<updates>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1913</id>
    <title>Recommended update for libslirp, slirp4netns</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1681907035"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201551" id="1201551" title="libslirp header file version macro is broken" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2771" id="PED-2771" title="https://jira.suse.com/browse/PED-2771" type="jira"/>
    </references>
    <description>This update for libslirp and slirp4netns fixes the following issues:

libslirp was updated to version 4.7.0+44 (current git master):

* Fix vmstate regression
* Align outgoing packets
* Bump incoming packet alignment to 8 bytes
* vmstate: only enable when building under GNU C
* ncsitest: Fix build with msvc
* Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
* ncsi: Add Mellanox Get Mac Address handler
* slirp: Add out-of-band ethernet address
* ncsi: Add OEM command handler
* ncsi: Add basic test for Get Version ID response
* ncsi: Use response header for payload length
* ncsi: Pass command header to response handlers
* ncsi: Add Get Version ID command
* ncsi: Pass Slirp structure to response handlers
* slirp: Add manufacturer's ID

Release v4.7.0

* slirp: invoke client callback before creating timers
* pingtest: port to timer_new_opaque
* introduce timer_new_opaque callback
* introduce slirp_timer_new wrapper
* icmp6: make ndp_send_ra static
* socket: Handle ECONNABORTED from recv
* bootp: fix g_str_has_prefix warning/critical
* slirp: Don't duplicate packet in tcp_reass
* Rename insque/remque -&gt; slirp_[ins|rem]que
* mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
* Replace inet_ntoa() with safer inet_ntop()
* Add VMS_END marker
* bootp: add support for UEFI HTTP boot
* IPv6 DNS proxying support
* Add missing scope_id in caching
* socket: Move closesocket(so-&gt;s_aux) to sofree
* socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
* socket: Add s_aux field to struct socket for storing auxilliary socket
* socket: Initialize so_type in socreate
* socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
* Allow to disable internal DHCP server
* slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
* CI: run integration tests with slirp4netns
* socket: Check address family for Unix-to-inet accept translation
* socket: Add debug args for tcpx_listen (inet and Unix sockets)
* socket: Restore original definition of fhost
* socket: Move &lt;sys/un.h&gt; include to socket.h
* Support Unix sockets in hostfwd
* resolv: fix IPv6 resolution on Darwin
* Use the exact sockaddr size in getnameinfo call
* Initialize sin6_scope_id to zero
* slirp_socketpair_with_oob: Connect pair through 127.0.0.1
* resolv: fix memory leak when using libresolv
* pingtest: Add a trivial ping test
* icmp: Support falling back on trying a SOCK_RAW socket

Update to version 4.6.1+7:

* Haiku: proper path to resolv.conf for DNS server
* Fix for Haiku
* dhcp: Always send DHCP_OPT_LEN bytes in options

Update to version 4.6.1:

* Fix &quot;DHCP broken in libslirp v4.6.0&quot;

Update to version 4.6.0:

* udp: check upd_input buffer size
* tftp: introduce a header structure
* tftp: check tftp_input buffer size
* upd6: check udp6_input buffer size
* bootp: check bootp_input buffer size
* bootp: limit vendor-specific area to input packet memory buffer

Update to version 4.4.0:

* socket: consume empty packets
* slirp: check pkt_len before reading protocol header
* Add DNS resolving for iOS
* sosendoob: better document what urgc is used for
* TCPIPHDR_DELTA: Fix potential negative value
* udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
* icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
* udp, udp6, icmp: handle TTL value
* ip_stripoptions use memmove

slirp4netns was updated to 1.2.0:


* Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
* Explicitly support DHCP (#270)
* Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd

Update to version 1.1.11:

* Add --macaddress option to specify the MAC address of the tap interface.
* Updated the man page.

Update to version 1.1.8:

Update to 1.0.0:

* --enable-sandbox is now out of experimental
</description>
    <pkglist>
      <collection>
        <package name="libslirp" epoch="0" version="4.7.0+44" release="150300.15.2" arch="src" src="src/libslirp-4.7.0+44-150300.15.2.src.rpm">
          <filename>libslirp-4.7.0+44-150300.15.2.src.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="x86_64" src="x86_64/libslirp0-4.7.0+44-150300.15.2.x86_64.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.x86_64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="src" src="src/slirp4netns-1.2.0-150300.8.5.2.src.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.src.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="x86_64" src="x86_64/slirp4netns-1.2.0-150300.8.5.2.x86_64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.x86_64.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="s390x" src="s390x/libslirp0-4.7.0+44-150300.15.2.s390x.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.s390x.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="s390x" src="s390x/slirp4netns-1.2.0-150300.8.5.2.s390x.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.s390x.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="aarch64" src="aarch64/libslirp0-4.7.0+44-150300.15.2.aarch64.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.aarch64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="aarch64" src="aarch64/slirp4netns-1.2.0-150300.8.5.2.aarch64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-716</id>
    <title>Recommended update for rt-tests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667458"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-23995" id="SLE-23995" title="https://jira.suse.com/browse/SLE-23995" type="jira"/>
    </references>
    <description>This update for rt-tests fixes the following issues:

Version update from 2.2 to 2.4 (jsc#SLE-23995):

- Add aarch64 support for oslat
- Add the `--default-system` option in cyclictest
  This runs cyclictest without attempting any tuning. Power management is not suppressed so cyclictest measures the
  system as it is configured. This may result in worse realtime behaviour, but is sometimes what you are trying to
  measure.
- Fix parsing of affinity when there is a space
- Fixes in cyclicdeadline and deadline_test to prevent double mounting of cgroups
- Fixes in cyclictest to address memory access violation issues for verbose with no affinity mask
- hwlatdetect: Add option to specify cpumask
- Increase the buf size to 2048 when parse cpuinfo
- oslat: Print offending cpu number when above threshold
- rt-numa: ignore runtime cpumask if '-a CPULIST' is specified
- Significant clean-ups and fixes to hwlatdetect
- For the complete list of changes you can consult:
  * 2.4: https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
  * 2.3: https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Backport runtime fixes from upcomming release:
  * Fix threads being affined even when '-a' isn't set when using cyclictest
  * Remove arbitrary num of threads limits
  * Add error checking to connect and getsockname
  * Update hwlatdetect to integer division to prevent an error when calculating width, which assumes an integer
</description>
    <pkglist>
      <collection>
        <package name="rt-tests" epoch="0" version="2.4" release="150400.3.3.1" arch="src" src="src/rt-tests-2.4-150400.3.3.1.src.rpm">
          <filename>rt-tests-2.4-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="rt-tests" epoch="0" version="2.4" release="150400.3.3.1" arch="x86_64" src="x86_64/rt-tests-2.4-150400.3.3.1.x86_64.rpm">
          <filename>rt-tests-2.4-150400.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-658</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603553"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199853" id="1199853" title="Accelerated Networking fails when static ifcfg-eth1 file present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204549" id="1204549" title="cloud-netconfig does not support NetworkManager" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.7:
  + Overhaul policy routing setup
  + Support alias IPv4 ranges 
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update

- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path 
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-azure-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-azure-1.7-150000.25.8.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-ec2-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.7-150000.25.8.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-gce-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-gce-1.7-150000.25.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-335</id>
    <title>Recommended update for hyper-v</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691677601"/>
    <references/>
    <description>This update for hyper-v fixes the following issues:
    
   - Provide the latest version for SLE-15-SP4.
  </description>
    <pkglist>
      <collection>
        <package name="hyper-v" epoch="0" version="8" release="150200.14.8.1" arch="src" src="src/hyper-v-8-150200.14.8.1.src.rpm">
          <filename>hyper-v-8-150200.14.8.1.src.rpm</filename>
        </package>
        <package name="hyper-v" epoch="0" version="8" release="150200.14.8.1" arch="x86_64" src="x86_64/hyper-v-8-150200.14.8.1.x86_64.rpm">
          <filename>hyper-v-8-150200.14.8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-713</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603565"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update provides multiple new 4096 RSA keys for SUSE Linux Enterprise
15, SUSE Manager 4.2/4.3, Storage 7.1, SUSE Registry) that we will switch
to mid of 2023. (jsc#PED-2777)

- gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SUSE Linux Enterprise (RPM and repositories).
- gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserve key for SUSE Linux Enterprise (RPM and repositories).
- suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF packages.
- build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
  New RSA 4096 key for the SUSE registry registry.suse.com, installed as
  suse-container-key-2023.pem and suse-container-key-2023.asc
- suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
  New PTF container signing key for registry.suse.com/ptf/ space.
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.31.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.31.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.31.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.31.1" arch="src" src="src/suse-build-key-12.0-150000.8.31.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.31.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-622</id>
    <title>Recommended update for tcl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603574"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206623" id="1206623" title="Tcl/Tk test string-2.20.1 fails on big endian architectures" type="bugzilla"/>
    </references>
    <description>This update for tcl fixes the following issues:

- Fix string compare -length on big endian and improve string equal on little endian. (bsc#1206623)
</description>
    <pkglist>
      <collection>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="src" src="src/tcl-8.6.12-150300.14.9.1.src.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.src.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="x86_64" src="x86_64/tcl-8.6.12-150300.14.9.1.x86_64.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.x86_64.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="s390x" src="s390x/tcl-8.6.12-150300.14.9.1.s390x.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.s390x.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="aarch64" src="aarch64/tcl-8.6.12-150300.14.9.1.aarch64.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-756</id>
    <title>Recommended update for libappindicator</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603585"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207112" id="1207112" title="Make libappindicator3 provides compatible gtk3 symbol." type="bugzilla"/>
    </references>
    <description>This update for libappindicator fixes the following issues:

- Provide compatibility symbol required by Slack RPM  package (bsc#1207112)
</description>
    <pkglist>
      <collection>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="x86_64" src="x86_64/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libappindicator3" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="src" src="src/libappindicator3-12.10.1+bzr20170215-150200.3.3.1.src.rpm">
          <filename>libappindicator3-12.10.1+bzr20170215-150200.3.3.1.src.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="x86_64" src="x86_64/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="s390x" src="s390x/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="s390x" src="s390x/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="aarch64" src="aarch64/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="aarch64" src="aarch64/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1586</id>
    <title>Recommended update for nfs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603591"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200710" id="1200710" title="dracut-initqueue[581]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207022" id="1207022" title="kdump and fadump over nfs is failing with dracut error (CedarLake/mlx5_core/MOFED5.8)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203746" id="1203746" title="60s NFS timeout during cluster failover | __nfs4_reclaim_open_state: Lock reclaim failed!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206781" id="1206781" title="dracut-initqueue[744]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207843" id="1207843" title="nfs-utils.spec: systemd drop-in file conflicts with HA Resource Agent nfsserver" type="bugzilla"/>
    </references>
    <description>This update for nfs-utils fixes the following issues:

- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride with a drop-in with a later sequence number (bsc#1207843)
- Avoid modprobe errors when sysctl is not installed (bsc#1200710 bsc#1207022 bsc#1206781)
- Add &quot;-S scope&quot; option to rpc.nfsd to simplify fail-over cluster configuration (bsc#1203746)
</description>
    <pkglist>
      <collection>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="x86_64" src="x86_64/nfs-client-2.1.1-150100.10.32.1.x86_64.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="x86_64" src="x86_64/nfs-kernel-server-2.1.1-150100.10.32.1.x86_64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-utils" epoch="0" version="2.1.1" release="150100.10.32.1" arch="src" src="src/nfs-utils-2.1.1-150100.10.32.1.src.rpm">
          <filename>nfs-utils-2.1.1-150100.10.32.1.src.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="s390x" src="s390x/nfs-client-2.1.1-150100.10.32.1.s390x.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.s390x.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="s390x" src="s390x/nfs-kernel-server-2.1.1-150100.10.32.1.s390x.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.s390x.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="aarch64" src="aarch64/nfs-client-2.1.1-150100.10.32.1.aarch64.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.aarch64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="aarch64" src="aarch64/nfs-kernel-server-2.1.1-150100.10.32.1.aarch64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1670</id>
    <title>Recommended update for cpupower</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603605"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202890" id="1202890" title="Attempting to run turbostat on SLES15 SP4 gives &quot;no such file or directory&quot; error" type="bugzilla"/>
    </references>
    <description>This update for cpupower fixes the following issues:

- Replace error with a warning if perf is unavailable (bsc#1202890)
</description>
    <pkglist>
      <collection>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="src" src="src/cpupower-5.14-150400.3.3.1.src.rpm">
          <filename>cpupower-5.14-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="x86_64" src="x86_64/cpupower-5.14-150400.3.3.1.x86_64.rpm">
          <filename>cpupower-5.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="x86_64" src="x86_64/libcpupower0-5.14-150400.3.3.1.x86_64.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="s390x" src="s390x/cpupower-5.14-150400.3.3.1.s390x.rpm">
          <filename>cpupower-5.14-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="s390x" src="s390x/libcpupower0-5.14-150400.3.3.1.s390x.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="aarch64" src="aarch64/cpupower-5.14-150400.3.3.1.aarch64.rpm">
          <filename>cpupower-5.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="aarch64" src="aarch64/libcpupower0-5.14-150400.3.3.1.aarch64.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-714</id>
    <title>Recommended update for rpm</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667528"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207294" id="1207294" title="rpm is not able to generate python(abi) dependencies/provides for python 3.10" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- Fix missing python(abi) for 3.XX versions (bsc#1207294)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/python-rpm-4.14.3-150300.55.1.src.rpm">
          <filename>python-rpm-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150300.55.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/rpm-4.14.3-150300.55.1.src.rpm">
          <filename>rpm-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/rpm-4.14.3-150300.55.1.x86_64.rpm">
          <filename>rpm-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/rpm-ndb-4.14.3-150300.55.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150300.55.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150300.55.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="s390x" src="s390x/rpm-4.14.3-150300.55.1.s390x.rpm">
          <filename>rpm-4.14.3-150300.55.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150300.55.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150300.55.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/rpm-4.14.3-150300.55.1.aarch64.rpm">
          <filename>rpm-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150300.55.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1668</id>
    <title>Recommended update for firewalld</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667561"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206928" id="1206928" title="firewall-offline-cmd fails with ERROR: Calling pre func" type="bugzilla"/>
    </references>
    <description>This update for firewalld fixes the following issues:

- Fix `firewall-offline-cmd` command failing with error (bsc#1206928)
</description>
    <pkglist>
      <collection>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.9.1" arch="noarch" src="noarch/firewalld-0.9.3-150400.8.9.1.noarch.rpm">
          <filename>firewalld-0.9.3-150400.8.9.1.noarch.rpm</filename>
        </package>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.9.1" arch="src" src="src/firewalld-0.9.3-150400.8.9.1.src.rpm">
          <filename>firewalld-0.9.3-150400.8.9.1.src.rpm</filename>
        </package>
        <package name="python3-firewall" epoch="0" version="0.9.3" release="150400.8.9.1" arch="noarch" src="noarch/python3-firewall-0.9.3-150400.8.9.1.noarch.rpm">
          <filename>python3-firewall-0.9.3-150400.8.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-795</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604399"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36109" id="CVE-2022-36109" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36109" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206065" id="1206065" title="[trackerbug] Docker 20.10.21-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205375" id="1205375" title="VUL-0: CVE-2022-36109: docker: supplementary group permissions bypass" type="bugzilla"/>
    </references>
    <description>
This update for docker fixes the following issues:

Docker was updated to 20.10.23-ce.

