarch64.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="aarch64" src="aarch64/zypper-1.14.61-150400.3.24.1.aarch64.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2827</id>
    <title>Recommended update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689326908"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- Build also for modern python version (jsc#PED-68)
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.19.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.19.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="src" src="src/libxml2-2.9.14-150400.5.19.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.19.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.19.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.19.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.19.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.19.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.19.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.19.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.19.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.19.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.19.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.19.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.19.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.19.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.19.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.19.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2998</id>
    <title>Recommended update for libdb-4_8</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690440029"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1099695" id="1099695" title="Incomplete license tag in libdb-4_8" type="bugzilla"/>
    </references>
    <description>This update for libdb-4_8 fixes the following issues:

- Fix incomplete license tag (bsc#1099695)
</description>
    <pkglist>
      <collection>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.9.1" arch="x86_64" src="x86_64/db48-utils-4.8.30-150000.7.9.1.x86_64.rpm">
          <filename>db48-utils-4.8.30-150000.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="src" src="src/libdb-4_8-4.8.30-150000.7.9.1.src.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.src.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="x86_64" src="x86_64/libdb-4_8-4.8.30-150000.7.9.1.x86_64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.9.1" arch="aarch64" src="aarch64/db48-utils-4.8.30-150000.7.9.1.aarch64.rpm">
          <filename>db48-utils-4.8.30-150000.7.9.1.aarch64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="aarch64" src="aarch64/libdb-4_8-4.8.30-150000.7.9.1.aarch64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2767</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688412183"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212662" id="1212662" title="ldd cannot execute binary file" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.344.g3d5cd8fb
- Continue parsing if ldd prints &quot;cannot execute binary file&quot; (bsc#1212662)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="src" src="src/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.src.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="x86_64" src="x86_64/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="aarch64" src="aarch64/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2765</id>
    <title>Security update for libcap</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688409095"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211419" id="1211419" title="VUL-0: CVE-2023-2603: libcap: integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211418" id="1211418" title="VUL-0: CVE-2023-2602: libcap: improper memory release in libcap/psx/psx.c:__wrap_pthread_create()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2603" id="CVE-2023-2603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2602" id="CVE-2023-2602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2602" type="cve"/>
    </references>
    <description>This update for libcap fixes the following issues:

- CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).
- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).
</description>
    <pkglist>
      <collection>
        <package name="libcap" epoch="0" version="2.63" release="150400.3.3.1" arch="src" src="src/libcap-2.63-150400.3.3.1.src.rpm">
          <filename>libcap-2.63-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libcap2" epoch="0" version="2.63" release="150400.3.3.1" arch="x86_64" src="x86_64/libcap2-2.63-150400.3.3.1.x86_64.rpm">
          <filename>libcap2-2.63-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcap2" epoch="0" version="2.63" release="150400.3.3.1" arch="aarch64" src="aarch64/libcap2-2.63-150400.3.3.1.aarch64.rpm">
          <filename>libcap2-2.63-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2977</id>
    <title>Recommended update for wayland</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690357035"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2423" id="PED-2423" title="https://jira.suse.com/browse/PED-2423" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194190" id="1194190" title="GraphicsMagick crashes the entire GNOME session" type="bugzilla"/>
    </references>
    <description>This update for wayland fixes the following issues:

- Update to version 1.21 (PED-2423)
- New wl_pointer high-resolution scroll event, new convenience functions, collection of bug fixes
</description>
    <pkglist>
      <collection>
        <package name="libwayland-client0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-client0-1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-client0-1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-cursor0-1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-cursor0-1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-egl1-99~1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-egl1-99~1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-server0-1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-server0-1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="wayland" epoch="0" version="1.21.0" release="150400.3.6.1" arch="src" src="src/wayland-1.21.0-150400.3.6.1.src.rpm">
          <filename>wayland-1.21.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libwayland-client0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-client0-1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-client0-1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-cursor0-1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-cursor0-1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-egl1-99~1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-egl1-99~1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-server0-1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-server0-1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2800</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688967346"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212623" id="1212623" title="openssl s_client does not honor ocsp revocation status" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- Check the OCSP RESPONSE in openssl s_client command and terminate
  connection if a revoked certificate is found. [bsc#1212623]
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.45.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2788</id>
    <title>Recommended update for mozilla-nspr, mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688637125"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202118" id="1202118" title="Add Requires: libsoftokn3 to MozillaFirefox.spec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185116" id="1185116" title="merge back hmac files (was: upgrade of libopenssl1_1 and libopenssl1_1-hmac fails with FIPS selftest failure error)" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nspr was updated to version 4.35

* fixes for building with clang
* use the number of online processors for the
  PR_GetNumberOfProcessors() API on some platforms
* fix build on mips+musl libc
* Add support for the LoongArch 64-bit architecture

mozilla-nss was update to NSS 3.90:

* clang-format lib/freebl/stubs.c
* Add a constant time select function
* Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
* output early build errors by default
* Update the technical constraints for KamuSM
* Add BJCA Global Root CA1 and CA2 root certificates
* Enable default UBSan Checks
* Add explicit handling of zero length records
* Tidy up DTLS ACK Error Handling Path
* Refactor zero length record tests
* Fix compiler warning via correct assert
* run linux tests on nss-t/t-linux-xlarge-gcp
* In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
* Fix reading raw negative numbers
* Repairing unreachable code in clang built with gyp
* Integrate Vale Curve25519
* Removing unused flags for Hacl*
* Adding a better error message
* Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
* Fall back to the softokn when writing certificate trust
* FIPS-104-3 requires we restart post programmatically
* cmd/ecperf: fix dangling pointer warning on gcc 13
* Update ACVP dockerfile for compatibility with debian package changes
* Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
* Removed deprecated sprintf function and replaced with snprintf
* fix rst warnings in nss doc
* Fix incorrect pygment style
* Change GYP directive to apply across platforms
* Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag

- Merge the libfreebl3-hmac and libsoftokn3-hmac packages into the respective libraries. (bsc#1185116)

update to NSS 3.89.1

* Update the technical constraints for KamuSM.
* Add BJCA Global Root CA1 and CA2 root certificates.

update to NSS 3.89

* revert freebl/softoken RSA_MIN_MODULUS_BITS increase
* PR_STATIC_ASSERT is cursed
* Need to add policy control to keys lengths for signatures
* Fix unreachable code warning in fuzz builds
* Fix various compiler warnings in NSS
* Enable various compiler warnings for clang builds
* set PORT error after sftk_HMACCmp failure
* Need to add policy control to keys lengths for signatures
* remove data length assertion in sec_PKCS7Decrypt
* Make high tag number assertion failure an error
* CKM_SHA384_KEY_DERIVATION correction maximum key length from 284 to 384
* Tolerate certificate_authorities xtn in ClientHello
* Fix build failure on Windows
* migrate Win 2012 tasks to Azure
* fix title length in doc
* Add interop tests for HRR and PSK to GREASE suite
* Add presence/absence tests for TLS GREASE
* Correct addition of GREASE value to ALPN xtn
* CH extension permutation
* TLS GREASE (RFC8701)
* improve handling of unknown PKCS#12 safe bag types
* use a different treeherder symbol for each docker image build task
* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag
* build failure while implicitly casting SECStatus to PRUInt32

update to NSS 3.88.1

* improve handling of unknown PKCS#12 safe bag types

update to NSS 3.88

* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag.
* build failure while implicitly casting SECStatus to PRUInt32
* Add check for ClientHello SID max length
* Added EarlyData ALPN test support to BoGo shim
* ECH client - Discard resumption TLS &lt; 1.3 Session(IDs|Tickets) if ECH configs are setup
* On HRR skip PSK incompatible with negotiated ciphersuites hash algorithm
* ECH client: Send ech_required alert on server negotiating TLS 1.2. Fixed misleading Gtest, enabled corresponding BoGo test
* Added Bogo ECH rejection test support
* Added ECH 0Rtt support to BoGo shim
* RSA OAEP Wycheproof JSON
* RSA decrypt Wycheproof JSON
* ECDSA Wycheproof JSON
* ECDH Wycheproof JSON
* PKCS#1v1.5 wycheproof json
* Use X25519 wycheproof json
* Move scripts to python3
* Properly link FuzzingEngine for oss-fuzz.
* Extending RSA-PSS bltest test coverage (Adding SHA-256 and SHA-384)
* NSS needs to move off of DSA for integrity checks
* Add initial testing with ACVP vector sets using acvp-rust
* Don't clone libFuzzer, rely on clang instead

update to NSS 3.87

* NULL password encoding incorrect
* Fix rng stub signature for fuzzing builds
* Updating the compiler parsing for build
* Modification of supported compilers
* tstclnt crashes when accessing gnutls server without a user cert in the database.
* Add configuration option to enable source-based coverage sanitizer
* Update ECCKiila generated files.
* Add support for the LoongArch 64-bit architecture
* add checks for zero-length RSA modulus to avoid memory errors and failed assertions later
* Additional zero-length RSA modulus checks

update to NSS 3.86

* conscious language removal in NSS
* Set nssckbi version number to 2.60
* Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
* Remove Staat der Nederlanden EV Root CA from NSS
* Remove EC-ACC root cert from NSS
* Remove SwissSign Platinum CA - G2 from NSS
* Remove Network Solutions Certificate Authority
* compress docker image artifact with zstd
* Migrate nss from AWS to GCP
* Enable static builds in the CI
* Removing SAW docker from the NSS build system
* Initialising variables in the rsa blinding code
* Implementation of the double-signing of the message for ECDSA
* Adding exponent blinding for RSA.