See upstream changelog at https://docs.docker.com/engine/release-notes/#201023

Docker was updated to 20.10.21-ce (bsc#1206065)

See upstream changelog at https://docs.docker.com/engine/release-notes/#201021 

Security issues fixed:

- CVE-2022-36109: Fixed supplementary group permissions bypass (bsc#1205375)

- Fix wrong After: in docker.service, fixes bsc#1188447
- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.
- Allow to install container-selinux instead of apparmor-parser.
- Change to using systemd-sysusers
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="src" src="src/docker-20.10.23_ce-150000.175.1.src.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="x86_64" src="x86_64/docker-20.10.23_ce-150000.175.1.x86_64.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="s390x" src="s390x/docker-20.10.23_ce-150000.175.1.s390x.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="aarch64" src="aarch64/docker-20.10.23_ce-150000.175.1.aarch64.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1581</id>
    <title>Security update for ceph</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683033961"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202292" id="1202292" title="[staging][ftbfs] ceph fails to build against fmt 9.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187748" id="1187748" title="When an RBD is mapped, it is attempted to be deployed as an OSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201604" id="1201604" title="cephfs-shell not installing correctly with updated setuptools" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200978" id="1200978" title="Passive managers incorrectly re-directs alertmanager using the IP address instead of FQDN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188911" id="1188911" title="OSD marked down causes wrong backfill_toofull" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204430" id="1204430" title="VUL-0: CVE-2022-3650: ceph: ceph-base: ceph-crash.service Python script allows privilege escalation from ceph to root" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200317" id="1200317" title="After OSD replacement completed cephadm failed and cluster ended up with 12 OSDs down and client access failures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200262" id="1200262" title="SES7: &quot;ceph orch apply -i drive_groups-1.yml --dry-run&quot; fails when using &quot;block_db_size:&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202077" id="1202077" title="SES7.1: Need to configure prometheus: custom_scrape_configs: within containers." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206158" id="1206158" title="L3-Question: &quot;insecure global_id reclaim&quot; warning for iSCSI gateway — ref:_00D1igLOd._5005qGKZ5W:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201837" id="1201837" title="VUL-0: CVE-2022-0670: ceph: user/tenant can access (read/write) any share" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192838" id="1192838" title="cephadm: iscsi missing mgr permissions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201976" id="1201976" title="L3-Question: Ceph dashboard legend does not show names" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196046" id="1196046" title="SES7: alertmanager webhook_configs has wrong (short name) URLs in /etc/alertmanager/alertmanager.yml resulting in endless SSL certificate warnings in syslog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205436" id="1205436" title="SES 7.1: dashboard tries to access rgw via IP instead of rgw_api_host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199183" id="1199183" title="OSD OOM killed when pgs where scaled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201797" id="1201797" title="unable create/delete subvolume in cephfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200501" id="1200501" title="Grafana Pie Chart panel stopped working" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192840" id="1192840" title="&quot;cephadm shell&quot; barfs out a Python traceback (&quot;TypeError: _daemon_add_misc() got an unexpected keyword argument&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205025" id="1205025" title="VUL-0: CVE-2022-3854: ceph: possible DoS issue in ceph URL processing on RGW backends" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203375" id="1203375" title="Tiny virtual floppy device  causes OSD service placement to fail — ref:_00D1igLOd._5005qBACg6:ref" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3854" id="CVE-2022-3854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3650" id="CVE-2022-3650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0670" id="CVE-2022-0670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0670" type="cve"/>
    </references>
    <description>This update for ceph fixes the following issues:

Security issues fixed:

- CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837).
- CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#1204430).
- CVE-2022-3854: Fixed possible DoS issue in ceph URL processing on RGW backends (bsc#1205025).

Bug fixes:

- osd, tools, kv: non-aggressive, on-line trimming of accumulated dups (bsc#1199183).
- ceph-volume: fix fast device alloc size on mulitple device  (bsc#1200262).
- cephadm: update monitoring container images (bsc#1200501).
- mgr/dashboard: prevent alert redirect (bsc#1200978).
- mgr/volumes: Add subvolumegroup resize cmd (bsc#1201797).
- monitoring/ceph-mixin: add RGW host to label info (bsc#1201976).
- mgr/dashboard: enable addition of custom Prometheus alerts (bsc#1202077).
- python-common: Add 'KB' to supported suffixes in SizeMatcher (bsc#1203375).
- mgr/dashboard: fix rgw connect when using ssl (bsc#1205436).
- ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS (bsc#1202292).
- cephfs-shell: move source to separate subdirectory (bsc#1201604).

Fix in previous release:

- mgr/cephadm: try to get FQDN for configuration files (bsc#1196046).
- When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748).
- OSD marked down causes wrong backfill_toofull (bsc#1188911).
- cephadm: Fix iscsi client caps (allow mgr &lt;service status&gt; calls) (bsc#1192838).
- mgr/cephadm: fix and improve osd draining (bsc#1200317).
- add iscsi and nfs to upgrade process (bsc#1206158).
- mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments (bsc#1192840).
</description>
    <pkglist>
      <collection>
        <package name="ceph" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="src" src="src/ceph-16.2.11.58+g38d6afd3b78-150400.3.6.1.src.rpm">
          <filename>ceph-16.2.11.58+g38d6afd3b78-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="x86_64" src="x86_64/librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm">
          <filename>librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="x86_64" src="x86_64/librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm">
          <filename>librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="aarch64" src="aarch64/librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm">
          <filename>librados2-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.11.58+g38d6afd3b78" release="150400.3.6.1" arch="aarch64" src="aarch64/librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm">
          <filename>librbd1-16.2.11.58+g38d6afd3b78-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-875</id>
    <title>Recommended update for sg3_utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603659"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207706" id="1207706" title="sg3_utils: Upstream fixes and enhancements for rescan-scsi-bus.sh" type="bugzilla"/>
    </references>
    <description>This update for sg3_utils fixes the following issues:

- Speed large multipath scans (bsc#1207706)
</description>
    <pkglist>
      <collection>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="x86_64" src="x86_64/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="src" src="src/sg3_utils-1.47+13.75d23ac-150400.3.6.1.src.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="x86_64" src="x86_64/sg3_utils-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="s390x" src="s390x/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.s390x.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="s390x" src="s390x/sg3_utils-1.47+13.75d23ac-150400.3.6.1.s390x.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="aarch64" src="aarch64/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="aarch64" src="aarch64/sg3_utils-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1636</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683230414"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207853" id="1207853" title="D-Installer cannot build in s390x because of missing fbcon module" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Update to version 15.4.16:
  * modprobe.conf: s390x: remove softdep on fbcon (bsc#1207853)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="src" src="src/suse-module-tools-15.4.16-150400.3.8.1.src.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="x86_64" src="x86_64/suse-module-tools-15.4.16-150400.3.8.1.x86_64.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="s390x" src="s390x/suse-module-tools-15.4.16-150400.3.8.1.s390x.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.16" release="150400.3.8.1" arch="aarch64" src="aarch64/suse-module-tools-15.4.16-150400.3.8.1.aarch64.rpm">
          <filename>suse-module-tools-15.4.16-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-807</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683530474"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208691" id="1208691" title="Onboarding fail in detecting ptf packages" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Fix problem with detecting PTF packages (bsc#1208691)
- Fix pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/python3-salt-3004-150400.8.25.1.x86_64.rpm">
          <filename>python3-salt-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="src" src="src/salt-3004-150400.8.25.1.src.rpm">
          <filename>salt-3004-150400.8.25.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/salt-3004-150400.8.25.1.x86_64.rpm">
          <filename>salt-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/salt-minion-3004-150400.8.25.1.x86_64.rpm">
          <filename>salt-minion-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.25.1" arch="x86_64" src="x86_64/salt-transactional-update-3004-150400.8.25.1.x86_64.rpm">
          <filename>salt-transactional-update-3004-150400.8.25.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.25.1" arch="s390x" src="s390x/python3-salt-3004-150400.8.25.1.s390x.rpm">
          <filename>python3-salt-3004-150400.8.25.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="s390x" src="s390x/salt-3004-150400.8.25.1.s390x.rpm">
          <filename>salt-3004-150400.8.25.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.25.1" arch="s390x" src="s390x/salt-minion-3004-150400.8.25.1.s390x.rpm">
          <filename>salt-minion-3004-150400.8.25.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.25.1" arch="s390x" src="s390x/salt-transactional-update-3004-150400.8.25.1.s390x.rpm">
          <filename>salt-transactional-update-3004-150400.8.25.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/python3-salt-3004-150400.8.25.1.aarch64.rpm">
          <filename>python3-salt-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/salt-3004-150400.8.25.1.aarch64.rpm">
          <filename>salt-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/salt-minion-3004-150400.8.25.1.aarch64.rpm">
          <filename>salt-minion-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.25.1" arch="aarch64" src="aarch64/salt-transactional-update-3004-150400.8.25.1.aarch64.rpm">
          <filename>salt-transactional-update-3004-150400.8.25.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1686</id>
    <title>Security update for libmicrohttpd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604724"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208745" id="1208745" title="VUL-0: CVE-2023-27371: libmicrohttpd: parser bug that could be used to crash servers using the MHD_PostProcessor" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371" id="CVE-2023-27371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371" type="cve"/>
    </references>
    <description>This update for libmicrohttpd fixes the following issues:

- CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745).
</description>
    <pkglist>
      <collection>
        <package name="libmicrohttpd" epoch="0" version="0.9.57" release="150000.3.3.1" arch="src" src="src/libmicrohttpd-0.9.57-150000.3.3.1.src.rpm">
          <filename>libmicrohttpd-0.9.57-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="x86_64" src="x86_64/libmicrohttpd12-0.9.57-150000.3.3.1.x86_64.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="s390x" src="s390x/libmicrohttpd12-0.9.57-150000.3.3.1.s390x.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="aarch64" src="aarch64/libmicrohttpd12-0.9.57-150000.3.3.1.aarch64.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1718</id>
    <title>Security update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604785"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0687" id="CVE-2023-0687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0687" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207571" id="1207571" title="possible regression to bcs#1166106 on SLES15SP4 - ref:_00D1igLOd._5005qK8Bxu:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207975" id="1207975" title="VUL-1: CVE-2023-0687: glibc: gmon memory corruption due wrong calculation of required buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208358" id="1208358" title="L3: glibc-2.31-150300.*: possible bug in __strncmp_avx2_rtm+0x1b3 when strncmp length parameter is over 128" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207957" id="1207957" title="AMD Cache Computation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975)

Other issues fixed:

- Fix avx2 strncmp offset compare condition check (bsc#1208358)
- elf: Allow dlopen of filter object to work (bsc#1207571)
- powerpc: Fix unrecognized instruction errors with recent GCC
- x86: Cache computation for AMD architecture (bsc#1207957)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="src" src="src/glibc-2.31-150300.46.1.src.rpm">
          <filename>glibc-2.31-150300.46.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-668</id>
    <title>Security update for libX11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603697"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555" id="CVE-2022-3555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208881" id="1208881" title="L3: Matlab segfaults since libX11-6 updated to 1.6.2-12.24.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204425" id="1204425" title="VUL-0: CVE-2022-3555: libX11,xorg-x11-libX11: memory leak in _XFreeX11XCBStructure()" type="bugzilla"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- Fixed a regression introduced with security update for CVE-2022-3555 (bsc#1204425, bsc#1208881)
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.27.1" arch="src" src="src/libX11-1.6.5-150000.3.27.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.27.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.27.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.27.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.27.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.27.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.27.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="s390x" src="s390x/libX11-6-1.6.5-150000.3.27.1.s390x.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.s390x.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="s390x" src="s390x/libX11-xcb1-1.6.5-150000.3.27.1.s390x.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.s390x.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.27.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.27.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-868</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604452"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203355" id="1203355" title="Partner-L3: [HPS Bug] Python3 crashes with message of &quot;libgcc_s.so.1 must be installed for pthread_cancel to work&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208471" id="1208471" title="VUL-0: CVE-2023-24329: python,python3,python27,python36,python39,python310: blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" id="CVE-2023-24329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="src" src="src/python3-3.6.15-150300.10.45.1.src.rpm">
          <filename>python3-3.6.15-150300.10.45.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.45.1" arch="src" src="src/python3-core-3.6.15-150300.10.45.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.45.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.45.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.45.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.45.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.45.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1298</id>
    <title>Recommended update for ndctl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667591"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208548" id="1208548" title="ndctl command stuck in sles lpar with vpmem setup" type="bugzilla"/>
    </references>
    <description>This update for ndctl fixes the following issues:

- Fix parsing of environment variable NDCTL_TIMEOUT (bsc#1208548)
</description>
    <pkglist>
      <collection>
        <package name="libndctl6" epoch="0" version="71.1" release="150400.10.3.1" arch="x86_64" src="x86_64/libndctl6-71.1-150400.10.3.1.x86_64.rpm">
          <filename>libndctl6-71.1-150400.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="ndctl" epoch="0" version="71.1" release="150400.10.3.1" arch="src" src="src/ndctl-71.1-150400.10.3.1.src.rpm">
          <filename>ndctl-71.1-150400.10.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-781</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604645"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207780" id="1207780" title="VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208959" id="1208959" title="VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208828" id="1208828" title="VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208957" id="1208957" title="VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0512" id="CVE-2023-0512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0512" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" id="CVE-2023-1127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1170" id="CVE-2023-1170" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1170" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1175" id="CVE-2023-1175" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1175" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).
- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).
- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).
- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

Updated to version 9.0 with patch level 1386.

- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="src" src="src/vim-9.0.1386-150000.5.37.1.src.rpm">
          <filename>vim-9.0.1386-150000.5.37.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="noarch" src="noarch/vim-data-common-9.0.1386-150000.5.37.1.noarch.rpm">
          <filename>vim-data-common-9.0.1386-150000.5.37.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="x86_64" src="x86_64/vim-small-9.0.1386-150000.5.37.1.x86_64.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="s390x" src="s390x/vim-small-9.0.1386-150000.5.37.1.s390x.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="aarch64" src="aarch64/vim-small-9.0.1386-150000.5.37.1.aarch64.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-743</id>
    <title>Recommended update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603712"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209001" id="1209001" title="FIPS 140-3: PBKDF2 requirements for gnutls" type="bugzilla"/>
    </references>
    <description>This update for gnutls fixes the following issues:

FIPS: Establish PBKDF2 additional requirements [bsc#1209001]

* Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
* Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
* Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
* Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
* Add regression tests for the new PBKDF2 requirements.
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="src" src="src/gnutls-3.7.3-150400.4.35.1.src.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.35.1.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.35.1" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.35.1.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.35.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.35.1" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.35.1.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.35.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.35.1.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.35.1" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.35.1.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.35.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.35.1" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.35.1.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.35.1.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.35.1.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.35.1" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.35.1.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.35.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.35.1" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.35.1.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.35.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-782</id>
    <title>Recommended update for libgcrypt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604815"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208926" id="1208926" title="FIPS: Libgcrypt: PBKDF2 minimal iteration count and salt length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208925" id="1208925" title="FIPS: Libgcrypt: Transition to error-state if PCT fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208924" id="1208924" title="FIPS: Libgcrypt: Avoid no-keytest in ECDSA keygen" type="bugzilla"/>
    </references>
    <description>This update for libgcrypt fixes the following issues:

- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
- FIPS: PBKDF2: Added additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  FIPS indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
</description>
    <pkglist>
      <collection>
        <package name="libgcrypt" epoch="0" version="1.9.4" release="150400.6.8.1" arch="src" src="src/libgcrypt-1.9.4-150400.6.8.1.src.rpm">
          <filename>libgcrypt-1.9.4-150400.6.8.1.src.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="x86_64" src="x86_64/libgcrypt20-1.9.4-150400.6.8.1.x86_64.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="x86_64" src="x86_64/libgcrypt20-hmac-1.9.4-150400.6.8.1.x86_64.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="s390x" src="s390x/libgcrypt20-1.9.4-150400.6.8.1.s390x.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.s390x.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="s390x" src="s390x/libgcrypt20-hmac-1.9.4-150400.6.8.1.s390x.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.s390x.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="aarch64" src="aarch64/libgcrypt20-1.9.4-150400.6.8.1.aarch64.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="aarch64" src="aarch64/libgcrypt20-hmac-1.9.4-150400.6.8.1.aarch64.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-879</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603725"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180207" id="1180207" title="VUL-1: CVE-2020-14394: qemu, kvm:  infinite loop in xhci_ring_chain_length()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185000" id="1185000" title="VUL-0: CVE-2021-3507: qemu,kvm: fdc: heap buffer overflow in DMA read data transfers" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3507" id="CVE-2021-3507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14394" id="CVE-2020-14394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14394" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000).
- CVE-2020-14394: Fixed infinite loop in xhci_ring_chain_length() (bsc#1180207).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="src" src="src/qemu-6.2.0-150400.37.14.2.src.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.14.2" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.14.2.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.14.2" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.14.2" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.14.2.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.14.2" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-848</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603735"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209019" id="1209019" title="VUL-0: EMBARGOED: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209017" id="1209017" title="VUL-0: EMBARGOED: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209018" id="1209018" title="VUL-0: EMBARGOED: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42333" id="CVE-2022-42333" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42333" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42332" id="CVE-2022-42332" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42332" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42331" id="CVE-2022-42331" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42331" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42334" id="CVE-2022-42334" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42334" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode (bsc#1209017).
- CVE-2022-42333,CVE-2022-42334: Fixed x86/HVM pinned cache attributes mis-handling (bsc#1209018).
- CVE-2022-42331: Fixed speculative vulnerability in 32bit SYSCALL path on x86 (bsc#1209019).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.3_06" release="150400.4.25.1" arch="src" src="src/xen-4.16.3_06-150400.4.25.1.src.rpm">
          <filename>xen-4.16.3_06-150400.4.25.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.3_06" release="150400.4.25.1" arch="x86_64" src="x86_64/xen-libs-4.16.3_06-150400.4.25.1.x86_64.rpm">
          <filename>xen-libs-4.16.3_06-150400.4.25.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1796</id>
    <title>Security update for conmon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603743"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209307" id="1209307" title="VUL-0: conmon: build against EOL go1.18" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

- rebuild against supported go 1.19 (bsc#1209307)
- no functional changes.
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="src" src="src/conmon-2.1.5-150400.3.6.1.src.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="x86_64" src="x86_64/conmon-2.1.5-150400.3.6.1.x86_64.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="s390x" src="s390x/conmon-2.1.5-150400.3.6.1.s390x.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="aarch64" src="aarch64/conmon-2.1.5-150400.3.6.1.aarch64.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2039</id>
    <title>Recommended update for lshw</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682502214"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209531" id="1209531" title="SLES15SP5: lshw command doesn't lists the nvmf disk (lpfc/nvme_core/Redfish/SLES15SP5/ZZgen4)" type="bugzilla"/>
    </references>
    <description>This update for lshw fixes the following issues:

- Update to version B.02.19.2+git.20230320 (bsc#1209531)
</description>
    <pkglist>
      <collection>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="src" src="src/lshw-B.02.19.2+git.20230320-150200.3.15.4.src.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.src.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="x86_64" src="x86_64/lshw-B.02.19.2+git.20230320-150200.3.15.4.x86_64.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="s390x" src="s390x/lshw-B.02.19.2+git.20230320-150200.3.15.4.s390x.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.s390x.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="aarch64" src="aarch64/lshw-B.02.19.2+git.20230320-150200.3.15.4.aarch64.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2060</id>
    <title>Security update for glib2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682607884"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25180" id="CVE-2023-25180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24593" id="CVE-2023-24593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24593" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210135" id="1210135" title="glib2 update is breaking gnome-shell" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209713" id="1209713" title="VUL-0: CVE-2023-25180: glib2: DoS caused by malicious serialised variant" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209714" id="1209714" title="VUL-0: CVE-2023-24593: glib2: DoS caused by handling a malicious text-form variant" type="bugzilla"/>
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant (bsc#1209714).
- CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant (bsc#1209713).

The following non-security bug was fixed:

- Fixed regression on s390x (bsc#1210135, glgo#GNOME/glib!2978).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.8.1" arch="src" src="src/glib2-2.70.5-150400.3.8.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/glib2-tools-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libgio-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libglib-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libgmodule-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libgobject-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1897</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1681812038"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1109158" id="1109158" title="SLES 15 - [POWER8 32TB/192c, max. config] Soft lockup observed while running forkoff stress testing, system is up while you keep seeing soft lockups on console and dmsg (mm-)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206552" id="1206552" title="SLERT-15SP4: Direct I/O write+truncate test times out" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207168" id="1207168" title="VUL-0: CVE-2023-0394: kernel: null pointer dereference in skb_transport_offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207185" id="1207185" title="L3: Azure - RCA - Kernel panic due to mlx5_core driver issue - SFSC 00504800 - ref:_00D1igLOd._5005qJPzAo:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207574" id="1207574" title="SLES 15 SP4 - dasd: fix no record found for raw_track_access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208602" id="1208602" title="kernel: type confusion in sctp_sock_filter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208815" id="1208815" title="0 byte size of /sys/devices/system/node/node0/cpulist breaks applications that check filesize &gt;0 before opening." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208829" id="1208829" title="VUL-0: CVE-2023-23001: kernel: drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209052" id="1209052" title="VUL-0: CVE-2023-28464: kernel-source: double free in hci_conn_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209118" id="1209118" title="kernel hangs on x86_64 with recent SP4/SP5 kernel-obs-build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209547" id="1209547" title="VUL-0: CVE-2017-5753: kernel-source,kernel-source-rt,kernel-source-azure: Upstream reports spectre V1 vulnerability on netlink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209290" id="1209290" title="VUL-0: CVE-2023-28327: kernel: denial of service problem in net/unix/diag.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209292" id="1209292" title="L3: Failing paths to FC connected storage after kernel upgrade to 4.12.14-122.150-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209366" id="1209366" title="VUL-0: CVE-2023-28466: kernel: do_tls_getsockopt lacks a lock_sock call, leading to a race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209532" id="1209532" title="VUL-0: CVE-2023-1513: kernel: kvm: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209556" id="1209556" title="L3: High kworker load on systems patched to 4.12.14-122.150.1.25822.1.PTF.1206805-default - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209572" id="1209572" title="ppc64le CONFIG_HWPOISON_INJECT=y should be CONFIG_HWPOISON_INJECT=m" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209600" id="1209600" title="SLES 15 SP4 - s390/boot: simplify and fix kernel memory layout setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209634" id="1209634" title="VUL-0: CVE-2023-1281: kernel: use-after-free vulnerability inside the traffic control index filter (tcindex) allows Privilege Escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209684" id="1209684" title="L3: kernel 4.12.14-122.150.1 qla2xxx with tape drive connected multipath path loss issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209687" id="1209687" title="VUL-0: CVE-2023-1611: kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209779" id="1209779" title="VUL-0: CVE-2023-1637: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209788" id="1209788" title="VUL-0: CVE-2023-1652: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209798" id="1209798" title="kernel-default build failed due to missing(?) build-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209804" id="1209804" title="mm: memcg: fix swapcached stat accounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209805" id="1209805" title="Kernel regression: Possible integer underflow in input pipeline of ThinkPad trackpoint." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210050" id="1210050" title="Missing fixes / quirks for Thinkkpad" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210203" id="1210203" title="VUL-0: CVE-2023-1838: kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" id="CVE-2023-1611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" id="CVE-2023-1838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" id="CVE-2023-0394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" id="CVE-2023-1513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" id="CVE-2017-5753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" id="CVE-2023-28464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" id="CVE-2023-28466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" id="CVE-2023-1637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" id="CVE-2023-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" id="CVE-2023-1281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" id="CVE-2023-28327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" id="CVE-2023-23001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
- CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
- CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).

The following non-security bugs were fixed:

- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
- ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
- arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
- arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
- arm64: dts: imx8mp: correct usb clocks (git-fixes)
- arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
- arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
- arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
- atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
- Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
- ca8210: fix mac_len negative array access (git-fixes).
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
- cifs: append path to open_enter trace event (bsc#1193629).
- cifs: avoid race conditions with parallel reconnects (bsc#1193629).
- cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
- cifs: check only tcon status on tcon related functions (bsc#1193629).
- cifs: do not poll server interfaces too regularly (bsc#1193629).
- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- cifs: dump pending mids for all channels in DebugData (bsc#1193629).
- cifs: empty interface list when server does not support query interfaces (bsc#1193629).
- cifs: fix dentry lookups in directory handle cache (bsc#1193629).
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
- cifs: Fix smb2_set_path_size() (git-fixes).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
- cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
- cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
- cifs: lock chan_lock outside match_session (bsc#1193629).
- cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
- cifs: print session id while listing open files (bsc#1193629).
- cifs: return DFS root session id in DebugData (bsc#1193629).
- cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
- cifs: use DFS root session instead of tcon ses (bsc#1193629).
- clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
- debugfs: add debugfs_lookup_and_remove() (git-fixes).
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
- drm/amdkfd: Fix an illegal memory access (git-fixes).
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
- drm/i915: Preserve crtc_state-&gt;inherited during state clearing (git-fixes).
- drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
- drm/i915/active: Fix missing debug object activation (git-fixes).
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
- drm/i915/display: clean up comments (git-fixes).
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
- drm/i915/gt: perform uc late init after probe error injection (git-fixes).
- drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
- fotg210-udc: Add missing completion handler (git-fixes).
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct() (git-fixes).
- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
- hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
- i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
- i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present (git-fixes).
- Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
- KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
- kABI workaround for xhci (git-fixes).
- kABI: x86/msr: Remove .fixup usage (kabi).
- kconfig: Update config changed flag before calling callback (git-fixes).
- keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
- KVM: x86: fix sending PV IPI (git-fixes).
- KVM: x86: fix sending PV IPI (git-fixes).
- lan78xx: Add missing return code checks (git-fixes).
- lan78xx: Fix exception on link speed change (git-fixes).
- lan78xx: Fix memory allocation bug (git-fixes).
- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
- lan78xx: Fix race condition in disconnect handling (git-fixes).
- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
- lan78xx: Fix white space and style issues (git-fixes).
- lan78xx: Remove unused pause frame queue (git-fixes).
- lan78xx: Remove unused timer (git-fixes).
- lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
- lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
- locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
- mm: memcg: fix swapcached stat accounting (bsc#1209804).
- mm: mmap: remove newline at the end of the trace (git-fixes).
- mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
- mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
- mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- net: asix: fix modprobe &quot;sysfs: cannot create duplicate filename&quot; (git-fixes).
- net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
- net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
- net: usb: asix: remove redundant assignment to variable reg (git-fixes).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
- net: usb: lan78xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- NFS: Fix an Oops in nfs_d_automount() (git-fixes).
- NFS: fix disabling of swap (git-fixes).
- NFS4trace: fix state manager flag printing (git-fixes).
- NFSD: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
- NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
- NFSD: fix race to check ls_layouts (git-fixes).
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
- NFSD: Protect against filesystem freezing (git-fixes).
- NFSD: shut down the NFSv4 state objects before the filecache (git-fixes).
- NFSD: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
- NFSD: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
- NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
- NFSv4: keep state manager thread active if swap is enabled (git-fixes).
- NFSv4: provide mount option to toggle trunking discovery (git-fixes).
- NFSv4: Fix initialisation of struct nfs4_label (git-fixes).
- NFSv4: Fail client initialisation if state manager thread can't run (git-fixes).
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- nvme-tcp: always fail a request when sending it failed (bsc#1208902).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
- PCI: hv: Use async probing to reduce boot time (bsc#1207185).
- PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
- pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
- pinctrl: at91-pio4: fix domain name assignment (git-fixes).
- pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
- platform/x86: think-lmi: add debug_cmd (bsc#1210050).
- platform/x86: think-lmi: add missing type attribute (git-fixes).
- platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
- platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
- platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
- platform/x86: think-lmi: only display possible_values if available (git-fixes).
- platform/x86: think-lmi: Opcode support (bsc#1210050).
- platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
- platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
- platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
- platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
- platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
- platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
- platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
- platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
- platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
- platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
- platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
- platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
- platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
- platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
- platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
- platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
- platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove &quot;goto err_exit&quot; from hotkey_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
- platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
- platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
- platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
- platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
- platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
- platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
- platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
- platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
- platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
- pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
- powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
- powerpc/btext: add missing of_node_put (bsc#1065729).
- powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
- powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
- powerpc/kexec_file: fix implicit decl error (bsc#1194869).
- powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
- powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
- pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- regulator: Handle deferred clk (git-fixes).
- ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
- ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
- ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
- rpm/constraints.in: increase the disk size for armv6/7 to 24GB It grows and the build fails recently on SLE15-SP4/5.
- s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
- s390/dasd: fix no record found for raw_track_access (bsc#1207574).
- s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
- sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
- scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
- serial: fsl_lpuart: Fix comment typo (git-fixes).
- smb3: fix unusable share after force unmount failure (bsc#1193629).
- smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
- struct dwc3: mask new member (git-fixes).
- SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
- SUNRPC: Fix a server shutdown leak (git-fixes).
- SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
- thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
- thunderbolt: Disable interrupt auto clear for rings (git-fixes).
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
- thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
- thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
- timers: Prevent union confusion from unexpected (git-fixes)
- trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
- trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes).
- tracing: Add trace_array_puts() to write into instance (git-fixes).
- tracing: Check field value in hist_field_name() (git-fixes).
- tracing: Do not let histogram values have some modifiers (git-fixes).
- tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
- tracing: Free error logs of tracing instances (git-fixes).
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
- tracing: Make splice_read available again (git-fixes).
- tracing: Make tracepoint lockdep check actually test something (git-fixes).
- tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
- USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
- USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
- USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
- USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
- USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
- USB: dwc3: Fix a typo in field name (git-fixes).
- USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
- USB: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
- USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
- USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
- USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
- USB: ucsi: Fix ucsi-&gt;connector race (git-fixes).
- USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: xhci: tegra: fix sleep in atomic call (git-fixes).
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
- wifi: mac80211: fix qos on mesh interfaces (git-fixes).
- wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
- x86: Annotate call_on_stack() (git-fixes).
- x86: Annotate call_on_stack() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/fpu: Cache xfeature flags from CPUID (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/msr: Remove .fixup usage (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- xfs: convert ptag flags to unsigned (git-fixes).
- xfs: do not assert fail on perag references on teardown (git-fixes).
- xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
- xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
- xfs: remove xfs_setattr_time() declaration (git-fixes).
- xfs: zero inode fork buffer at allocation (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
- xhci: Free the command allocated for setting LPM if we return early (git-fixes).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.60.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.60.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.60.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="s390x" src="s390x/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.s390x.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.60.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2245</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684422144"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195633" id="1195633" title="Installing local RPM packages fails if /usr/bin/find is not installed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1127591" id="1127591" title="zypper option &quot;ssl_capath&quot; not working for mirror URLs from metalink file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210870" id="1210870" title="zypp:Head/zypper: Bug Don't kill valid credentials" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208329" id="1208329" title="Timeout issues with zypper, unable to change value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209406" id="1209406" title="after update, zypper pt -i shows no patterns" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Installing local RPM packages fails if /usr/bin/find is not installed (bsc#1195633)
- multicurl: propagate ssl settings stored in repo url (bsc#1127591)
- MediaCurl: Fix endless loop if wrong credentials are stored in credentials.cat (bsc#1210870)
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.] (bsc#1208329)
- Teach MediaNetwork to retry on HTTP2 errors.
- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.24" release="150400.3.6.4" arch="src" src="src/libsolv-0.7.24-150400.3.6.4.src.rpm">
          <filename>libsolv-0.7.24-150400.3.6.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.6.4" arch="x86_64" src="x86_64/libsolv-tools-0.7.24-150400.3.6.4.x86_64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.6.4.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="src" src="src/libzypp-17.31.11-150400.3.25.2.src.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="x86_64" src="x86_64/libzypp-17.31.11-150400.3.25.2.x86_64.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="src" src="src/zypper-1.14.60-150400.3.21.2.src.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="x86_64" src="x86_64/zypper-1.14.60-150400.3.21.2.x86_64.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.60" release="150400.3.21.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.60-150400.3.21.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.60-150400.3.21.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.6.4" arch="s390x" src="s390x/libsolv-tools-0.7.24-150400.3.6.4.s390x.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.6.4.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="s390x" src="s390x/libzypp-17.31.11-150400.3.25.2.s390x.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="s390x" src="s390x/zypper-1.14.60-150400.3.21.2.s390x.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.6.4" arch="aarch64" src="aarch64/libsolv-tools-0.7.24-150400.3.6.4.aarch64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.6.4.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.11" release="150400.3.25.2" arch="aarch64" src="aarch64/libzypp-17.31.11-150400.3.25.2.aarch64.rpm">
          <filename>libzypp-17.31.11-150400.3.25.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.60" release="150400.3.21.2" arch="aarch64" src="aarch64/zypper-1.14.60-150400.3.21.2.aarch64.rpm">
          <filename>zypper-1.14.60-150400.3.21.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1992</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682422689"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1109158" id="1109158" title="SLES 15 - [POWER8 32TB/192c, max. config] Soft lockup observed while running forkoff stress testing, system is up while you keep seeing soft lockups on console and dmsg (mm-)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198400" id="1198400" title="VUL-0: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206552" id="1206552" title="SLERT-15SP4: Direct I/O write+truncate test times out" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207168" id="1207168" title="VUL-0: CVE-2023-0394: kernel: null pointer dereference in skb_transport_offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207185" id="1207185" title="L3: Azure - RCA - Kernel panic due to mlx5_core driver issue - SFSC 00504800 - ref:_00D1igLOd._5005qJPzAo:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207574" id="1207574" title="SLES 15 SP4 - dasd: fix no record found for raw_track_access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208602" id="1208602" title="kernel: type confusion in sctp_sock_filter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208815" id="1208815" title="0 byte size of /sys/devices/system/node/node0/cpulist breaks applications that check filesize &gt;0 before opening." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208829" id="1208829" title="VUL-0: CVE-2023-23001: kernel: drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209052" id="1209052" title="VUL-0: CVE-2023-28464: kernel-source: double free in hci_conn_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209118" id="1209118" title="kernel hangs on x86_64 with recent SP4/SP5 kernel-obs-build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209290" id="1209290" title="VUL-0: CVE-2023-28327: kernel: denial of service problem in net/unix/diag.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209292" id="1209292" title="L3: Failing paths to FC connected storage after kernel upgrade to 4.12.14-122.150-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209366" id="1209366" title="VUL-0: CVE-2023-28466: kernel: do_tls_getsockopt lacks a lock_sock call, leading to a race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209532" id="1209532" title="VUL-0: CVE-2023-1513: kernel: kvm: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209547" id="1209547" title="VUL-0: CVE-2017-5753: kernel-source,kernel-source-rt,kernel-source-azure: Upstream reports spectre V1 vulnerability on netlink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209556" id="1209556" title="L3: High kworker load on systems patched to 4.12.14-122.150.1.25822.1.PTF.1206805-default - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209572" id="1209572" title="ppc64le CONFIG_HWPOISON_INJECT=y should be CONFIG_HWPOISON_INJECT=m" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209600" id="1209600" title="SLES 15 SP4 - s390/boot: simplify and fix kernel memory layout setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209634" id="1209634" title="VUL-0: CVE-2023-1281: kernel: use-after-free vulnerability inside the traffic control index filter (tcindex) allows Privilege Escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209684" id="1209684" title="L3: kernel 4.12.14-122.150.1 qla2xxx with tape drive connected multipath path loss issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209687" id="1209687" title="VUL-0: CVE-2023-1611: kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209779" id="1209779" title="VUL-0: CVE-2023-1637: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209788" id="1209788" title="VUL-0: CVE-2023-1652: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209798" id="1209798" title="kernel-default build failed due to missing(?) build-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209804" id="1209804" title="mm: memcg: fix swapcached stat accounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209805" id="1209805" title="Kernel regression: Possible integer underflow in input pipeline of ThinkPad trackpoint." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210050" id="1210050" title="Missing fixes / quirks for Thinkkpad" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210203" id="1210203" title="VUL-0: CVE-2023-1838: kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" id="CVE-2017-5753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" id="CVE-2023-0394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" id="CVE-2023-1281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" id="CVE-2023-1513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" id="CVE-2023-1611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" id="CVE-2023-1637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" id="CVE-2023-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" id="CVE-2023-1838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" id="CVE-2023-23001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" id="CVE-2023-28327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" id="CVE-2023-28464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" id="CVE-2023-28466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779, bsc#1198400).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
- CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).
- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).

The following non-security bugs were fixed:

- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
- ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
- ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
- Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
- Fix error path in pci-hyperv to unlock the mutex state_lock
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
- Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
- KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
- KVM: x86: fix sending PV IPI (git-fixes).
- NFS: Fix an Oops in nfs_d_automount() (git-fixes).
- NFS: fix disabling of swap (git-fixes).
- NFSD: Protect against filesystem freezing (git-fixes).
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
- NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
- NFSd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
- NFSd: fix race to check ls_layouts (git-fixes).
- NFSd: shut down the NFSv4 state objects before the filecache (git-fixes).
- NFSd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
- NFSd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
- NFSv4.1 provide mount option to toggle trunking discovery (git-fixes).
- NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes).
- NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes).
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
- NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
- NFSv4: fix state manager flag printing (git-fixes).
- NFSv4: keep state manager thread active if swap is enabled (git-fixes).
- PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
- PCI: hv: Use async probing to reduce boot time (bsc#1207185).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
- SUNRPC: Fix a server shutdown leak (git-fixes).
- SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
- SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
- USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
- USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
- USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
- USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
- USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
- USB: dwc3: Fix a typo in field name (git-fixes).
- USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
- USB: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
- USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
- USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
- USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
- USB: ucsi: Fix ucsi-&gt;connector race (git-fixes).
- USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: xhci: tegra: fix sleep in atomic call (git-fixes).
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
- arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
- arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
- arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
- arm64: dts: imx8mp: correct usb clocks (git-fixes)
- arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
- arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
- atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
- ca8210: fix mac_len negative array access (git-fixes).
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
- cifs: Fix smb2_set_path_size() (git-fixes).
- cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
- cifs: append path to open_enter trace event (bsc#1193629).
- cifs: avoid race conditions with parallel reconnects (bsc#1193629).
- cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
- cifs: check only tcon status on tcon related functions (bsc#1193629).
- cifs: do not poll server interfaces too regularly (bsc#1193629).
- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- cifs: dump pending mids for all channels in DebugData (bsc#1193629).
- cifs: empty interface list when server does not support query interfaces (bsc#1193629).
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
- cifs: fix dentry lookups in directory handle cache (bsc#1193629).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
- cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
- cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
- cifs: lock chan_lock outside match_session (bsc#1193629).
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
- cifs: print session id while listing open files (bsc#1193629).
- cifs: return DFS root session id in DebugData (bsc#1193629).
- cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
- cifs: use DFS root session instead of tcon ses (bsc#1193629).
- clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
- debugfs: add debugfs_lookup_and_remove() (git-fixes).
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
- drm/amdkfd: Fix an illegal memory access (git-fixes).
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
- drm/i915/active: Fix missing debug object activation (git-fixes).
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
- drm/i915/display: clean up comments (git-fixes).
- drm/i915/gt: perform uc late init after probe error injection (git-fixes).
- drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
- drm/i915: Preserve crtc_state-&gt;inherited during state clearing (git-fixes).
- drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
- fotg210-udc: Add missing completion handler (git-fixes).
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct() (git-fixes).
- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
- i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
- i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present (git-fixes).
- kABI workaround for xhci (git-fixes).
- kABI: x86/msr: Remove .fixup usage (kabi).
- kconfig: Update config changed flag before calling callback (git-fixes).
- keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
- lan78xx: Add missing return code checks (git-fixes).
- lan78xx: Fix exception on link speed change (git-fixes).
- lan78xx: Fix memory allocation bug (git-fixes).
- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
- lan78xx: Fix race condition in disconnect handling (git-fixes).
- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
- lan78xx: Fix white space and style issues (git-fixes).
- lan78xx: Remove unused pause frame queue (git-fixes).
- lan78xx: Remove unused timer (git-fixes).
- lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
- lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
- locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
- mm: memcg: fix swapcached stat accounting (bsc#1209804).
- mm: mmap: remove newline at the end of the trace (git-fixes).
- mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
- mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
- mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- net: asix: fix modprobe &quot;sysfs: cannot create duplicate filename&quot; (git-fixes).
- net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
- net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
- net: usb: asix: remove redundant assignment to variable reg (git-fixes).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
- net: usb: lan78xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- nvme-tcp: always fail a request when sending it failed (bsc#1208902).
- pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
- pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
- pinctrl: at91-pio4: fix domain name assignment (git-fixes).
- pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
- platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
- platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
- platform/x86: think-lmi: Opcode support (bsc#1210050).
- platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
- platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
- platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
- platform/x86: think-lmi: add debug_cmd (bsc#1210050).
- platform/x86: think-lmi: add missing type attribute (git-fixes).
- platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
- platform/x86: think-lmi: only display possible_values if available (git-fixes).
- platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
- platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
- platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
- platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
- platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
- platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
- platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
- platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
- platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
- platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
- platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
- platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
- platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
- platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove &quot;goto err_exit&quot; from hotkey_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
- platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
- platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
- platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
- platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
- platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
- platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
- platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
- platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
- powerpc/btext: add missing of_node_put (bsc#1065729).
- powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
- powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
- powerpc/kexec_file: fix implicit decl error (bsc#1194869).
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
- powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
- powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
- powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
- pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
- ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
- ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
- s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
- s390/dasd: fix no record found for raw_track_access (bsc#1207574).
- s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
- sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
- scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
- serial: fsl_lpuart: Fix comment typo (git-fixes).
- smb3: fix unusable share after force unmount failure (bsc#1193629).
- smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
- struct dwc3: mask new member (git-fixes).
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
- thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
- thunderbolt: Disable interrupt auto clear for rings (git-fixes).
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
- thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
- thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
- timers: Prevent union confusion from unexpected (git-fixes)
- trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
- trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
- tracing: Add trace_array_puts() to write into instance (git-fixes).
- tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
- tracing: Free error logs of tracing instances (git-fixes).
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
- wifi: mac80211: fix qos on mesh interfaces (git-fixes).
- wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/fpu: Cache xfeature flags from CPUID (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/msr: Remove .fixup usage (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- x86: Annotate call_on_stack() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- xfs: convert ptag flags to unsigned (git-fixes).
- xfs: do not assert fail on perag references on teardown (git-fixes).
- xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
- xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
- xfs: remove xfs_setattr_time() declaration (git-fixes).
- xfs: zero inode fork buffer at allocation (git-fixes).
- xhci: Free the command allocated for setting LPM if we return early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.23.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.23.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.23.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.23.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.23.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.23.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1994</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682423645"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" id="CVE-2023-1981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210328" id="1210328" title="VUL-0: CVE-2023-1981: avahi: avahi: avahi-daemon can be crashed via DBus" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="src" src="src/avahi-0.8-150400.7.3.1.src.rpm">
          <filename>avahi-0.8-150400.7.3.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.3.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/avahi-0.8-150400.7.3.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.3.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.3.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.3.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.3.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2084</id>
    <title>Security update for shim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683027136"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210382" id="1210382" title="The bootx64.efi in EFI boot partition is not updated after shim be upgraded." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" id="CVE-2022-28737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" type="cve"/>
    </references>
    <description>This update for shim fixes the following issues:

- CVE-2022-28737 was missing as reference previously.

- Upgrade shim-install for bsc#1210382

  After closing Leap-gap project since Leap 15.3, openSUSE Leap direct
  uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot
  CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no,
  so all files in /boot/efi/EFI/boot are not updated.

  Logic was added that is using ID field in os-release for
  checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure
  Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated.
</description>
    <pkglist>
      <collection>
        <package name="shim" epoch="0" version="15.7" release="150300.4.16.1" arch="src" src="src/shim-15.7-150300.4.16.1.src.rpm">
          <filename>shim-15.7-150300.4.16.1.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.7" release="150300.4.16.1" arch="x86_64" src="x86_64/shim-15.7-150300.4.16.1.x86_64.rpm">
          <filename>shim-15.7-150300.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.7" release="150300.4.16.1" arch="aarch64" src="aarch64/shim-15.7-150300.4.16.1.aarch64.rpm">
          <filename>shim-15.7-150300.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2046</id>
    <title>Security update for openssl-ibmca</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682523089"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210359" id="1210359" title="FIPS 140-3: fips enabled openssl + openssl-ibmca engine + fips enable libica fails TLS connections" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210058" id="1210058" title="SLES 15 SP4 - A timing-based side channel exists in the IBMCA provider (openssl-ibmca)" type="bugzilla"/>
    </references>
    <description>This update for openssl-ibmca fixes the following issues:

Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058) 

- Provider: Adjustments for OpenSSL versions 3.1 and 3.2 
- Provider: Support RSA blinding
- Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
- Provider: Support &quot;implicit rejection&quot; option for RSA PKCS#1 v1.5 padding
- Provider: Adjustments in OpenSSL config generator and example configs
- Engine: EC: Cache ICA key in EC_KEY object (performance improvement)


- FIPS 140-3: Correct engine handling so only the ciphers selected in the config file are activated (bsc#1210359)

</description>
    <pkglist>
      <collection>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.8.1" arch="s390x" src="s390x/openssl-ibmca-2.4.0-150400.4.8.1.s390x.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.8.1.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.8.1" arch="src" src="src/openssl-ibmca-2.4.0-150400.4.8.1.src.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1947</id>
    <title>Security update for dmidecode</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682079291"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30630" id="CVE-2023-30630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30630" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210418" id="1210418" title="VUL-0: CVE-2023-30630: dmidecode: potential file overwrite (dmiwrite)" type="bugzilla"/>
    </references>
    <description>This update for dmidecode fixes the following issues:

- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
</description>
    <pkglist>
      <collection>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="src" src="src/dmidecode-3.4-150400.16.8.1.src.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.src.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="x86_64" src="x86_64/dmidecode-3.4-150400.16.8.1.x86_64.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.x86_64.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="aarch64" src="aarch64/dmidecode-3.4-150400.16.8.1.aarch64.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1939</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682068485"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191546" id="1191546" title="FIPS: mozilla-nss: service level indicator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207209" id="1207209" title="FIPS 140-3: NSS PCT tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208999" id="1208999" title="FIPS 140-3: PBKDF2 requirements for NSS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208242" id="1208242" title="mozilla-nss-tools do not contain manpages" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS 140-3: Adjust SLI reporting for PBKDF2 parameter validation (bsc#1208999)
- FIPS 140-3: Update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases. (bsc#1191546)
- FIPS 140-3: more changes for pairwise consistency checks. (bsc#1207209)
- Add manpages to mozilla-nss-tools (bsc#1208242)
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libfreebl3-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="src" src="src/mozilla-nss-3.79.4-150400.3.29.1.src.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libfreebl3-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libfreebl3-hmac-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libsoftokn3-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libsoftokn3-hmac-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/mozilla-nss-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/mozilla-nss-certs-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/mozilla-nss-tools-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libfreebl3-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2216</id>
    <title>Recommended update for python-packaging</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684229389"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186870" id="1186870" title="python-rpm-macros different dependency generated python-six" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199282" id="1199282" title="Update azure SDK and cli to support aarch64 image creation" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-24629" id="SLE-24629" title="https://jira.suse.com/browse/SLE-24629" type="jira"/>
      <reference href="https://jira.suse.com/browse/PM-3243" id="PM-3243" title="https://jira.suse.com/browse/PM-3243" type="jira"/>
    </references>
    <description>This update for python-packaging fixes the following issues:

- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

- Add patch to fix testsuite on big-endian targets
- Ignore python3.6.2 since the test doesn't support it. 
- update to 21.3:
  * Add a pp3-none-any tag
  * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion
  * Fix a spelling mistake

- update to 21.2:
  * Update documentation entry for 21.1.
  * Update pin to pyparsing to exclude 3.0.0.
  * PEP 656: musllinux support
  * Drop support for Python 2.7, Python 3.4 and Python 3.5
  * Replace distutils usage with sysconfig
  * Add support for zip files
  * Use cached hash attribute to short-circuit tag equality comparisons
  * Specify the default value for the 'specifier' argument to 'SpecifierSet'
  * Proper keyword-only &quot;warn&quot; argument in packaging.tags
  * Correctly remove prerelease suffixes from ~= check
  * Fix type hints for 'Version.post' and 'Version.dev'
  * Use typing alias 'UnparsedVersion'
  * Improve type inference
  * Tighten the return typeo

- Add Provides: for python*dist(packaging). (bsc#1186870)

- add no-legacyversion-warning.patch to restore compatibility with 20.4 

- update to 20.9:
  * Add support for the ``macosx_10_*_universal2`` platform tags 
  * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``

- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros
  * Do not insert an underscore in wheel tags when the interpreter version number is more than 2 digits 
  * Fix flit configuration, to include LICENSE files
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag
  * Add some missing type hints to `packaging.requirements`
  * Officially support Python 3.9
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve the glibc version string.

- update to 20.4:
  * Canonicalize version before comparing specifiers.
  * Change type hint for ``canonicalize_name`` to return ``packaging.utils.NormalizedName``.
  This enables the use of static typing tools (like mypy) to detect mixing of normalized and un-normalized names.
</description>
    <pkglist>
      <collection>
        <package name="python-packaging" epoch="0" version="21.3" release="150200.3.3.1" arch="src" src="src/python-packaging-21.3-150200.3.3.1.src.rpm">
          <filename>python-packaging-21.3-150200.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-packaging" epoch="0" version="21.3" release="150200.3.3.1" arch="noarch" src="noarch/python3-packaging-21.3-150200.3.3.1.noarch.rpm">
          <filename>python3-packaging-21.3-150200.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2283</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684922121"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211282" id="1211282" title="All clouds - registration client does not fall back to IPv4 when server supports dual stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210021" id="1210021" title="incomplete clean up for failed registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208099" id="1208099" title="[TRACKERBUG] cloud-regionsrv-client fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210020" id="1210020" title="incomplete clean up for failed registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207133" id="1207133" title="cloud-regionsrv client needs log rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208097" id="1208097" title="[TRACKERBUG] cloud-regionsrv-client fixes" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement    
    
- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean
    
- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.2" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.2-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.2-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.2" release="150000.6.96.1" arch="src" src="src/cloud-regionsrv-client-10.1.2-150000.6.96.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.2-150000.6.96.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.96.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.96.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.96.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.96.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1967</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682342354"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208916" id="1208916" title="VUL-0: containerized-data-importer,kubevirt: built against outdated go1.17" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209359" id="1209359" title="VUL-0: CVE-2023-26484: kubevirt: virt-handler cluster takeover" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26484" id="CVE-2023-26484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26484" type="cve"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

- CVE-2023-26484: Limit operator secrets permission. (bsc#1209359)

kubevirt is also rebuilt with a supported GO compiler (bsc#1208916)
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.13.1" arch="src" src="src/kubevirt-0.54.0-150400.3.13.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.13.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.13.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.13.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.13.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1966</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682342327"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208916" id="1208916" title="VUL-0: containerized-data-importer,kubevirt: built against outdated go1.17" type="bugzilla"/>
    </references>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

- build the containerized-data-importer with a supported golang compiler (bsc#1208916)
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.13.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.13.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.13.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.13.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2192</id>
    <title>Feature update for python311, python311-pip, python311-setuptools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683888562"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2634" id="PED-2634" title="https://jira.suse.com/browse/PED-2634" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This release of python311, python311-pip, python311-setuptools adds the following feature:

- Add Python-3.11 to SLE-15-SP4 Python Module (jsc#PED-68, jsc#PED-2634)
</description>
    <pkglist>
      <collection>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.3.3" arch="noarch" src="noarch/python3-setuptools-44.1.1-150400.9.3.3.noarch.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.3.3.noarch.rpm</filename>
        </package>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.3.3" arch="src" src="src/python3-setuptools-44.1.1-150400.9.3.3.src.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.3.3.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2053</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682587885"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469" id="CVE-2023-29469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484" id="CVE-2023-28484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209918" id="1209918" title="L3: Bootstrapping a traditional client fails with dependencies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210411" id="1210411" title="VUL-0: CVE-2023-28484: libxml2,python-libxml2: NULL dereference in xmlSchemaFixupComplexType" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210412" id="1210412" title="VUL-0: CVE-2023-29469: libxml2,python-libxml2: Hashing of empty dict strings isn't deterministic" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

The following non-security bug was fixed:

- Remove unneeded dependency (bsc#1209918). 
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="src" src="src/libxml2-2.9.14-150400.5.16.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.16.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.16.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.16.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.16.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="s390x" src="s390x/libxml2-2-2.9.14-150400.5.16.1.s390x.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="s390x" src="s390x/libxml2-tools-2.9.14-150400.5.16.1.s390x.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="s390x" src="s390x/python3-libxml2-2.9.14-150400.5.16.1.s390x.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2051</id>
    <title>Security update for libtpms</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682587824"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1017" id="CVE-2023-1017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1018" id="CVE-2023-1018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1018" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206022" id="1206022" title="VUL-0: CVE-2023-1017: libtpms: OOB write in CryptParameterDecryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206023" id="1206023" title="VUL-0: CVE-2023-1018: libtpms: OOB read in CryptParameterDecryption" type="bugzilla"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2023-1017: Fixed out-of-bounds write in CryptParameterDecryption (bsc#1206022).
- CVE-2023-1018: Fixed out-of-bounds read in CryptParameterDecryption (bsc#1206023).
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.8.2" release="150300.3.9.1" arch="src" src="src/libtpms-0.8.2-150300.3.9.1.src.rpm">
          <filename>libtpms-0.8.2-150300.3.9.1.src.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="x86_64" src="x86_64/libtpms0-0.8.2-150300.3.9.1.x86_64.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="s390x" src="s390x/libtpms0-0.8.2-150300.3.9.1.s390x.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.s390x.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="aarch64" src="aarch64/libtpms0-0.8.2-150300.3.9.1.aarch64.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2438</id>
    <title>Recommended update for kernel-firmware</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686116000"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3699" id="PED-3699" title="https://jira.suse.com/browse/PED-3699" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209601" id="1209601" title="Partner-L3: [HPE Bug] Include Intel QAT 4xxx firmware from" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205811" id="1205811" title="kernel-firmware failed to build due to filesystem full for x86_64 and i586" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601)
- Add iwlwifi-*-72 ucode (bsc#1209681)
- Update constraints for 8GB (bsc#1205811)
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20220509" release="150400.4.16.1" arch="src" src="src/kernel-firmware-20220509-150400.4.16.1.src.rpm">
          <filename>kernel-firmware-20220509-150400.4.16.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-all-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-all-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-atheros-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-brcm-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-i915-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-i915-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-intel-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-intel-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-marvell-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-media-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-media-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-network-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-network-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-nfp-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-platform-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-platform-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-prestera-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-qcom-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-radeon-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-realtek-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-serial-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-serial-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-sound-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-sound-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ti-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ti-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20220509-150400.4.16.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20220509" release="150400.4.16.1" arch="noarch" src="noarch/ucode-amd-20220509-150400.4.16.1.noarch.rpm">
          <filename>ucode-amd-20220509-150400.4.16.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2161</id>
    <title>Feature update for aws-cli, python-boto3, python-botocore, python-s3transfer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683734107"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204917" id="1204917" title="aws-cli cannot be installed; 'nothing provides 'python3-colorama &lt;= 0.4.5'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204537" id="1204537" title="python-boto3 1.22.11 needed as a dependency in SLE-15-SP1 for ec2img-utils" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209255" id="1209255" title="[Trackerbug PED-3781] Update python-botocore to 1.29.84 or newer for boot parameter BIOS/UEFI support in EC2" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3780" id="PED-3780" title="https://jira.suse.com/browse/PED-3780" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2333" id="PED-2333" title="https://jira.suse.com/browse/PED-2333" type="jira"/>
    </references>
    <description>This update for aws-cli, python-boto3, python-botocore, python-s3transfer fixes the following issues:

aws-cli:

- Version update from 1.23.11 to 1.27.89 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333)
  * For the detailed list of changes please consult upstream changelog:
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
  * Updated required dependencies 

python-botocore:

- Version update from 1.25.11 to 1.29.89 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333):
  * For the detailed list of changes please consult https://github.com/boto/botocore/blob/develop/CHANGELOG.rst
  * Updated required dependencies 

python-boto3:

- Version update from 1.22.11 to 1.26.89 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333):
  * For the detailed list of changes please consult https://github.com/boto/boto3/blob/develop/CHANGELOG.rst
  * Updated required dependencies 
- Add additional build dependency requirements to python-python-dateutil and python-jmespath to resolve build failures

python-s3transfer:

- Version update from 0.5.0 to 0.6.0 (bsc#1209255, jsc#PED-3780, bsc#1204537, jsc#PED-2333):
  * Dropped support for Python 3.6
  * Added support for flexible checksum when uploading or downloading objects
  * Officially add Python 3.10 support
- Add additional build dependency requirements to python-python-dateutil and python-jmespath to resolve build failures
- Drop unused python-mock build dependency
</description>
    <pkglist>
      <collection>
        <package name="aws-cli" epoch="0" version="1.27.89" release="150200.30.11.1" arch="noarch" src="noarch/aws-cli-1.27.89-150200.30.11.1.noarch.rpm">
          <filename>aws-cli-1.27.89-150200.30.11.1.noarch.rpm</filename>
        </package>
        <package name="aws-cli" epoch="0" version="1.27.89" release="150200.30.11.1" arch="src" src="src/aws-cli-1.27.89-150200.30.11.1.src.rpm">
          <filename>aws-cli-1.27.89-150200.30.11.1.src.rpm</filename>
        </package>
        <package name="python-botocore" epoch="0" version="1.29.89" release="150200.37.14.1" arch="src" src="src/python-botocore-1.29.89-150200.37.14.1.src.rpm">
          <filename>python-botocore-1.29.89-150200.37.14.1.src.rpm</filename>
        </package>
        <package name="python-s3transfer" epoch="0" version="0.6.0" release="150200.9.7.1" arch="src" src="src/python-s3transfer-0.6.0-150200.9.7.1.src.rpm">
          <filename>python-s3transfer-0.6.0-150200.9.7.1.src.rpm</filename>
        </package>
        <package name="python3-botocore" epoch="0" version="1.29.89" release="150200.37.14.1" arch="noarch" src="noarch/python3-botocore-1.29.89-150200.37.14.1.noarch.rpm">
          <filename>python3-botocore-1.29.89-150200.37.14.1.noarch.rpm</filename>
        </package>
        <package name="python3-s3transfer" epoch="0" version="0.6.0" release="150200.9.7.1" arch="noarch" src="noarch/python3-s3transfer-0.6.0-150200.9.7.1.noarch.rpm">
          <filename>python3-s3transfer-0.6.0-150200.9.7.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2240</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684346268"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207410" id="1207410" title="Duplicate link for NVMe device by-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203141" id="1203141" title="The systemd-udevd worker terminated by signal 9 (KILL) on a system with 4096 LUNs" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)
- Optimize when hundred workers claim the same symlink with the same priority (bsc#1203141)
- Add nss-resolve and systemd-network to Packagehub-Subpackages (MSC-626)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/libsystemd0-249.16-150400.8.28.3.x86_64.rpm">
          <filename>libsystemd0-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/libudev1-249.16-150400.8.28.3.x86_64.rpm">
          <filename>libudev1-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="src" src="src/systemd-249.16-150400.8.28.3.src.rpm">
          <filename>systemd-249.16-150400.8.28.3.src.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-container-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-container-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-journal-remote-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/systemd-sysvinit-249.16-150400.8.28.3.x86_64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.28.3" arch="x86_64" src="x86_64/udev-249.16-150400.8.28.3.x86_64.rpm">
          <filename>udev-249.16-150400.8.28.3.x86_64.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/libsystemd0-249.16-150400.8.28.3.s390x.rpm">
          <filename>libsystemd0-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/libudev1-249.16-150400.8.28.3.s390x.rpm">
          <filename>libudev1-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/systemd-249.16-150400.8.28.3.s390x.rpm">
          <filename>systemd-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/systemd-container-249.16-150400.8.28.3.s390x.rpm">
          <filename>systemd-container-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/systemd-journal-remote-249.16-150400.8.28.3.s390x.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/systemd-sysvinit-249.16-150400.8.28.3.s390x.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.28.3" arch="s390x" src="s390x/udev-249.16-150400.8.28.3.s390x.rpm">
          <filename>udev-249.16-150400.8.28.3.s390x.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/libsystemd0-249.16-150400.8.28.3.aarch64.rpm">
          <filename>libsystemd0-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/libudev1-249.16-150400.8.28.3.aarch64.rpm">
          <filename>libudev1-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-container-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-container-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-journal-remote-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/systemd-sysvinit-249.16-150400.8.28.3.aarch64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.28.3" arch="aarch64" src="aarch64/udev-249.16-150400.8.28.3.aarch64.rpm">
          <filename>udev-249.16-150400.8.28.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2103</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683223575"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209187" id="1209187" title="VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209042" id="1209042" title="VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208828" id="1208828" title="VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" id="CVE-2023-1127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1355" id="CVE-2023-1355" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1355" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1264" id="CVE-2023-1264" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1264" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 1443, fixes the following security problems