update to NSS 3.85

* Modification of the primes.c and dhe-params.c in order to have better looking tables
* Update zlib in NSS to 1.2.13
* Skip building modutil and shlibsign when building in Firefox
* Mark _nss_version_c unused on clang-cl
* bmo#1795668 - Remove redundant variable definitions in lowhashtest
* Add note about python executable to build instructions.

update to NSS 3.84
* Bump minimum NSPR version to 4.35
* Add a flag to disable building libnssckbi.

update to NSS 3.83

* Remove set-but-unused variables from SEC_PKCS12DecoderValidateBags
* Set nssckbi version number to 2.58
* Add two SECOM root certificates to NSS
* Add two DigitalSign root certificates to NSS
* Remove Camerfirma Global Chambersign Root from NSS
* Added bug reference and description to disabled UnsolicitedServerNameAck bogo ECH test
* Removed skipping of ECH on equality of private and public server name
* Added comment and bug reference to ECHRandomHRRExtension bogo test
* Added Bogo shim client HRR test support. Fixed overwriting of CHInner.random on HRR
* Added check for server only sending ECH extension with retry configs
  in EncryptedExtensions and if not accepting ECH. Changed config setting
  behavior to skip configs with unsupported mandatory extensions instead
  of failing
* Added ECH client support to BoGo shim. Changed CHInner creation to
  skip TLS 1.2 only extensions to comply with BoGo
* Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs
* Update BoGo tests to recent BoringSSL version
* Bump minimum NSPR version to 4.34.1

update to NSS 3.82

* check for null template in sec_asn1{d,e}_push_state
* QuickDER: Forbid NULL tags with non-zero length
* Initialize local variables in TlsConnectTestBase::ConnectAndCheckCipherSuite
* Cast the result of GetProcAddress
* pk11wrap: Tighten certificate lookup based on PKCS #11 URI.

update to NSS 3.81

* Enable aarch64 hardware crypto support on OpenBSD
* make NSS_SecureMemcmp 0/1 valued
* Add no_application_protocol alert handler and test client error code is set
* Gracefully handle null nickname in CERT_GetCertNicknameWithValidity
* required for Firefox 104

- raised NSPR requirement to 4.34.1

- changing some Requires from (pre) to generic as (pre) is not sufficient (bsc#1202118)

update to NSS 3.80

* Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
* Add support for asynchronous client auth hooks.
* nss-policy-check: make unknown keyword check optional.
* GatherBuffer: Reduced plaintext buffer allocations
	  by allocating it on initialization. Replaced
	  redundant code with assert. Debug builds: Added
	  buffer freeing/allocation for each record.
* Mark 3.79 as an ESR release.
* Bump nssckbi version number for June.
* Remove Hellenic Academic 2011 Root.
* Add E-Tugra Roots.
* Add Certainly Roots.
* Add DigitCert Roots.
* Protect SFTKSlot needLogin with slotLock.
* Compare signature and signatureAlgorithm fields in legacy certificate verifier.
* Uninitialized value in cert_VerifyCertChainOld.
* Unchecked return code in sec_DecodeSigAlg.
* Uninitialized value in cert_ComputeCertType.
* Avoid data race on primary password change.
* Replace ppc64 dcbzl intrinisic.
* Allow LDFLAGS override in makefile builds.
</description>
    <pkglist>
      <collection>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="src" src="src/mozilla-nspr-4.35-150000.3.29.1.src.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.src.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="x86_64" src="x86_64/mozilla-nspr-4.35-150000.3.29.1.x86_64.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="aarch64" src="aarch64/mozilla-nspr-4.35-150000.3.29.1.aarch64.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2820</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689240077"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152489" id="1152489" title="[TRACKERBUG] git-fixes pile for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1160435" id="1160435" title="5.5 kernel-docs package build failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187829" id="1187829" title="L3 Question:  .rela.debug_info - size larger than .debug_info?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205758" id="1205758" title="VUL-0: CVE-2022-45885: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_frontend.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208410" id="1208410" title="[NetApp SLES15 SP5 Bug] multipathd hang seen on SAN-booted host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208600" id="1208600" title="VUL-0: CVE-2023-1077: kernel: type confusion in pick_next_rt_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209039" id="1209039" title="VUL-0: CVE-2023-1249: kernel: missing mmap_lock in fill_files_note that could possibly lead to a use after free in the coredump code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209367" id="1209367" title="PSP_CI: P10 Up-to 8% degradation using Unixbench 16 copy filecopy on SLES15SP4 SS1 compared to SLES15SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211299" id="1211299" title="LTP nfs08.sh (cache invalidation for directories) fails on NFS &gt;= v4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211346" id="1211346" title="Partner-L3: NULL pointer dereference in lpfc_dev_loss_tmo_callbk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211387" id="1211387" title="VUL-0: kernel: Use after free bug in imsttfb_probe due to lack of error-handling of init_imstt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211410" id="1211410" title="Weird &quot;vmalloc error&quot; kernel stack trace when lsof is executed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211449" id="1211449" title="VUL-1: kernel: Use after free bug in r592_remov due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211796" id="1211796" title="kernel modules not usrmerged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211852" id="1211852" title="Update Broadcom Emulex lpfc driver to 14.2.0.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212051" id="1212051" title="VUL-0: CVE-2023-3111: kernel: Use after free in prepare_to_relocate in fs/btrfs/relocation.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212129" id="1212129" title="VUL-0: CVE-2023-3141: kernel-source,kernel-source-azure,kernel-source-rt: kernel: Use after free bug in r592_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212154" id="1212154" title="VUL-0: CVE-2023-3161: kernel: fbcon: shift-out-of-bounds in fbcon_set_font()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212155" id="1212155" title="VUL-0: CVE-2023-21102: kernel: bypass of shadow stack protection due to a logic error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212158" id="1212158" title="kernel-docs missing top level chapter numbers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212265" id="1212265" title="VUL-0: CVE-2023-3212: kernel: NULL pointer dereference in gfs2_evict_inode() in fs/gfs2/super.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212350" id="1212350" title="SLE-15SP4 KOTD: Kernel warning during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212448" id="1212448" title="Backport of cleanup patches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212494" id="1212494" title="VUL-0: CVE-2023-35823: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212495" id="1212495" title="VUL-0: CVE-2023-35829: kernel-source-azure,kernel-source,kernel-source-rt: use after free in rkvdec_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212504" id="1212504" title="VUL-0: CVE-2023-35788: kernel: out-of-bounds write in net/sched/cls_flower.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212513" id="1212513" title="VUL-0: CVE-2023-35828: kernel: use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212540" id="1212540" title="ceph: fix use-after-free bug for inodes when flushing capsnaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212561" id="1212561" title="cgroup: always put cset in cgroup_css_set_put_fork" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212563" id="1212563" title="cgroup: fix missing cpus_read_{lock,unlock}() in  cgroup_transfer_tasks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212564" id="1212564" title="bpf: Fix UAF in task local storage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212592" id="1212592" title="s390/dasd: Use correct lock while counting channel queue length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212603" id="1212603" title="ISST: SLES15SP5: ritzlp57: LPM failed with HSCLA2CF and HSCL365C and LPAR crashed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212605" id="1212605" title="VUL-0: CVE-2023-3357: kernel-source,kernel-source-azure,kernel-source-rt: NULL Pointer Dereference in drivers/hid/amd-sfh-hid/amd_sfh_client.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212606" id="1212606" title="VUL-0: CVE-2023-3358: kernel-source-azure,kernel-source-rt,kernel-source: NULL Pointer Dereference in drivers/hid/intel-ish-hid/ishtp/dma-if.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212619" id="1212619" title="s390/pkey: zeroize key blobs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212701" id="1212701" title="9d2ccf00bddc powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212741" id="1212741" title="Missing crossreferences when building kernel-docs with python2 on SLE15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212835" id="1212835" title="make modules_install fails with kmod-30-4.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212838" id="1212838" title="VUL-0: CVE-2023-3389: kernel: use-after-free in io_uring subsystem can lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212842" id="1212842" title="VUL-0: CVE-2023-3090: kernel: heap out-of-bounds vulnerability in the ipvlan network driver could lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212861" id="1212861" title="signal/s390: Use force_sigsegv in default_trap_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212869" id="1212869" title="Regression: dom0: Bad FPU state detected at restore_fpregs_from_fpstate+0x42/0xa0, reinitializing FPU registers." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212892" id="1212892" title="s390/gmap: voluntarily schedule during key setting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" id="CVE-2023-3389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" id="CVE-2023-3090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" id="CVE-2023-3111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" id="CVE-2023-3212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" id="CVE-2023-3358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" id="CVE-2023-3357" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" id="CVE-2023-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" id="CVE-2023-1249" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35829" id="CVE-2023-35829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" id="CVE-2023-35788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" id="CVE-2023-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" id="CVE-2023-3161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" id="CVE-2023-21102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" id="CVE-2023-3141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" id="CVE-2023-1077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3931" id="PED-3931" title="https://jira.suse.com/browse/PED-3931" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19253" id="SLE-19253" title="https://jira.suse.com/browse/SLE-19253" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605).
- CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
- CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495).
- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
- CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).