-  CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042).
-  CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187).
-  CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="src" src="src/vim-9.0.1443-150000.5.40.1.src.rpm">
          <filename>vim-9.0.1443-150000.5.40.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="noarch" src="noarch/vim-data-common-9.0.1443-150000.5.40.1.noarch.rpm">
          <filename>vim-data-common-9.0.1443-150000.5.40.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="x86_64" src="x86_64/vim-small-9.0.1443-150000.5.40.1.x86_64.rpm">
          <filename>vim-small-9.0.1443-150000.5.40.1.x86_64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="x86_64" src="x86_64/xxd-9.0.1443-150000.5.40.1.x86_64.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="s390x" src="s390x/vim-small-9.0.1443-150000.5.40.1.s390x.rpm">
          <filename>vim-small-9.0.1443-150000.5.40.1.s390x.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="s390x" src="s390x/xxd-9.0.1443-150000.5.40.1.s390x.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.s390x.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="ppc64le" src="ppc64le/xxd-9.0.1443-150000.5.40.1.ppc64le.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.ppc64le.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="aarch64" src="aarch64/vim-small-9.0.1443-150000.5.40.1.aarch64.rpm">
          <filename>vim-small-9.0.1443-150000.5.40.1.aarch64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.40.1" arch="aarch64" src="aarch64/xxd-9.0.1443-150000.5.40.1.aarch64.rpm">
          <filename>xxd-9.0.1443-150000.5.40.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2111</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683290071"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210434" id="1210434" title="VUL-0: CVE-2023-29491: ncurses: memory corruption issues when processing malformed terminfo data" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491" id="CVE-2023-29491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491" type="cve"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2023-29491: Fixed memory corruption issues when processing malformed terminfo data (bsc#1210434).
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.15.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.15.1" arch="src" src="src/ncurses-6.1-150000.5.15.1.src.rpm">
          <filename>ncurses-6.1-150000.5.15.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.15.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.15.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.15.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.15.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.15.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.15.1" arch="s390x" src="s390x/libncurses6-6.1-150000.5.15.1.s390x.rpm">
          <filename>libncurses6-6.1-150000.5.15.1.s390x.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.15.1" arch="s390x" src="s390x/ncurses-utils-6.1-150000.5.15.1.s390x.rpm">
          <filename>ncurses-utils-6.1-150000.5.15.1.s390x.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.15.1" arch="s390x" src="s390x/terminfo-6.1-150000.5.15.1.s390x.rpm">
          <filename>terminfo-6.1-150000.5.15.1.s390x.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.15.1" arch="s390x" src="s390x/terminfo-base-6.1-150000.5.15.1.s390x.rpm">
          <filename>terminfo-base-6.1-150000.5.15.1.s390x.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.15.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.15.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.15.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.15.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.15.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2131</id>
    <title>Recommended update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683632154"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207014" id="1207014" title="L3: Invalid environment assignments  when SSH with X forwarding to SLES 15 SP4 after update" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Remove some patches that cause invalid environment assignments (bsc#1207014).
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="src" src="src/openssh-8.4p1-150300.3.18.2.src.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.18.2" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.18.2.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.18.2.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="s390x" src="s390x/openssh-8.4p1-150300.3.18.2.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.18.2" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.18.2.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.18.2.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.18.2" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.18.2.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.18.2.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.18.2" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.18.2.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.18.2.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.18.2" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.18.2.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.18.2.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.18.2" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.18.2.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.18.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2317</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685448107"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210164" id="1210164" title="Partner-L3: libuuid - downport cache related patch" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issue:

- Add upstream patch to prevent possible performance degradation of libuuid (bsc#1210164)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="src" src="src/util-linux-2.37.2-150400.8.17.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.17.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.17.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/libblkid1-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>libblkid1-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/libfdisk1-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>libfdisk1-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/libmount1-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>libmount1-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/libsmartcols1-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/libuuid1-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>libuuid1-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/util-linux-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="s390x" src="s390x/util-linux-systemd-2.37.2-150400.8.17.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.17.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.17.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2104</id>
    <title>Recommended update for procps</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683227158"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209122" id="1209122" title="sysctl typo in /usr/lib/sysctl.d/50-default.conf with a leading '-' in the line for -net.ipv4.ping_group_range" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issue:

- Allow - as leading character to ignore possible errors on systctl entries (bsc#1209122)
</description>
    <pkglist>
      <collection>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.31.1" arch="x86_64" src="x86_64/libprocps7-3.3.15-150000.7.31.1.x86_64.rpm">
          <filename>libprocps7-3.3.15-150000.7.31.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="src" src="src/procps-3.3.15-150000.7.31.1.src.rpm">
          <filename>procps-3.3.15-150000.7.31.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="x86_64" src="x86_64/procps-3.3.15-150000.7.31.1.x86_64.rpm">
          <filename>procps-3.3.15-150000.7.31.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.31.1" arch="s390x" src="s390x/libprocps7-3.3.15-150000.7.31.1.s390x.rpm">
          <filename>libprocps7-3.3.15-150000.7.31.1.s390x.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="s390x" src="s390x/procps-3.3.15-150000.7.31.1.s390x.rpm">
          <filename>procps-3.3.15-150000.7.31.1.s390x.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.31.1" arch="aarch64" src="aarch64/libprocps7-3.3.15-150000.7.31.1.aarch64.rpm">
          <filename>libprocps7-3.3.15-150000.7.31.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.31.1" arch="aarch64" src="aarch64/procps-3.3.15-150000.7.31.1.aarch64.rpm">
          <filename>procps-3.3.15-150000.7.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2299</id>
    <title>Recommended update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685012608"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205830" id="1205830" title="Intel VROC RAID 1 device didn't rebuild after the failed HDD hot plug into SLES 15 SP4 x86_64 GM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205493" id="1205493" title="Partner-L3: mdmon service is not restarted after switch root" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issues:

- Fixes for mdmon to ensure it runs at the right time in the fight mount namespace, this fixes various problems with
  IMSM raid arrays (bsc#1205493, bsc#1205830)
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="src" src="src/mdadm-4.1-150300.24.27.1.src.rpm">
          <filename>mdadm-4.1-150300.24.27.1.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.27.1.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.27.1.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="s390x" src="s390x/mdadm-4.1-150300.24.27.1.s390x.rpm">
          <filename>mdadm-4.1-150300.24.27.1.s390x.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.27.1" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.27.1.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2159</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683730189"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-1344" id="PED-1344" title="https://jira.suse.com/browse/PED-1344" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209128" id="1209128" title="open-vm-tools 12.2.0 has been released - please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205962" id="1205962" title="open-vm-tools 12.1.5 has been released, please rebase" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Update to 12.2.0 (bsc#1209128)
- Build the containerinfo plugin for TW/SLES15-SP5 and newer.(jsc#PED-1344)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.2.0" release="150300.26.1" arch="x86_64" src="x86_64/libvmtools0-12.2.0-150300.26.1.x86_64.rpm">
          <filename>libvmtools0-12.2.0-150300.26.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.26.1" arch="src" src="src/open-vm-tools-12.2.0-150300.26.1.src.rpm">
          <filename>open-vm-tools-12.2.0-150300.26.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.26.1" arch="x86_64" src="x86_64/open-vm-tools-12.2.0-150300.26.1.x86_64.rpm">
          <filename>open-vm-tools-12.2.0-150300.26.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3413</id>
    <title>Feature update for LibreOffice and xmlsec1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692855693"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3549" id="PED-3549" title="https://jira.suse.com/browse/PED-3549" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3550" id="PED-3550" title="https://jira.suse.com/browse/PED-3550" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3561" id="PED-3561" title="https://jira.suse.com/browse/PED-3561" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0950" id="CVE-2023-0950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0950" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2255" id="CVE-2023-2255" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2255" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209242" id="1209242" title="VUL-0: CVE-2023-0950: libreoffice: stack underflow in ScInterpreter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211746" id="1211746" title="VUL-0: CVE-2023-2255: libreoffice: Remote documents loaded without prompt via IFrame" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204040" id="1204040" title="PPTX: shadow effect for table offset too far to the right" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198666" id="1198666" title="Need to be able to set the default tab size for each text object" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200085" id="1200085" title="FILEOPEN PPTX: extra paragraph after some 2-line text with link" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210687" id="1210687" title="[META] binutils-gold is unmaintained and will be dropped" type="bugzilla"/>
    </references>
    <description>This update for LibreOffice and xmlsec1 fixes the following issue:
    
libreoffice:

- Version update from 7.4.3.2 to 7.5.4.1 (jsc#PED-3561, jsc#PED-3550, jsc#3549):
  * For the highlights of changes of version 7.5 please consult the official release notes:
    https://wiki.documentfoundation.org/ReleaseNotes/7.5
  * Security issues fixed:
    + CVE-2023-0950: Fixed stack underflow in ScInterpreter (bsc#1209242)
    + CVE-2023-2255: Fixed vulnerability where remote documents could be loaded without prompt via IFrame (bsc#1211746)
  * Bug fixes:
    + Fix PPTX shadow effect for table offset (bsc#1204040)
    + Fix ability to set the default tab size for each text object (bsc#1198666)
    + Fix PPTX extra vertical space between different text formats (bsc#1200085)
    + Do not use binutils-gold as the package is unmaintained and will be removed in the future (boo#1210687)
  * Updated bundled dependencies:
    * boost version update from 1_77_0 to 1_80_0
    * curl version update from 7.83.1 to 8.0.1
    * gpgme version update from 1.16.0 to 1.18.0
    * icu4c-data version update from 70_1 to 72_1
    * icu4c version update from 70_1 to 72_1
    * pdfium version update from 4699 to 5408
    * poppler version update from 21.11.0 to 22.12.0

xmlsec1:
    
- Version update from 1.2.28 to 1.2.37 required by LibreOffice 7.5.2.2 (jsc#PED-3561, jsc#PED-3550):
  * Retired the XMLSec mailing list &quot;xmlsec@aleksey.com&quot; and the XMLSec Online Signature Verifier.
  * Migration to OpenSSL 3.0 API Note that OpenSSL engines are disabled by default when XMLSec library is compiled
    against OpenSSL 3.0.
    To re-enable OpenSSL engines, use `--enable-openssl3-engines` configure flag 
    (there will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed all warnings and enabled `-Werror` and `-pedantic` 
    flags on CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently disabled by default for backward compatibility).
  * Support for OpenSSL compiled with OPENSSL_NO_ERR.
  * Full support for LibreSSL 3.5.0 and above
  * Several other small fixes
  * Fix decrypting session key for two recipients 
  * Added `--privkey-openssl-engine` option to enhance openssl engine support
  * Remove MD5 for NSS 3.59 and above
  * Fix PKCS12_parse return code handling
  * Fix OpenSSL lookup
  * xmlSecX509DataGetNodeContent(): don't return 0 for non-empty elements - fix for LibreOffice
  * Unload error strings in OpenSSL shutdown.
  * Make userData available when executing preExecCallback function
  * Add an option to use secure memset.
  * Enabled XML_PARSE_HUGE for all xml parsers.
  * Various build and tests fixes and improvements.
  * Move remaining private header files away from xmlsec/include/`` folder
- Other packaging changes:
  * Relax the crypto policies for the test-suite. It allows the tests using certificates with small key lengths to pass.
  * Pass `--disable-md5` to configure: The cryptographic strength of the MD5 algorithm is sufficiently doubtful that its
    use is discouraged at this time. It is not listed as an algorithm in [XMLDSIG-CORE1]
    https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1
</description>
    <pkglist>
      <collection>
        <package name="libxmlsec1-1" epoch="0" version="1.2.37" release="150400.14.3.4" arch="x86_64" src="x86_64/libxmlsec1-1-1.2.37-150400.14.3.4.x86_64.rpm">
          <filename>libxmlsec1-1-1.2.37-150400.14.3.4.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1" epoch="0" version="1.2.37" release="150400.14.3.4" arch="x86_64" src="x86_64/libxmlsec1-openssl1-1.2.37-150400.14.3.4.x86_64.rpm">
          <filename>libxmlsec1-openssl1-1.2.37-150400.14.3.4.x86_64.rpm</filename>
        </package>
        <package name="xmlsec1" epoch="0" version="1.2.37" release="150400.14.3.4" arch="src" src="src/xmlsec1-1.2.37-150400.14.3.4.src.rpm">
          <filename>xmlsec1-1.2.37-150400.14.3.4.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2193</id>
    <title>Recommended update for snapper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683888938"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210150" id="1210150" title="snapper in SLE 15 has incorrect logic for qgroup rescans" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210151" id="1210151" title="snapper does not delete qgroups after snapshot/subvolume deletion" type="bugzilla"/>
    </references>
    <description>This update for snapper fixes the following issues:

- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
- wait for existing btrfs quota rescans to finish (bsc#1210150)
</description>
    <pkglist>
      <collection>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.3.1" arch="x86_64" src="x86_64/libsnapper5-0.8.16-150300.3.3.1.x86_64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="src" src="src/snapper-0.8.16-150300.3.3.1.src.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="x86_64" src="x86_64/snapper-0.8.16-150300.3.3.1.x86_64.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.3.1" arch="s390x" src="s390x/libsnapper5-0.8.16-150300.3.3.1.s390x.rpm">
          <filename>libsnapper5-0.8.16-150300.3.3.1.s390x.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="s390x" src="s390x/snapper-0.8.16-150300.3.3.1.s390x.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.3.1" arch="aarch64" src="aarch64/libsnapper5-0.8.16-150300.3.3.1.aarch64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.3.1" arch="aarch64" src="aarch64/snapper-0.8.16-150300.3.3.1.aarch64.rpm">
          <filename>snapper-0.8.16-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2918</id>
    <title>Recommended update for gpgme</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689847288"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1089497" id="1089497" title="libzypp tests failure with GnuPG 2.2.6" type="bugzilla"/>
    </references>
    <description>This update for gpgme fixes the following issues:

gpgme:

- Address failure handling issues when using gpg 2.2.6 via gpgme, as used by libzypp (bsc#1089497)
    
libassuan:

- Version upgrade to 2.5.5 in LTSS to address gpgme new requirements
</description>
    <pkglist>
      <collection>
        <package name="libassuan" epoch="0" version="2.5.5" release="150000.4.5.2" arch="src" src="src/libassuan-2.5.5-150000.4.5.2.src.rpm">
          <filename>libassuan-2.5.5-150000.4.5.2.src.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.5.2" arch="x86_64" src="x86_64/libassuan0-2.5.5-150000.4.5.2.x86_64.rpm">
          <filename>libassuan0-2.5.5-150000.4.5.2.x86_64.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.5.2" arch="s390x" src="s390x/libassuan0-2.5.5-150000.4.5.2.s390x.rpm">
          <filename>libassuan0-2.5.5-150000.4.5.2.s390x.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.5.2" arch="aarch64" src="aarch64/libassuan0-2.5.5-150000.4.5.2.aarch64.rpm">
          <filename>libassuan0-2.5.5-150000.4.5.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2140</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683635362"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204042" id="1204042" title="Missing modules with kernel-defaults-base" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210729" id="1210729" title="kernel-default-base is shipped for s390" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208822" id="1208822" title="[Build 20230301] openQA test fails in cve-2022-0185 (fsconfig03)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1142685" id="1142685" title="SLES 15 SP1 - next set of kernel patches in support of FATE 327775 [SCM/vpmem]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1155798" id="1155798" title="Placeholder bug for CPU scheduler backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174777" id="1174777" title="Disable NVMe kABI checkers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189999" id="1189999" title="Scheduler functional and performance backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203039" id="1203039" title="PVT:1030:virt:vPMEM: BTRFS reports read errors from multipath device after installing 5.14.21-150400.24.18 kernel [REGRESSION]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203325" id="1203325" title="[EAR - NOT FOR USA Citizens] workqueue issue rendering XFS and the system unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206649" id="1206649" title="[PATCH] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206891" id="1206891" title="[PATCH] ext4: fix corruption when online resizing a 1K bigalloc fs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206992" id="1206992" title="VUL-0: CVE-2022-2196: kernel-source,kernel-source-rt,kernel-source-azure: kvm: L2 can carry out Spectre v2 attacks on L1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207088" id="1207088" title="L3: Kernel BUG at ../lib/assoc_array.c:652 — ref:_00D1igLOd._5005qJQ2E6:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208076" id="1208076" title="[VT][Xen][15SP5-beta3] Sequential write on iozone(single thread) with 4k block size suffer 27%-49% regression on both xen PV/HV on all QA test boxes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208845" id="1208845" title="VUL-0: CVE-2023-23006: kernel-source-rt,kernel-source,kernel-source-azure: drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209615" id="1209615" title="VUL-0: CVE-2023-0386: kernel: FUSE filesystem low-privileged user privileges escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209693" id="1209693" title="[NetApp SLES15 SP4 Bug] Send Identify with CNS 06h only to I/O controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209739" id="1209739" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209871" id="1209871" title="VUL-0: CVE-2023-1670: kernel-source-rt,kernel-source-azure,kernel-source: Use after free bug in xirc2ps_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209927" id="1209927" title="backport sev-guest security fix for SNP into SLES15 for GCP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209999" id="1209999" title="SLES15 SP5 - [P10][DD2.0] - Wrong numa_node is assigned to vpmem device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210034" id="1210034" title="L3-Question: 1GB Hugepages are generated very slowly on SLES 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210158" id="1210158" title="ice / E810 issues with &gt;= 5.14.21-150400.24.41-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210202" id="1210202" title="VUL-0: CVE-2023-1855: kernel: use-after-free bug in remove function xgene_hwmon_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210206" id="1210206" title="DW PCIe driver update causes kABI breakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210301" id="1210301" title="VUL-0: kernel: cifs.ko out of bounds memory access in smb311_decode_neg_context()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210329" id="1210329" title="VUL-0: CVE-2023-30772: kernel: use after free bug in da9150_charger_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210336" id="1210336" title="VUL-0: CVE-2023-1989: kernel: Use after free bug in btsdio_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210337" id="1210337" title="VUL-0: CVE-2023-1990: kernel: Use after free bug in ndlc_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210439" id="1210439" title="signal handling: don't use BUG_ON() for debugging" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210453" id="1210453" title="VUL-0: CVE-2023-2008: kernel: udmabuf Improper Validation of Array Index Local Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210454" id="1210454" title="VUL-0: CVE-2023-2019: kernel: netdevsim Improper Update of Reference Count Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210469" id="1210469" title="Obsolete KMP obsoletes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210499" id="1210499" title="VUL-0: CVE-2023-0386: kernel live patch: FUSE filesystem low-privileged user privileges escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210506" id="1210506" title="VUL-0: CVE-2023-1998: kernel: x86/speculation: Allow enabling STIBP with legacy IBRS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210629" id="1210629" title="VUL-0: CVE-2023-2176: kernel: Slab-out-of-bound read in compare_netdev_and_ip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210630" id="1210630" title="VUL-0: CVE-2023-2176: kernel live patch: Slab-out-of-bound read in compare_netdev_and_ip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210725" id="1210725" title="NFS Null pointer with 5.14.21-150400.24.60" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210762" id="1210762" title="[PATCH] ext4: fix bad checksum after online resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210763" id="1210763" title="[PATCH] ext4: Fix possible corruption when moving a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210764" id="1210764" title="[PATCH] ext4: fix incorrect options show of original mount_opt and  extend mount_opt2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210765" id="1210765" title="[PATCH] ext4: fix cgroup writeback accounting with fs-layer  encryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210766" id="1210766" title="[PATCH] ext4: fix RENAME_WHITEOUT handling for inline directories" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210767" id="1210767" title="[PATCH] ext4: fix another off-by-one fsmap error on 1k block  filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210768" id="1210768" title="[PATCH] mm/filemap: fix page end in filemap_get_read_batch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210769" id="1210769" title="[PATCH] writeback, cgroup: fix null-ptr-deref write in  bdi_split_work_to_wbs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210770" id="1210770" title="[PATCH] udf: Support splicing to file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210771" id="1210771" title="[PATCH] udf: Check consistency of Space Bitmap Descriptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210793" id="1210793" title="Processes stuck waiting jbd2_fc_begin_commit prevent zombies from being killed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210816" id="1210816" title="signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210817" id="1210817" title="seccomp: Move copy_seccomp() to no failure path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210827" id="1210827" title="cgroup/cpuset: Wake up cpuset_attach_wq tasks in  cpuset_cancel_attach()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210943" id="1210943" title="Update Broadcom Emulex lpfc driver to 14.2.0.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210953" id="1210953" title="arm64: CPPC: high cpu overhead if FIE is enabled and registers are in PCC subspace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210986" id="1210986" title="VUL-0: CVE-2023-2235: kernel: use-after-free inside the Performance Events" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211025" id="1211025" title="mm: take a page reference when removing device exclusive entries" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" id="CVE-2023-2235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" id="CVE-2022-2196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" id="CVE-2023-23006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" id="CVE-2023-1670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" id="CVE-2023-2176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" id="CVE-2023-0386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" id="CVE-2023-1998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" id="CVE-2023-1855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" id="CVE-2023-30772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" id="CVE-2023-2019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" id="CVE-2023-2008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" id="CVE-2023-1989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" id="CVE-2023-1990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3750" id="PED-3750" title="https://jira.suse.com/browse/PED-3750" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3759" id="PED-3759" title="https://jira.suse.com/browse/PED-3759" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).
- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).
- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).
- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).
- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).

The following non-security bugs were fixed:

- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).
- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).
- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).
- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).
- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).
- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).
- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).
- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).
- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).
- ARM: dts: gta04: fix excess dma channel usage (git-fixes).
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).
- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).
- ASN.1: Fix check for strdup() success (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).
- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).
- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).
- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).
- KEYS: Add missing function documentation (git-fixes).
- KEYS: Create static version of public_key_verify_signature (git-fixes).
- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL (git-fixes).
- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).
- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match (git-fixes).
- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).
- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).
- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)
- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)
- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)
- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)
- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)
- Remove obsolete KMP obsoletes (bsc#1210469).
- Revert &quot;Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work&quot; (git-fixes).
- Revert &quot;pinctrl: amd: Disable and mask interrupts on resume&quot; (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).
- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).
- USB: serial: option: add Telit FE990 compositions (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).
- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).
- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).
- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).
- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).
- cifs: fix negotiate context parsing (bsc#1210301).
- clk: add missing of_node_put() in &quot;assigned-clocks&quot; property parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).
- clk: sprd: set max_register according to mapping range (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).
- crypto: caam - Clear some memory in instantiate_rng (git-fixes).
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).
- crypto: sa2ul - Select CRYPTO_DES (git-fixes).
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).
- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).
- drm/amd/display: Fix potential null dereference (git-fixes).
- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).
- drm/armada: Fix a potential double free in an error handling path (git-fixes).
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).
- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).
- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).
- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).
- drm/i915: Fix fast wake AUX sync len (git-fixes).
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).
- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).
- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).
- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).
- drm/probe-helper: Cancel previous job before starting new one (git-fixes).
- drm/rockchip: Drop unbalanced obj unref (git-fixes).
- drm/vgem: add missing mutex_destroy (git-fixes).
- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).
- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).
- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).
- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).
- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).
- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).
- ext4: Fix deadlock during directory rename (bsc#1210763).
- ext4: Fix possible corruption when moving a directory (bsc#1210763).
- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).
- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).
- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).
- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).
- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).
- ext4: fix possible double unlock when moving a directory (bsc#1210763).
- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).
- firmware: qcom_scm: Clear download bit during reboot (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).
- i2c: hisi: Avoid redundant interrupts (git-fixes).
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).
- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).
- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).
- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- k-m-s: Drop Linux 2.6 support
- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).
- kABI: x86/msi: Fix msi message data shadow struct (kabi).
- kabi/severities: ignore KABI for NVMe target (bsc#1174777).
- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- locking/rwbase: Mitigate indefinite writer starvation.
- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).
- media: max9286: Free control handler (git-fixes).
- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).
- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).
- media: venus: dec: Fix handling of the start cmd (git-fixes).
- memstick: fix memory leak if card device is never registered (git-fixes).
- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).
- mm: take a page reference when removing device exclusive entries (bsc#1211025).
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).
- mtd: core: fix error path for nvmem provider (git-fixes).
- mtd: core: fix nvmem error reporting (git-fixes).
- mtd: core: provide unique name for nvmem device, take two (git-fixes).
- mtd: spi-nor: Fix a trivial typo (git-fixes).
- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).
- nfsd: call op_release, even when op_func returns an error (git-fixes).
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).
- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).
- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).
- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).
- nvme-fcloop: fix &quot;inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W} usage&quot; (git-fixes).
- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).
- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).
- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).
- nvme-pci: fix doorbell buffer value endianness (git-fixes).
- nvme-pci: fix mempool alloc size (git-fixes).
- nvme-pci: fix page size checks (git-fixes).
- nvme-pci: fix timeout request state check (git-fixes).
- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).
- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).
- nvme: add device name to warning in uuid_show() (git-fixes).
- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).
- nvme: copy firmware_rev on each init (git-fixes).
- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvme: fix handling single range discard request (git-fixes).
- nvme: fix per-namespace chardev deletion (git-fixes).
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).
- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).
- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- nvme: move nvme_multi_css into nvme.h (git-fixes).
- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).
- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).
- nvme: set dma alignment to dword (git-fixes).
- nvme: use command_id instead of req-&gt;tag in trace_nvme_complete_rq() (git-fixes).
- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).
- nvmet-tcp: fix incomplete data digest send (git-fixes).
- nvmet-tcp: fix regression in data_digest calculation (git-fixes).
- nvmet: add helpers to set the result field for connect commands (git-fixes).
- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).
- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- nvmet: fix a memory leak (git-fixes).
- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).
- nvmet: fix a use-after-free (git-fixes).
- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).
- nvmet: force reconnect when number of queue changes (git-fixes).
- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).
- nvmet: only allocate a single slab for bvecs (git-fixes).
- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).
- perf/core: Fix the same task check in perf_event_set_output (git fixes).
- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).
- perf: fix perf_event_context-&gt;time (git fixes).
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).
- power: supply: cros_usbpd: reclassify &quot;default case!&quot; as debug (git-fixes).
- power: supply: generic-adc-battery: fix unit scaling (git-fixes).
- powerpc/64: Always build with 128-bit long double (bsc#1194869).
- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).
- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).
- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).
- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc: declare unmodified attribute_group usages const (git-fixes).
- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).
- regulator: fan53555: Explicitly include bits header (git-fixes).
- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).
- regulator: stm32-pwr: fix of_iomap leak (git-fixes).
- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).
- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).
- remoteproc: st: Call of_node_put() on iteration error (git-fixes).
- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).
- sched/fair: Fix imbalance overflow (bsc#1155798).
- sched/fair: Limit sched slice duration (bsc#1189999).
- sched/fair: Move calculate of avg_load to a better location (bsc#1155798).
- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).
- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).
- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999).
- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798).
- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039).
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).
- scsi: core: Fix a procfs host directory removal regression (git-fixes).
- scsi: core: Fix a source code comment (git-fixes).
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).
- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).
- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).
- scsi: ipr: Work around fortify-string warning (git-fixes).
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).
- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).
- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).
- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).
- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).
- scsi: mpt3sas: Fix a memory leak (git-fixes).
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).
- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).
- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).
- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).
- scsi: ses: Do not attach if enclosure has no components (git-fixes).
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).
- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).
- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).
- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).
- selftests: sigaltstack: fix -Wuninitialized (git-fixes).
- selinux: ensure av_permissions.h is built when needed (git-fixes).
- selinux: fix Makefile dependencies of flask.h (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).
- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).
- signal handling: do not use BUG_ON() for debugging (bsc#1210439).
- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).
- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).
- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Do not skip cleanup in remove's error path (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).
- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).
- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).
- udf: Support splicing to file (bsc#1210770).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).
- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).
- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).
- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).
- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).
- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).
- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).
- virtio_ring: do not update event idx on get_buf (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).
- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).
- wifi: ath6kl: minor fix for allocation size (git-fixes).
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).
- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).
- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).
- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).
- wifi: iwlwifi: fw: move memset before early return (git-fixes).
- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).
- wifi: iwlwifi: mvm: check firmware response size (git-fixes).
- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).
- wifi: iwlwifi: mvm: fix mvmtxq-&gt;stopped handling (git-fixes).
- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).
- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).
- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).
- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).
- wifi: mac80211: adjust scan cancel comment/check (git-fixes).
- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).
- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).
- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).
- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).
- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).
- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).
- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).
- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- x86/entry: Avoid very early RET (git-fixes).
- x86/entry: Do not call error_entry() for XENPV (git-fixes).
- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).
- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).
- x86/entry: Switch the stack after error_entry() returns (git-fixes).
- x86/fpu: Prevent FPU state corruption (git-fixes).
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).
- x86/msi: Fix msi message data shadow struct (git-fixes).
- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).
- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).
- x86/tsx: Disable TSX development mode at boot (git-fixes).
- x86: __memcpy_flushcache: fix wrong alignment if size &gt; 2^32 (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).