The following non-security bugs were fixed:

- Drop dvb-core fix patch due to a bug (bsc#1205758).
- Enable kernel modules bttv bt878 and snd-bt878 (jsc#PED-3931).
- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- Fix usrmerge error (boo#1211796).
- Generalize kernel-doc build requirements.
- Get module prefix from kmod (bsc#1212835).
- Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes).
- Revert &quot;mtd: rawnand: arasan: Prevent an unsupported configuration&quot; (git-fixes).
- Revert &quot;net: phy: dp83867: perform soft reset and retain established link&quot; (git-fixes).
- Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
- Update the Mellanox/Nvidia mlx5_core driver (jsc#SLE-19253).
- acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes).
- affs: initialize fsdata in affs_truncate() (git-fixes).
- alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes).
- alsa: hda/realtek: Add &quot;Intel Reference board&quot; and &quot;NUC 13&quot; SSID in the ALC256 (git-fixes).
- alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes).
- alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes).
- alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes).
- alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes).
- alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes).
- alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes).
- alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes).
- alsa: oss: avoid missing-prototype warnings (git-fixes).
- alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes).
- alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes).
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes).
- arm64: Add missing Set/Way CMO encodings (git-fixes).
- arm64: Always load shadow stack pointer directly from the task struct (git-fixes)
- arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes)
- arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes)
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes)
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes).
- arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes)
- arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes).
- arm: dts: vexpress: add missing cache properties (git-fixes).
- asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes).
- asoc: dwc: limit the number of overrun messages (git-fixes).
- asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes).
- asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes).
- asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes).
- asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes).
- asoc: mediatek: mt8173: Fix irq error path (git-fixes).
- asoc: nau8824: Add quirk to active-high jack-detect (git-fixes).
- asoc: simple-card: Add missing of_node_put() in case of error (git-fixes).
- asoc: soc-pcm: test if a BE can be prepared (git-fixes).
- asoc: ssm2602: Add workaround for playback distortions (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work (git-fixes).
- binfmt_elf: Take the mmap lock when walking the VMA list (bsc#1209039 CVE-2023-1249).
- bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes).
- bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes).
- bluetooth: hci_qca: fix debugfs registration (git-fixes).
- bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes).
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes).
- bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes).
- bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes)
- bpf, arm64: Clear prog-&gt;jited_len along prog-&gt;jited (git-fixes)
- bpf, arm64: Feed byte-offset into bpf line info (git-fixes)
- bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes)
- bpf: Add extra path pointer check to d_path helper (git-fixes).
- bpf: Fix UAF in task local storage (bsc#1212564).
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (bsc#1212051 CVE-2023-3111).
- bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes).
- bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes).
- can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes).
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes).
- can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes).
- can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes).
- can: length: fix bitstuffing count (git-fixes).
- can: length: fix description of the RRS field (git-fixes).
- can: length: make header self contained (git-fixes).
- ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540).
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563).
- cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561).
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563).
- clk: Fix memory leak in devm_clk_notifier_register() (git-fixes).
- clk: cdce925: check return value of kasprintf() (git-fixes).
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes).
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes).
- clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes).
- clk: keystone: sci-clk: check return value of kasprintf() (git-fixes).
- clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes).
- clk: si5341: check return value of {devm_}kasprintf() (git-fixes).
- clk: si5341: free unused memory on probe failure (git-fixes).
- clk: si5341: return error if one synth clock registration fails (git-fixes).
- clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes).
- clk: ti: clkctrl: check return value of kasprintf() (git-fixes).
- clk: vc5: check memory returned by kasprintf() (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes).
- crypto: marvell/cesa - Fix type mismatch warning (git-fixes).
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes).
- dmaengine: pl330: rename _start to prevent build error (git-fixes).
- drivers: meson: secure-pwrc: always enable DMA domain (git-fixes).
- drm/amd/display: Add logging for display MALL refresh setting (git-fixes).
- drm/amd/display: Add minimal pipe split transition state (git-fixes).
- drm/amd/display: Add wrapper to call planes and stream update (git-fixes).
- drm/amd/display: Explicitly specify update type per plane info change (git-fixes).
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes).
- drm/amd/display: Use dc_update_planes_and_stream (git-fixes).
- drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- drm/amd/display: fix the system hang while disable PSR (git-fixes).
- drm/amd/pm: Fix power context allocation in SMU13 (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes).
- drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes).
- drm/amdgpu: release gpu full access after &quot;amdgpu_device_ip_late_init&quot; (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes).
- drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes).
- drm/ast: Fix ARM compatibility (git-fixes).
- drm/bridge: tc358768: always enable HS video mode (git-fixes).
- drm/bridge: tc358768: fix PLL parameters computation (git-fixes).
- drm/bridge: tc358768: fix PLL target frequency (git-fixes).
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes).
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes).
- drm/exynos: vidi: fix a wrong error return (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes).
- drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes).
- drm/i915/selftests: Add some missing error propagation (git-fixes).
- drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes).
- drm/i915/selftests: Stop using kthread_stop() (git-fixes).
- drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes).
- drm/i915: Use 18 fast wake AUX sync len (git-fixes).
- drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes).
- drm/msm/dp: Free resources after unregistering them (git-fixes).
- drm/msm/dpu: correct MERGE_3D length (git-fixes).
- drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes).
- drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes).
- drm/msm: Be more shouty if per-process pgtables are not working (git-fixes).
- drm/msm: Set max segment size earlier (git-fixes).
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (git-fixes).
- drm/nouveau: add nv_encoder pointer check for NULL (git-fixes).
- drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes).
- drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes).
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes).
- drm/radeon: fix possible division-by-zero errors (git-fixes).
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes).
- drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes).
- drm/vram-helper: fix function names in vram helper doc (git-fixes).
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes).
- dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes).
- eeprom: at24: also select REGMAP (git-fixes).
- elf: correct note name comment (git-fixes).
- ext4: unconditionally enable the i_version counter (bsc#1211299).
- extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes).
- extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472) Backporting changes: 	* replace refcount_read() with atomic_read()
- fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489)
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes).
- fs/jfs: fix shift exponent db_agl2size negative (git-fixes).
- fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes).
- fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes).
- fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes).
- gfs2: Do not deref jdesc in evict (bsc#1212265 CVE-2023-3212).
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes).
- hfs/hfsplus: use WARN_ON for sanity check (git-fixes).
- hfs: Fix OOB Write in hfs_asc2mac (git-fixes).
- hfs: fix OOB Read in __hfs_brec_find (git-fixes).
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes).
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes).
- hid: amd_sfh: Add missing check for dma_alloc_coherent (bsc#1212605 CVE-2023-3357).
- hid: google: add jewel USB id (git-fixes).
- hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes).
- hid: wacom: Add error check to wacom_parse_and_register() (git-fixes).
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes).
- hwrng: imx-rngc - fix the timeout for init and self check (git-fixes).
- hwrng: st - keep clock enabled while hwrng is registered (git-fixes).
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes).
- iavf: remove mask from iavf_irq_enable_queues() (git-fixes).
- ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- ib/isert: Fix dead lock in ib_isert (git-fixes)
- ib/isert: Fix incorrect release of isert connection (git-fixes)
- ib/isert: Fix possible list corruption in CMA handler (git-fixes)
- ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes)
- ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes)
- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604).
- ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes).
- ice: Do not double unplug aux on peer initiated reset (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: Fix XDP memory leak when NIC is brought up and down (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom() (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes).
- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253).
- igb: fix bit_shift to be in [1..8] range (git-fixes).
- igb: fix nvm.ops.read() error handling (git-fixes).
- igc: Clean the TX buffer and TX descriptor ring (git-fixes).
- igc: Fix possible system crash when loading module (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes).
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448).
- init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448).
- init: Provide arch_cpu_finalize_init() (bsc#1212448).
- init: Remove check_bugs() leftovers (bsc#1212448).
- input: adxl34x - do not hardcode interrupt trigger type (git-fixes).
- input: drv260x - fix typo in register value define (git-fixes).
- input: drv260x - remove unused .reg_defaults (git-fixes).
- input: drv260x - sleep between polling GO bit (git-fixes).
- input: fix open count when closing inhibited device (git-fixes).
- input: psmouse - fix OOB access in Elantech protocol (git-fixes).
- input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes).
- input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes).
- integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes).
- io_uring: hold uring mutex around poll removal (bsc#1212838 CVE-2023-3389).
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb (bsc#1212842 CVE-2023-3090).
- irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes).
- jfs: Fix fortify moan in symlink (git-fixes).
- kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi
- kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base.
- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- kprobe: reverse kp-&gt;flags when arm_kprobe failed (git-fixes).
- kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes).
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes).
- kprobes: Forbid probing on trampoline and BPF code areas (git-fixes).
- kprobes: Prohibit probes in gate area (git-fixes).
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes).
- kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes).
- kvm: arm64: Do not hypercall before EL2 init (git-fixes)
- kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes)
- kvm: arm64: Save PSTATE early on exit (git-fixes)
- kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes)
- lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852).
- lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852).
- lpfc: Clean up SLI-4 CQE status handling (bsc#1211852).
- lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852).
- lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852).
- lpfc: Enhance congestion statistics collection (bsc#1211852).
- lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346).
- lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852).
- lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852).
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes).
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes).
- media: cec: core: do not set last_initiator if tx in progress (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes).
- memory: brcmstb_dpfe: fix testing array offset after use (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes).
- misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes).
- misc: pci_endpoint_test: Re-init completion for every test (git-fixes).
- mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253).
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes).
- mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410).
- mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes).
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes).
- net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253).
- net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253).
- net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253).
- net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253).
- net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253).
- net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253).
- net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253).
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253).
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253).
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253).
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253).
- net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253).
- net/mlx5: Do not use already freed action pointer (jsc#SLE-19253).
- net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253).
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253).
- net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253).
- net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253).
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253).
- net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253).
- net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253).
- net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253).
- net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253).
- net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253).
- net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253).
- net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253).
- net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253).
- net/mlx5: Fix steering rules cleanup (jsc#SLE-19253).
- net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253).
- net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253).
- net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253).
- net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253).
- net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253).
- net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253).
- net/mlx5: SF, Drain health before removing device (jsc#SLE-19253).
- net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253).
- net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253).
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253).
- net/mlx5: add IFC bits for bypassing port select flow table (git-fixes)
- net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253).
- net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253).
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- net/mlx5: fs, fail conflicting actions (jsc#SLE-19253).
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253).
- net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253).
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253).
- net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253).
- net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253).
- net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253).
- net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253).
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253).
- net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253).
- net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253).
- net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253).
- net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253).
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253).
- net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253).
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253).
- net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253).
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253).
- net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253).
- net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253).
- net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253).
- net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253).
- net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253).
- net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253).
- net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253).
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253).
- net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253).
- net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253).
- net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253).
- net/net_failover: fix txq exceeding warning (git-fixes).
- net/sched: fix initialization order when updating chain 0 head (git-fixes).
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes).
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes).
- net/sched: tcindex: Do not use perfect hashing (bsc#1210335 CVE-2023-1829).
- net: ena: Account for the number of processed bytes in XDP (git-fixes).
- net: ena: Do not register memory info on XDP exchange (git-fixes).
- net: ena: Fix rx_copybreak value update (git-fixes).
- net: ena: Fix toeplitz initial hash value (git-fixes).
- net: ena: Set default value for RX interrupt moderation (git-fixes).
- net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes).
- net: ena: Use bitmask to indicate packet redirection (git-fixes).
- net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes).
- net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes).
- net: hns3: fix reset delay time to avoid configuration timeout (git-fixes).
- net: hns3: fix sending pfc frames after reset issue (git-fixes).
- net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes).
- net: mlx5: eliminate anonymous module_init &amp; module_exit (jsc#SLE-19253).
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes).
- nfp: only report pause frame configuration for physical device (git-fixes).
- nilfs2: fix buffer corruption due to concurrent device reads (git-fixes).
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes).
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes).
- nouveau: fix client work fence deletion race (git-fixes).
- nvme-core: fix dev_pm_qos memleak (git-fixes).
- nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes).
- nvme-core: fix memory leak in dhchap_secret_store (git-fixes).
- nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes).
- nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes).
- ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes).
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes).
- ocfs2: fix non-auto defrag path not working issue (git-fixes).
- octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes).
- octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes).
- octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes).
- octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes).
- pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes).
- pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes).
- pci: Release resource invalidated by coalescing (git-fixes).
- pci: cadence: Fix Gen2 Link Retraining process (git-fixes).
- pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes).
- pci: ftpci100: Release the clock resources (git-fixes).
- pci: pciehp: Cancel bringup sequence if card is not present (git-fixes).
- pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes).
- pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes).
- pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes).
- pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes).
- pci: rockchip: Set address alignment for endpoint mode (git-fixes).
- pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes).
- pci: rockchip: Write PCI Device ID to correct register (git-fixes).
- pci: vmd: Reset VMD config register between soft reboots (git-fixes).
- pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes).
- pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes).
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes).
- platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes).
- platform/x86: think-lmi: Correct NVME password handling (git-fixes).
- platform/x86: think-lmi: Correct System password interface (git-fixes).
- platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes).
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes).
- pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes).
- power: supply: Fix logic checking if system is running from battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: ab8500: Fix external_power_changed race (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race (git-fixes).
- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869).
- powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729).
- powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701).
- powerpc/purgatory: remove PGO flags (bsc#1194869).
- powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869).
- powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662).
- powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662).
- pstore/ram: Add check for kstrdup (git-fixes).
- qed/qede: Fix scheduling while atomic (git-fixes).
- radeon: avoid double free in ci_dpm_init() (git-fixes).
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes).
- rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- rdma/bnxt_re: Remove unnecessary checks (git-fixes)
- rdma/bnxt_re: Return directly without goto jumps (git-fixes)
- rdma/bnxt_re: Use unique names while registering interrupts (git-fixes)
- rdma/bnxt_re: wraparound mbox producer index (git-fixes)
- rdma/cma: Always set static rate to 0 for RoCE (git-fixes)
- rdma/hns: Fix hns_roce_table_get return value (git-fixes)
- rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes)
- rdma/mlx5: Fix affinity assignment (git-fixes)
- rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes)
- rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253).
- rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes)
- rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes)
- rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes)
- rdma/rtrs: Fix the last iu-&gt;buf leak in err path (git-fixes)
- rdma/rxe: Fix packet length checks (git-fixes)
- rdma/rxe: Fix ref count error in check_rkey() (git-fixes)
- rdma/rxe: Fix rxe_cq_post (git-fixes)
- rdma/rxe: Fix the error &quot;trying to register non-static key in rxe_cleanup_task&quot; (git-fixes)
- rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes)
- rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- rdma/rxe: Remove the unused variable obj (git-fixes)
- rdma/rxe: Removed unused name from rxe_task struct (git-fixes)
- rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes)
- rdma/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- regmap: Account for register length when chunking (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- regulator: Fix error checking for debugfs_create_dir (git-fixes).
- regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes).
- regulator: core: Streamline debugfs operations (git-fixes).
- regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes).
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- reiserfs: Add missing calls to reiserfs_security_free() (git-fixes).
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes).
- revert &quot;squashfs: harden sanity check in squashfs_read_xattr_id_table&quot; (git-fixes).
- rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE.
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes).
- s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592).
- s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892).
- s390/pkey: zeroize key blobs (git-fixes bsc#1212619).
- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes).
- scsi: stex: Fix gcc 13 warnings (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes).
- serial: atmel: do not enable IRQs prematurely (git-fixes).
- serial: lantiq: add missing interrupt ack (git-fixes).
- sfc: disable RXFCS and RXALL features by default (git-fixes).
- signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861).
- soc/fsl/qe: fix usb.c build errors (git-fixes).
- soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes).
- soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes).
- spi: dw: Round of n_bytes to power of 2 (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes).
- spi: lpspi: disable lpspi module irq in DMA mode (git-fixes).
- spi: qup: Request DMA before enabling clocks (git-fixes).
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes).
- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes).
- staging: octeon: delete my name from TODO contact (git-fixes).
- sunrpc: Clean up svc_deferred_class trace events (git-fixes).
- supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931)
- test_firmware: Use kstrtobool() instead of strtobool() (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes).
- test_firmware: prevent race conditions by a correct implementation of locking (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes).
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes).
- thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes).
- tls: Skip tls_append_frag on zero copy size (git-fixes).
- tools: bpftool: Remove invalid \' json escape (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- tracing/histograms: Allow variables to have some modifiers (git-fixes).
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes).
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes).
- tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350).
- tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes).
- tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes).
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: fix use-after-free on core driver unbind (git-fixes).
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes).
- usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes).
- usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes).
- usb: gadget: udc: fix NULL dereference in remove() (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes).
- usb: serial: option: add Quectel EM061KGL series (git-fixes).
- usb: typec: ucsi: Fix command cancellation (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
- vdpa/mlx5: Directly assign memory key (jsc#SLE-19253).
- vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253).
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253).
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253).
- vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes).
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: convert msecs to jiffies where needed (git-fixes).
- wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes).
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes).
- wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: cfg80211: rewrite merging of inherited elements (git-fixes).
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes).
- wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes).
- wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes).
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes).
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes).
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes).
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes).
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes).
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes).
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (git-fixes).
- x86/build: Avoid relocation information in final vmlinux (bsc#1187829).
- x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- x86/fpu: Mark init functions __init (bsc#1212448).
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448).
- x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448).
- x86/init: Initialize signal frame size late (bsc#1212448).
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes).
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes).
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes).
- x86/microcode: Print previous version of microcode after reload (git-fixes).
- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- x86/mm: Initialize text poking earlier (bsc#1212448).
- x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- x86/xen: fix secondary processor fpu initialization (bsc#1212869).
- xfs: fix rm_offset flag handling in rmap keys (git-fixes).
- xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.69.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.69.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.69.1.150400.24.31.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.69.1.150400.24.31.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.69.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.69.1.150400.24.31.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2882</id>
    <title>Security update for perl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689760269"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210999" id="1210999" title="VUL-0: CVE-2023-31484: perl: Perl's HTTP:Tiny has insecure TLS cert default, affecting CPAN.pm" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484" id="CVE-2023-31484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484" type="cve"/>
    </references>
    <description>This update for perl fixes the following issues:


  - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).
</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="src" src="src/perl-5.26.1-150300.17.14.1.src.rpm">
          <filename>perl-5.26.1-150300.17.14.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="x86_64" src="x86_64/perl-5.26.1-150300.17.14.1.x86_64.rpm">
          <filename>perl-5.26.1-150300.17.14.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.14.1" arch="x86_64" src="x86_64/perl-base-5.26.1-150300.17.14.1.x86_64.rpm">
          <filename>perl-base-5.26.1-150300.17.14.1.x86_64.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="aarch64" src="aarch64/perl-5.26.1-150300.17.14.1.aarch64.rpm">
          <filename>perl-5.26.1-150300.17.14.1.aarch64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.14.1" arch="aarch64" src="aarch64/perl-base-5.26.1-150300.17.14.1.aarch64.rpm">
          <filename>perl-base-5.26.1-150300.17.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2803</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1688998283"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187829" id="1187829" title="L3 Question:  .rela.debug_info - size larger than .debug_info?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212051" id="1212051" title="VUL-0: CVE-2023-3111: kernel: Use after free in prepare_to_relocate in fs/btrfs/relocation.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212265" id="1212265" title="VUL-0: CVE-2023-3212: kernel: NULL pointer dereference in gfs2_evict_inode() in fs/gfs2/super.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212603" id="1212603" title="ISST: SLES15SP5: ritzlp57: LPM failed with HSCLA2CF and HSCL365C and LPAR crashed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212605" id="1212605" title="VUL-0: CVE-2023-3357: kernel-source,kernel-source-azure,kernel-source-rt: NULL Pointer Dereference in drivers/hid/amd-sfh-hid/amd_sfh_client.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212606" id="1212606" title="VUL-0: CVE-2023-3358: kernel-source-azure,kernel-source-rt,kernel-source: NULL Pointer Dereference in drivers/hid/intel-ish-hid/ishtp/dma-if.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212619" id="1212619" title="s390/pkey: zeroize key blobs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212701" id="1212701" title="9d2ccf00bddc powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212741" id="1212741" title="Missing crossreferences when building kernel-docs with python2 on SLE15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212835" id="1212835" title="make modules_install fails with kmod-30-4.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212838" id="1212838" title="VUL-0: CVE-2023-3389: kernel: use-after-free in io_uring subsystem can lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212842" id="1212842" title="VUL-0: CVE-2023-3090: kernel: heap out-of-bounds vulnerability in the ipvlan network driver could lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212861" id="1212861" title="signal/s390: Use force_sigsegv in default_trap_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212869" id="1212869" title="Regression: dom0: Bad FPU state detected at restore_fpregs_from_fpstate+0x42/0xa0, reinitializing FPU registers." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212892" id="1212892" title="s390/gmap: voluntarily schedule during key setting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" id="CVE-2023-3389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" id="CVE-2023-3090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" id="CVE-2023-3111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" id="CVE-2023-3212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" id="CVE-2023-3358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" id="CVE-2023-3357" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-19253" id="SLE-19253" title="https://jira.suse.com/browse/SLE-19253" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605).

The following non-security bugs were fixed:

- Get module prefix from kmod (bsc#1212835).
- Revert &quot;mtd: rawnand: arasan: Prevent an unsupported configuration&quot; (git-fixes).
- Revert &quot;net: phy: dp83867: perform soft reset and retain established link&quot; (git-fixes).
- alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes).
- alsa: hda/realtek: Add &quot;Intel Reference board&quot; and &quot;NUC 13&quot; SSID in the ALC256 (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes).
- alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes).
- alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes).
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes).
- arm64: Add missing Set/Way CMO encodings (git-fixes).
- arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes)
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes)
- arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes).
- asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes).
- asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes).
- asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes).
- asoc: mediatek: mt8173: Fix irq error path (git-fixes).
- asoc: nau8824: Add quirk to active-high jack-detect (git-fixes).
- asoc: simple-card: Add missing of_node_put() in case of error (git-fixes).
- bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes).
- bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes).
- can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes).
- can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes).
- can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes).
- can: length: fix bitstuffing count (git-fixes).
- can: length: fix description of the RRS field (git-fixes).
- can: length: make header self contained (git-fixes).
- clk: Fix memory leak in devm_clk_notifier_register() (git-fixes).
- clk: cdce925: check return value of kasprintf() (git-fixes).
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes).
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes).
- clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes).
- clk: keystone: sci-clk: check return value of kasprintf() (git-fixes).
- clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes).
- clk: si5341: check return value of {devm_}kasprintf() (git-fixes).
- clk: si5341: free unused memory on probe failure (git-fixes).
- clk: si5341: return error if one synth clock registration fails (git-fixes).
- clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes).
- clk: ti: clkctrl: check return value of kasprintf() (git-fixes).
- clk: vc5: check memory returned by kasprintf() (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes).
- crypto: marvell/cesa - Fix type mismatch warning (git-fixes).
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes).
- drivers: meson: secure-pwrc: always enable DMA domain (git-fixes).
- drm/amd/display: Add logging for display MALL refresh setting (git-fixes).
- drm/amd/display: Add minimal pipe split transition state (git-fixes).
- drm/amd/display: Add wrapper to call planes and stream update (git-fixes).
- drm/amd/display: Explicitly specify update type per plane info change (git-fixes).
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes).
- drm/amd/display: Use dc_update_planes_and_stream (git-fixes).
- drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes).
- drm/amd/display: fix the system hang while disable PSR (git-fixes).
- drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes).
- drm/bridge: tc358768: always enable HS video mode (git-fixes).
- drm/bridge: tc358768: fix PLL parameters computation (git-fixes).
- drm/bridge: tc358768: fix PLL target frequency (git-fixes).
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes).
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes).
- drm/exynos: vidi: fix a wrong error return (git-fixes).
- drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes).
- drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes).
- drm/msm/dp: Free resources after unregistering them (git-fixes).
- drm/msm/dpu: correct MERGE_3D length (git-fixes).
- drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes).
- drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes).
- drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes).
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes).
- drm/radeon: fix possible division-by-zero errors (git-fixes).
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes).
- drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes).
- drm/vram-helper: fix function names in vram helper doc (git-fixes).
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes).
- elf: correct note name comment (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes).
- extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes).
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes).
- hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes).
- hid: wacom: Add error check to wacom_parse_and_register() (git-fixes).
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes).
- hwrng: imx-rngc - fix the timeout for init and self check (git-fixes).
- hwrng: st - keep clock enabled while hwrng is registered (git-fixes).
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes).
- ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- ib/isert: Fix dead lock in ib_isert (git-fixes)
- ib/isert: Fix incorrect release of isert connection (git-fixes)
- ib/isert: Fix possible list corruption in CMA handler (git-fixes)
- ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes)
- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604).
- ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes).
- ice: Do not double unplug aux on peer initiated reset (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: Fix XDP memory leak when NIC is brought up and down (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom() (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes).
- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253).
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes).
- input: adxl34x - do not hardcode interrupt trigger type (git-fixes).
- input: drv260x - fix typo in register value define (git-fixes).
- input: drv260x - remove unused .reg_defaults (git-fixes).
- input: drv260x - sleep between polling GO bit (git-fixes).
- input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes).
- integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes).
- irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes).
- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes).
- media: cec: core: do not set last_initiator if tx in progress (git-fixes).
- memory: brcmstb_dpfe: fix testing array offset after use (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes).
- misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes).
- misc: pci_endpoint_test: Re-init completion for every test (git-fixes).
- mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes).
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes).
- net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253).
- net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253).
- net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253).
- net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253).
- net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253).
- net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253).
- net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253).
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253).
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253).
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253).
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253).
- net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253).
- net/mlx5: Do not use already freed action pointer (jsc#SLE-19253).
- net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253).
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253).
- net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253).
- net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253).
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253).
- net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253).
- net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253).
- net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253).
- net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253).
- net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253).
- net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253).
- net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253).
- net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253).
- net/mlx5: Fix steering rules cleanup (jsc#SLE-19253).
- net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253).
- net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253).
- net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253).
- net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253).
- net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253).
- net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253).
- net/mlx5: SF, Drain health before removing device (jsc#SLE-19253).
- net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253).
- net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253).
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253).
- net/mlx5: add IFC bits for bypassing port select flow table (git-fixes)
- net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253).
- net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253).
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- net/mlx5: fs, fail conflicting actions (jsc#SLE-19253).
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253).
- net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253).
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253).
- net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253).
- net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253).
- net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253).
- net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253).
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253).
- net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253).
- net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253).
- net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253).
- net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253).
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253).
- net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253).
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253).
- net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253).
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253).
- net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253).
- net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253).
- net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253).
- net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253).
- net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253).
- net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253).
- net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253).
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253).
- net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253).
- net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253).
- net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253).
- net: mlx5: eliminate anonymous module_init &amp; module_exit (jsc#SLE-19253).
- nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes).
- nilfs2: fix buffer corruption due to concurrent device reads (git-fixes).
- nvme-core: fix dev_pm_qos memleak (git-fixes).
- nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes).
- nvme-core: fix memory leak in dhchap_secret_store (git-fixes).
- nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes).
- nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes).
- ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes).
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes).
- ocfs2: fix non-auto defrag path not working issue (git-fixes).
- pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes).
- pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes).
- pci: Release resource invalidated by coalescing (git-fixes).
- pci: cadence: Fix Gen2 Link Retraining process (git-fixes).
- pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes).
- pci: ftpci100: Release the clock resources (git-fixes).
- pci: pciehp: Cancel bringup sequence if card is not present (git-fixes).
- pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes).
- pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes).
- pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes).
- pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes).
- pci: rockchip: Set address alignment for endpoint mode (git-fixes).
- pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes).
- pci: rockchip: Write PCI Device ID to correct register (git-fixes).
- pci: vmd: Reset VMD config register between soft reboots (git-fixes).
- pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes).
- pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes).
- pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes).
- platform/x86: think-lmi: Correct NVME password handling (git-fixes).
- platform/x86: think-lmi: Correct System password interface (git-fixes).
- platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes).
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes).
- pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes).
- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701).
- powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869).
- pstore/ram: Add check for kstrdup (git-fixes).
- radeon: avoid double free in ci_dpm_init() (git-fixes).
- rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- rdma/bnxt_re: Remove unnecessary checks (git-fixes)
- rdma/bnxt_re: Return directly without goto jumps (git-fixes)
- rdma/bnxt_re: Use unique names while registering interrupts (git-fixes)
- rdma/bnxt_re: wraparound mbox producer index (git-fixes)
- rdma/cma: Always set static rate to 0 for RoCE (git-fixes)
- rdma/hns: Fix hns_roce_table_get return value (git-fixes)
- rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes)
- rdma/mlx5: Fix affinity assignment (git-fixes)
- rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes)
- rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253).
- rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes)
- rdma/rtrs: Fix the last iu-&gt;buf leak in err path (git-fixes)
- rdma/rxe: Fix packet length checks (git-fixes)
- rdma/rxe: Fix ref count error in check_rkey() (git-fixes)
- rdma/rxe: Fix rxe_cq_post (git-fixes)
- rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes)
- rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- rdma/rxe: Remove the unused variable obj (git-fixes)
- rdma/rxe: Removed unused name from rxe_task struct (git-fixes)
- rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes)
- rdma/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes).
- regulator: core: Streamline debugfs operations (git-fixes).
- regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes).
- rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE.
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes).
- s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892).
- s390/pkey: zeroize key blobs (git-fixes bsc#1212619).
- serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes).
- serial: atmel: do not enable IRQs prematurely (git-fixes).
- signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861).
- soc/fsl/qe: fix usb.c build errors (git-fixes).
- soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes).
- soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes).
- spi: dw: Round of n_bytes to power of 2 (git-fixes).
- spi: lpspi: disable lpspi module irq in DMA mode (git-fixes).
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes).
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes).
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes).
- usb: gadget: udc: fix NULL dereference in remove() (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835). 
- vdpa/mlx5: Directly assign memory key (jsc#SLE-19253).
- vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253).
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253).
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253).
- vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes).
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: convert msecs to jiffies where needed (git-fixes).
- wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes).
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes).
- wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes).
- wifi: cfg80211: rewrite merging of inherited elements (git-fixes).
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes).
- wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes).
- wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes).
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes).
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes).
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes).
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes).
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes).
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes).
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (git-fixes).
- x86/build: Avoid relocation information in final vmlinux (bsc#1187829).
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes).
- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- x86/xen: fix secondary processor fpu initialization (bsc#1212869).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.40.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.40.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.40.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.40.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.40.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2814</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689192436"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202118" id="1202118" title="Add Requires: libsoftokn3 to MozillaFirefox.spec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185116" id="1185116" title="merge back hmac files (was: upgrade of libopenssl1_1 and libopenssl1_1-hmac fails with FIPS selftest failure error)" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

mozilla-nss was updated to NSS 3.90:

* Add a constant time select function
* Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
* output early build errors by default
* Update the technical constraints for KamuSM
* Add BJCA Global Root CA1 and CA2 root certificates
* Enable default UBSan Checks
* Add explicit handling of zero length records
* Tidy up DTLS ACK Error Handling Path
* Refactor zero length record tests
* Fix compiler warning via correct assert
* run linux tests on nss-t/t-linux-xlarge-gcp
* In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
* Fix reading raw negative numbers
* Repairing unreachable code in clang built with gyp
* Integrate Vale Curve25519
* Removing unused flags for Hacl*
* Adding a better error message
* Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
* Fall back to the softokn when writing certificate trust
* FIPS-104-3 requires we restart post programmatically
* cmd/ecperf: fix dangling pointer warning on gcc 13
* Update ACVP dockerfile for compatibility with debian package changes
* Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
* Removed deprecated sprintf function and replaced with snprintf
* fix rst warnings in nss doc
* Fix incorrect pygment style
* Change GYP directive to apply across platforms
* Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag

- Merge the libfreebl3-hmac and libsoftokn3-hmac packages into the respective libraries. (bsc#1185116)

update to NSS 3.89.1

* Update the technical constraints for KamuSM.
* Add BJCA Global Root CA1 and CA2 root certificates.

update to NSS 3.89

* revert freebl/softoken RSA_MIN_MODULUS_BITS increase
* PR_STATIC_ASSERT is cursed
* Need to add policy control to keys lengths for signatures
* Fix unreachable code warning in fuzz builds
* Fix various compiler warnings in NSS
* Enable various compiler warnings for clang builds
* set PORT error after sftk_HMACCmp failure
* Need to add policy control to keys lengths for signatures
* remove data length assertion in sec_PKCS7Decrypt
* Make high tag number assertion failure an error
* CKM_SHA384_KEY_DERIVATION correction maximum key length from 284 to 384
* Tolerate certificate_authorities xtn in ClientHello
* Fix build failure on Windows
* migrate Win 2012 tasks to Azure
* fix title length in doc
* Add interop tests for HRR and PSK to GREASE suite
* Add presence/absence tests for TLS GREASE
* Correct addition of GREASE value to ALPN xtn
* CH extension permutation
* TLS GREASE (RFC8701)
* improve handling of unknown PKCS#12 safe bag types
* use a different treeherder symbol for each docker image build task
* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag
* build failure while implicitly casting SECStatus to PRUInt32

update to NSS 3.88.1

* improve handling of unknown PKCS#12 safe bag types

update to NSS 3.88

* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag.
* build failure while implicitly casting SECStatus to PRUInt32
* Add check for ClientHello SID max length
* Added EarlyData ALPN test support to BoGo shim
* ECH client - Discard resumption TLS &lt; 1.3 Session(IDs|Tickets) if ECH configs are setup
* On HRR skip PSK incompatible with negotiated ciphersuites hash algorithm
* ECH client: Send ech_required alert on server negotiating TLS 1.2. Fixed misleading Gtest, enabled corresponding BoGo test
* Added Bogo ECH rejection test support
* Added ECH 0Rtt support to BoGo shim
* RSA OAEP Wycheproof JSON
* RSA decrypt Wycheproof JSON
* ECDSA Wycheproof JSON
* ECDH Wycheproof JSON
* PKCS#1v1.5 wycheproof json
* Use X25519 wycheproof json
* Move scripts to python3
* Properly link FuzzingEngine for oss-fuzz.
* Extending RSA-PSS bltest test coverage (Adding SHA-256 and SHA-384)
* NSS needs to move off of DSA for integrity checks
* Add initial testing with ACVP vector sets using acvp-rust
* Don't clone libFuzzer, rely on clang instead

update to NSS 3.87

* NULL password encoding incorrect
* Fix rng stub signature for fuzzing builds
* Updating the compiler parsing for build
* Modification of supported compilers
* tstclnt crashes when accessing gnutls server without a user cert in the database.
* Add configuration option to enable source-based coverage sanitizer
* Update ECCKiila generated files.
* Add support for the LoongArch 64-bit architecture
* add checks for zero-length RSA modulus to avoid memory errors and failed assertions later
* Additional zero-length RSA modulus checks

update to NSS 3.86

* conscious language removal in NSS
* Set nssckbi version number to 2.60
* Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
* Remove Staat der Nederlanden EV Root CA from NSS
* Remove EC-ACC root cert from NSS
* Remove SwissSign Platinum CA - G2 from NSS
* Remove Network Solutions Certificate Authority
* compress docker image artifact with zstd
* Migrate nss from AWS to GCP
* Enable static builds in the CI
* Removing SAW docker from the NSS build system
* Initialising variables in the rsa blinding code
* Implementation of the double-signing of the message for ECDSA
* Adding exponent blinding for RSA.

update to NSS 3.85

* Modification of the primes.c and dhe-params.c in order to have better looking tables
* Update zlib in NSS to 1.2.13
* Skip building modutil and shlibsign when building in Firefox
* Use __STDC_VERSION__ rather than __STDC__ as a guard
* Remove redundant variable definitions in lowhashtest
* Add note about python executable to build instructions.

update to NSS 3.84

* Bump minimum NSPR version to 4.35
* Add a flag to disable building libnssckbi.

update to NSS 3.83

* Remove set-but-unused variables from SEC_PKCS12DecoderValidateBags
* Set nssckbi version number to 2.58
* Add two SECOM root certificates to NSS
* Add two DigitalSign root certificates to NSS
* Remove Camerfirma Global Chambersign Root from NSS
* Added bug reference and description to disabled UnsolicitedServerNameAck bogo ECH test
* Removed skipping of ECH on equality of private and public server name
* Added comment and bug reference to ECHRandomHRRExtension bogo test
* Added Bogo shim client HRR test support. Fixed overwriting of CHInner.random on HRR
* Added check for server only sending ECH extension
	with retry configs in EncryptedExtensions and if not
	accepting ECH. Changed config setting behavior to
	skip configs with unsupported mandatory extensions
	instead of failing
* Added ECH client support to BoGo shim. Changed
	CHInner creation to skip TLS 1.2 only extensions to
	comply with BoGo
* Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs
* Update BoGo tests to recent BoringSSL version
* Bump minimum NSPR version to 4.34.1

update to NSS 3.82

* check for null template in sec_asn1{d,e}_push_state
* QuickDER: Forbid NULL tags with non-zero length
* Initialize local variables in TlsConnectTestBase::ConnectAndCheckCipherSuite
* Cast the result of GetProcAddress
* pk11wrap: Tighten certificate lookup based on PKCS #11 URI.

update to NSS 3.81

* Enable aarch64 hardware crypto support on OpenBSD
* make NSS_SecureMemcmp 0/1 valued
* Add no_application_protocol alert handler and test client error code is set
* Gracefully handle null nickname in CERT_GetCertNicknameWithValidity
* required for Firefox 104

- raised NSPR requirement to 4.34.1

- changing some Requires from (pre) to generic as (pre) is not sufficient (bsc#1202118)

update to NSS 3.80

* Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
* Add support for asynchronous client auth hooks.
* nss-policy-check: make unknown keyword check optional.
* GatherBuffer: Reduced plaintext buffer allocations
	by allocating it on initialization. Replaced
	redundant code with assert. Debug builds: Added
	buffer freeing/allocation for each record.
* Mark 3.79 as an ESR release.
* Bump nssckbi version number for June.
* Remove Hellenic Academic 2011 Root.
* Add E-Tugra Roots.
* Add Certainly Roots.
* Add DigitCert Roots.
* Protect SFTKSlot needLogin with slotLock.
* Compare signature and signatureAlgorithm fields in legacy certificate verifier.
* Uninitialized value in cert_VerifyCertChainOld.
* Unchecked return code in sec_DecodeSigAlg.
* Uninitialized value in cert_ComputeCertType.
* Avoid data race on primary password change.
* Replace ppc64 dcbzl intrinisic.
* Allow LDFLAGS override in makefile builds.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/libfreebl3-3.90-150400.3.32.1.x86_64.rpm">
          <filename>libfreebl3-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/libsoftokn3-3.90-150400.3.32.1.x86_64.rpm">
          <filename>libsoftokn3-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="src" src="src/mozilla-nss-3.90-150400.3.32.1.src.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/mozilla-nss-3.90-150400.3.32.1.x86_64.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.90-150400.3.32.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.90-150400.3.32.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/libfreebl3-3.90-150400.3.32.1.aarch64.rpm">
          <filename>libfreebl3-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/libsoftokn3-3.90-150400.3.32.1.aarch64.rpm">
          <filename>libsoftokn3-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/mozilla-nss-3.90-150400.3.32.1.aarch64.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.90-150400.3.32.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.90-150400.3.32.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2891</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689794086"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213237" id="1213237" title="VUL-0: EMBARGOED: CVE-2023-32001: curl: fopen race condition" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32001" id="CVE-2023-32001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32001" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-32001: Fixed TOCTOU race condition (bsc#1213237).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="src" src="src/curl-8.0.1-150400.5.26.1.src.rpm">
          <filename>curl-8.0.1-150400.5.26.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.26.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.26.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.26.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.26.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.26.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.26.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.26.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.26.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.26.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2989</id>
    <title>Security update for conmon</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690382049"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209307" id="1209307" title="VUL-0: conmon: build against EOL go1.18" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208737" id="1208737" title="RT image - podman -  toolbox unable to start - internal libpod error" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

  conmon was updated to version 2.1.7:

  - Bumped go version to 1.19 (bsc#1209307).

  Bugfixes:

  - Fixed leaking symbolic links in the opt_socket_path directory.
  - Fixed cgroup oom issues (bsc#1208737).
  - Fixed OOM watcher for cgroupv2 `oom_kill` events.


</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="src" src="src/conmon-2.1.7-150400.3.11.1.src.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="x86_64" src="x86_64/conmon-2.1.7-150400.3.11.1.x86_64.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="aarch64" src="aarch64/conmon-2.1.7-150400.3.11.1.aarch64.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2930</id>
    <title>Security update for samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689927015"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2127" id="CVE-2022-2127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34967" id="CVE-2023-34967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34966" id="CVE-2023-34966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34968" id="CVE-2023-34968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34968" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213174" id="1213174" title="VUL-0: EMBARGOED: CVE-2022-2127: samba: Out-Of-Bounds read in winbind AUTH_CRAP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213173" id="1213173" title="VUL-0: EMBARGOED: CVE-2023-34966: samba: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213172" id="1213172" title="VUL-0: EMBARGOED: CVE-2023-34967: samba: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213171" id="1213171" title="VUL-0: EMBARGOED: CVE-2023-34968: samba: Spotlight server-side Share Path Disclosure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213384" id="1213384" title="Jul-2023 update of windows 10/11 breaks trust relationship" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

  - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174).
  - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173).
  - CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172).
  - CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171).


  Bugfixes:

  - Fixed trust relationship failure (bsc#1213384).
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="src" src="src/samba-4.15.13+git.663.9c654e06cdb-150400.3.28.1.src.rpm">
          <filename>samba-4.15.13+git.663.9c654e06cdb-150400.3.28.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="x86_64" src="x86_64/samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm">
          <filename>samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="x86_64" src="x86_64/samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm">
          <filename>samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="aarch64" src="aarch64/samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm">
          <filename>samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="aarch64" src="aarch64/samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm">
          <filename>samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2922</id>
    <title>Recommended update for libfido2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1689870857"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-4521" id="PED-4521" title="https://jira.suse.com/browse/PED-4521" type="jira"/>
    </references>
    <description>This update for libfido2 fixes the following issues:

- Use openssl 1.1 still on SUSE Linux Enterprise 15 to avoid pulling unneeded
  openssl-3 dependency. (jsc#PED-4521)
</description>
    <pkglist>
      <collection>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.6.1" arch="x86_64" src="x86_64/libfido2-1-1.13.0-150400.5.6.1.x86_64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="libfido2" epoch="0" version="1.13.0" release="150400.5.6.1" arch="src" src="src/libfido2-1.13.0-150400.5.6.1.src.rpm">
          <filename>libfido2-1.13.0-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="libfido2-udev" epoch="0" version="1.13.0" release="150400.5.6.1" arch="noarch" src="noarch/libfido2-udev-1.13.0-150400.5.6.1.noarch.rpm">
          <filename>libfido2-udev-1.13.0-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.6.1" arch="aarch64" src="aarch64/libfido2-1-1.13.0-150400.5.6.1.aarch64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2962</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690270511"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213487" id="1213487" title="VUL-0: CVE-2023-3446: openssl-1_1,openssl1,openssl-3,openssl-1_0_0: Excessive time spent checking DH keys and parameters" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446" id="CVE-2023-3446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.48.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2945</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690184306"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408" id="CVE-2023-38408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186673" id="1186673" title="CC: openssh is not always clearing keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213004" id="1213004" title="SSH session keys not deleted after session ends" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213008" id="1213008" title="CC: openssh is not always clearing keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209536" id="1209536" title="SLES15 SP5 S202302-1 - openssh missing or bad close() calls causes openssl-ibmca engine not directing work to accelerator cards (regression)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213504" id="1213504" title="CVE-2023-38408: openssh: Remote Code Execution in OpenSSH's forwarded ssh-agent" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2023-38408: Fixed a condition where specific libaries loaded via
  ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code
  execution via a forwarded agent socket if those libraries were present on the
  victim's system and if the agent was forwarded to an attacker-controlled
  system. [bsc#1213504, CVE-2023-38408]

- Close the right filedescriptor and also close fdh in read_hmac to avoid file
  descriptor leaks. [bsc#1209536]

- Attempts to mitigate instances of secrets lingering in memory after a session
  exits. [bsc#1186673, bsc#1213004, bsc#1213008]
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="src" src="src/openssh-8.4p1-150300.3.22.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2023-2995</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1690437876"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202900" id="1202900" title="transactional-update is missing the help for register option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205011" id="1205011" title="Product Migration fails for SLE Micro 5.2 to 5.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206947" id="1206947" title="cleanup-overlays should also delete empty folders in /var/lib/overlay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207366" id="1207366" title="[Build 20230120] openQA test fails in disk_boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205937" id="1205937" title="transactional-update mislabels some files when setting up temporary environment for installation when using SELinux" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202901" id="1202901" title="transactional-update register creates unnecessary snapshots" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-1441" id="PED-1441" title="https://jira.suse.com/browse/PED-1441" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1078" id="PED-1078" title="https://jira.suse.com/browse/PED-1078" type="jira"/>
    </references>
    <description>This update for transactional-update fixes the following issues:

- Version 4.1.3

  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements

- Version 4.1.2

  - Don't try to mount user mounts if they don't exist [bsc#1207366]

- Version 4.1.1

  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [bsc#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [bsc#1205937]
  - Clean up /var/lib/overlay more aggressively [bsc#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations

- Version 4.1.0

  - t-u: Add a &quot;setup-kdump&quot; command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for &quot;notify&quot; reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in &quot;The Transactional Update Guide&quot;
  - Fix incorrect manpage formatting
  - Remove leftover &quot;salt&quot; reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas

- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.3" release="150400.3.3.1" arch="noarch" src="noarch/dracut-transactional-update-4.1.3-150400.3.3.1.noarch.rpm">
          <filename>dracut-transactional-update-4.1.3-150400.3.3.1.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.3" release="150400.3.3.1" arch="x86_64" src="x86_64/libtukit4-4.1.3-150400.3.3.1.x86_64.rpm">
          <filename>libtukit4-4.1.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.3" release="150400.3.3.1" arch="src" src="src/transactional-update-4.1.3-150400.3.3.1.src.rpm">
          <filename>transactional-update-4.1.3-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.3" release="150400.3.3.1" arch="x86_64" src="x86_64/transactional-update-4.1.3-150400.3.3.1.x86_64.rpm">
          <filename>transactional-update-4.1.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.3" release="150400.3.3.1" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.3-150400.3.3.1.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.3-150400.3.3.1.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.3" release="150400.3.3.1" arch="x86_64" src="x86_64/tukit-4.1.3-150400.3.3.1.x86_64.rpm">
          <filename>tukit-4.1.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.3" release="150400.3.3.1" arch="x86_64" src="x86_64/tukitd-4.1.3-150400.3.3.1.x86_64.rpm">
          <filename>tukitd-4.1.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.3" release="150400.3.3.1" arch="aarch64" src="aarch64/libtukit4-4.1.3-150400.3.3.1.aarch64.rpm">
          <filename>libtukit4-4.1.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.3" release="150400.3.3.1" arch="aarch64" src="aarch64/transactional-update-4.1.3-150400.3.3.1.aarch64.rpm">
          <filename>transactional-update-4.1.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.3" release="150400.3.3.1" arch="aarch64" src="aarch64/tukit-4.1.3-150400.3.3.1.aarch64.rpm">
          <filename>tukit-4.1.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.3" release="150400.3.3.1" arch="aarch64" src="aarch64/tukitd-4.1.3-150400.3.3.1.aarch64.rpm">
          <filename>tukitd-4.1.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