kernel-default-base changed:

- Do not ship on s390x (bsc#1210729)
- Add exfat (bsc#1208822)
- Add _diag modules for included socket types (bsc#1204042)
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.63.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.63.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.63.1.150400.24.27.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.63.1.150400.24.27.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.63.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.63.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.63.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.63.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.63.1.150400.24.27.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.63.1.150400.24.27.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2118</id>
    <title>Feature update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683318524"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3821" id="PED-3821" title="https://jira.suse.com/browse/PED-3821" type="jira"/>
    </references>
    <description>This update for haproxy fixes the following issues:

Update to version 2.4.22. (jsc#PED-3821):

* BUG/CRITICAL: http: properly reject empty http header field names
* CI: github: don't warn on deprecated openssl functions on windows
* BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
* DOC: proxy-protocol: fix wrong byte in provided example
* DOC: config: 'http-send-name-header' option may be used in default section
* DOC: config: fix option spop-check proxy compatibility
* BUG/MEDIUM: cache: use the correct time reference when comparing dates
* BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
* BUG/MINOR: ssl/crt-list: warn when a line is malformated
* BUG/MEDIUM: ssl: wrong eviction from the session cache tree
* BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
* BUG/MINOR: sink: free the forwarding task on exit
* BUILD: hpack: include global.h for the trash that is needed in debug mode
* BUG/MINOR: mux-h2: add missing traces on failed headers decoding
* BUG/MINOR: listener: close tiny race between resume_listener() and stopping
* DOC: config: fix &quot;Address formats&quot; chapter syntax
* BUG/MINOR: mux-fcgi: Correctly set pathinfo
* DOC: config: fix aliases for protocol prefixes &quot;udp4@&quot; and &quot;udp6@&quot;
* DOC: config: fix wrong section number for &quot;protocol prefixes&quot;
* BUG/MINOR: listeners: fix suspend/resume of inherited FDs
* BUG/MINOR: http-ana: make set-status also update txn-&gt;status
* BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
* BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
* BUG/MINOR: promex: Don't forget to consume the request on error
* BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
* BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
* CLEANUP: htx: fix a typo in an error message of http_str_to_htx
* BUG/MINOR: http: Memory leak of http redirect rules' format string
* REGTEST: fix the race conditions in hmac.vtc
* REGTEST: fix the race conditions in digest.vtc
* REGTEST: fix the race conditions in json_query.vtc
* BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
* BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
* BUILD: makefile: sort the features list
* BUILD: makefile: build the features list dynamically
* BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
* BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
* BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
* LICENSE: wurfl: clarify the dummy library license.
* BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
* REGTESTS: startup: check maxconn computation
* REGTESTS: fix the race conditions in iff.vtc
* BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
* DOC: promex: Add missing backend metrics
* MINOR: promex: introduce haproxy_backend_agg_check_status
* BUG/MINOR: promex: create haproxy_backend_agg_server_status
* BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
* BUG/MINOR: ssl: Fix potential overflow
* BUG/MEDIUM: ssl: Verify error codes can exceed 63
* BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
* BUILD: peers: peers-t.h depends on stick-table-t.h
* CI: github: change &quot;ubuntu-latest&quot; to &quot;ubuntu-20.04&quot;
* BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
* BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
* [RELEASE] Released version 2.4.20
* Revert &quot;CI: determine actual OpenSSL version dynamically&quot;
* Revert &quot;CI: switch to the &quot;latest&quot; LibreSSL&quot;
* SCRIPTS: announce-release: add a link to the data plane API
* DOC: config: clarify the -m dir and -m dom pattern matching methods
* DOC: config: clarify the fact that &quot;retries&quot; is not just for connections
* DOC: config: explain how default matching method for ACL works
* DOC: config: mention that a single monitor-uri rule is supported
* DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
* DOC: config: provide some configuration hints for &quot;http-reuse&quot;
* Revert &quot;BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action&quot;
* BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
* BUILD: http-htx: Silent build error about a possible NULL start-line
* BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
* BUG/MINOR: log: fix parse_log_message rfc5424 size check
* BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy &quot;from&quot; inheritance
* BUILD: listener: fix build warning on global_listener_rwlock without threads
* BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
* BUILD: peers: Remove unused variables
* BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
* BUG/MINOR: ssl: don't initialize the keylog callback when not required
* BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
* BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
* BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
* BUG/MEDIUM: ring: fix creation of server in uninitialized ring
* DOC: config: fix alphabetical ordering of global section
* REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
* BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
* BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
* BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
* BUG/MINOR: resolvers: Set port before IP address when processing SRV records
* BUG/MINOR: http-htx: Fix error handling during parsing http replies
* BUG/MEDIUM: wdt/clock: properly handle early task hangs
* CI: emit the compiler's version in the build reports
* CI: switch to the &quot;latest&quot; LibreSSL
* BUG/MINOR: ssl: ocsp structure not freed properly in case of error
* BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
* CI: add monthly gcc cross compile jobs
* BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
* BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
* BUG/MAJOR: stick-table: don't process store-response rules for applets
* DOC: management: add forgotten &quot;show startup-logs&quot;
* BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
* CI: SSL: temporarily stick to LibreSSL=3.5.3
* CI: SSL: use proper version generating when &quot;latest&quot; semantic is used
* BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
* BUG/MINOR: sink: Only use backend capability for the sink proxies
* BUG/MEDIUM: compression: handle rewrite errors when updating response headers
* BUG/MINOR: ring: Properly parse connect timeout
* BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
* CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
* CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
* BUG/MINOR: server: make sure &quot;show servers state&quot; hides private bits
* BUG/MAJOR: stick-tables: do not try to index a server name for applets
* DOC: configuration: missing 'if' in tcp-request content example
* BUG/MINOR: backend: only enforce turn-around state when not redispatching
* BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
* MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
* BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
* BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
* BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
* BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
* BUG/MEDIUM: lua: handle stick table implicit arguments right.
* BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
* DOC: config: Fix pgsql-check documentation to make user param mandatory
* BUG/MINOR: checks: update pgsql regex on auth packet
* [RELEASE] Released version 2.4.19
* BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
* REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
* BUG/MINOR: log: improper behavior when escaping log data
* SCRIPTS: announce-release: update some URLs to https
* BUILD: fd: fix a build warning on the DWCAS
* BUG/MEDIUM: captures: free() an error capture out of the proxy lock
* DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
* REGTESTS: ssl/log: test the log-forward with SSL
* BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
* REGTESTS: log: test the log-forward feature
* REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
* BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
* MINOR: listener: small API change
* BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
* CI: cirrus-ci: bump FreeBSD image to 13-1
* BUG/MINOR: signals/poller: ensure wakeup from signals
* BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
* BUG/MINOR: task: always reset a new tasklet's call date
* BUG/MINOR: h1: Support headers case adjustment for TCP proxies
* BUILD: makefile: enable crypt(3) for NetBSD
* BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
* BUG/MINOR: mux-fcgi: fix the &quot;show fd&quot; dest buffer for the subscriber
* BUG/MINOR: mux-h1: fix the &quot;show fd&quot; dest buffer for the subscriber
* BUG/MINOR: mux-h2: fix the &quot;show fd&quot; dest buffer for the subscriber
* BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
* REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
* BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
* BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
* BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
* BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
* BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
* BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
* BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
* DOC: configuration: do-resolve doesn't work with a port in the string
* REGTESTS: Fix prometheus script to perform HTTP health-checks
* BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
* BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
* BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
* BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
* BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
* BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
* BUILD: http: silence an uninitialized warning affecting gcc-5
* BUG/MEDIUM: ring: fix too lax 'size' parser
* BUILD: debug: silence warning on gcc-5
* BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
* BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
* BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
* BUG/MINOR: sink: fix a race condition between the writer and the reader
* BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
* BUG/MEDIUM: proxy: Perform a custom copy for default server settings
* REORG: server: Export srv_settings_cpy() function
* MINOR: server: Constify source server to copy its settings
* BUG/MEDIUM: dns: Properly initialize new DNS session
* BUG/MINOR: peers: Use right channel flag to consider the peer as connected
* BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
* MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
* BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
* MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
* MINOR: http-htx: Use new HTTP functions for the scheme based normalization
* BUG/MEDIUM: h1: Improve authority validation for CONNCET request
* MINOR: http: Add function to detect default port
* MINOR: http: Add function to get port part of a host
* BUG/MEDIUM: mworker: use default maxconn in wait mode
* [RELEASE] Released version 2.4.18
* BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
* BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
* BUILD: add detection for unsupported compiler models
* BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
* REGTESTS: Fix some scripts to be compatible with 2.4 and prior
* BUG/MINOR: tools: fix statistical_prng_range()'s output range
* BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
* BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
* BUG/MEDIUM: tools: avoid calling dlsym() in static builds
* MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
* BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
* BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
* BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
* REGTEESTS: filters: Fix CONNECT request in random-forwarding script
* BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
* BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
* BUG/MINOR: peers: fix possible NULL dereferences at config parsing
* BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
* BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
* BUG/MINOR: peers/config: always fill the bind_conf's argument
* MINOR: fd: Add BUG_ON checks on fd_insert()
* CI: re-enable gcc asan builds
* BUILD: Makefile: Add Lua 5.4 autodetect
* BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
* MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
* BUG/MINOR: http-fetch: Use integer value when possible in &quot;method&quot; sample fetch
* BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
* BUG/MINOR: ssl: Do not look for key in extra files if already in pem
* MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
* BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
* BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
* BUG/MINOR: cli/stats: add missing trailing LF after &quot;show info json&quot;
* BUG/MINOR: server: do not enable DNS resolution on disabled proxies
* BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
* REGTESTS: healthcheckmail: Relax health-check failure condition
* REGTESTS: healthcheckmail: Update the test to be functionnal again
* BUG/MINOR: checks: Properly handle email alerts in trace messages
* BUG/MINOR: trace: Test server existence for health-checks to get proxy
* BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
* BUILD: compiler: implement unreachable for older compilers too
* REGTESTS: restrict_req_hdr_names: Extend supported versions
* REGTESTS: http_abortonclose: Extend supported versions
* BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
* BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
* REGTESTS: http_request_buffer: Increase client timeout to wait &quot;slow&quot; clients
* REGTESTS: abortonclose: Add a barrier to not mix up log messages
* MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
* BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
* BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
* BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
* BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
* BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
* DOC: intro: adjust the numbering of paragrams to keep the output ordered
* DOC: peers: fix port number and addresses on new peers section format
* DOC: peers: clarify when entry expiration date is renewed.
* DOC: peers: indicate that some server settings are not usable
* SCRIPTS: make publish-release try to launch make-releases-json
* SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
* REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
* BUG/MEDIUM: sample: Fix adjusting size in word converter
* BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
* BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
* BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
* BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
* BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
* CI: determine actual OpenSSL version dynamically
* BUILD/MINOR: cpuset fix build for FreeBSD 13.1
* BUG/MINOR: peers: fix error reporting of &quot;bind&quot; lines
* BUG/MINOR: cfgparse: abort earlier in case of allocation error
* BUG/MINOR: check: Reinit the buffer wait list at the end of a check
* BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
* REGTESTS: abortonclose: Fix some race conditions
* BUG/MINOR: ssl: Fix crash when no private key is found in pem
* MINOR: tools: add get_exec_path implementation for solaris based systems.
* BUILD: fix build warning on solaris based systems with __maybe_unused.
* MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
* CI: determine actual LibreSSL version dynamically
* [RELEASE] Released version 2.4.17
* CLEANUP: mux-h1: Fix comments and error messages for global options
* BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
* BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
* BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
* DOC: install: update gcc version requirements
* BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
* BUILD: listener: shut report of possible null-deref in listener_accept()
* BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
* BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
* CI: dynamically determine actual version of h2spec
* DOC: fix typo &quot;ant&quot; for &quot;and&quot; in INSTALL
* BUG/MINOR: map/cli: make sure patterns don't vanish under &quot;show map&quot;'s init
* BUG/MINOR: map/cli: protect the backref list during &quot;show map&quot; errors
* BUG/MEDIUM: cli: make &quot;show cli sockets&quot; really yield
* BUG/MEDIUM: resolvers: make &quot;show resolvers&quot; properly yield
* BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
* DOC: config: Update doc for PR/PH session states to warn about rewrite failures
* MINOR: mux-h2: report a trace event when failing to create a new stream
* BUG/MINOR: mux-h2: mark the stream as open before processing it not after
* BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
* BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
* BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
* SCRIPTS: announce-release: add URL of dev packages
* CI: github actions: update LibreSSL to 3.5.2
* [RELEASE] Released version 2.4.16
* BUILD: opentracing: Fix OT build due to misuse of var_clear()
* BUILD: proto_uxst: do not set unused flag
* BUILD: sockpair: do not set unused flag
* BUILD: fd: remove unused variable totlen in fd_write_frag_line()
* CLEANUP: acl: Remove unused variable when releasing an acl expression
* BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
* BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
* BUILD: compiler: properly distinguish weak and global symbols
* REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
* MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
* MINOR: task: add a new task_instant_wakeup() function
* BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
* DOC: remove my name from the config doc
* BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
* BUG/MINOR: cache: Disable cache if applet creation fails
* SCRIPTS: announce-release: add shortened links to pending issues
* DOC: lua: update a few doc URLs
* SCRIPTS: announce-release: update the doc's URL
* BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
* BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
* BUG/MEDIUM: stream: do not abort connection setup too early
* BUILD: compiler: use a more portable set of asm(&quot;.weak&quot;) statements
* BUILD: sched: workaround crazy and dangerous warning in Clang 14
* BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
* BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
* BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
* BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
* BUG/MINOR: cache: do not display expired entries in &quot;show cache&quot;
* BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
* CI: cirrus: switch to FreeBSD-13.0
* CI: Update to actions/cache@v3
* CI: Update to actions/checkout@v3
* DEBUG: opentracing: show return values of all functions in the debug output
* CLEANUP: opentracing: added variable to store variable length
* CLEANUP: opentracing: added flt_ot_smp_init() function
* CLEANUP: opentracing: removed unused function flt_ot_var_get()
* CLEANUP: opentracing: removed unused function flt_ot_var_unset()
* DOC: opentracing: corrected comments in function descriptions
* EXAMPLES: opentracing: refined shell scripts for testing filter performance
* BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
* BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
* BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
* BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
* BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
* BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
* BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
* BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
* CI: github actions: update OpenSSL to 3.0.2
* BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
* BUG/MINOR: cli/stream: fix &quot;shutdown session&quot; to iterate over all threads
* BUG/MINOR: samples: add missing context names for sample fetch functions
* DOC: reflect H2 timeout changes
* BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
* MEDIUM: mux-h2: slightly relax timeout management rules
* BUG/MEDIUM: stream-int: do not rely on the connection error once established
* BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
* BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
* BUG/MINOR: tools: url2sa reads too far when no port nor path
* DOC: config: Explictly add supported MQTT versions
* MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
* BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
* BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
* CI: github actions: switch to LibreSSL-3.5.1
* BUG/MINOR: server/ssl: free the SNI sample expression
* BUG/MINOR: tools: fix url2sa return value with IPv4
* [RELEASE] Released version 2.4.15
* BUILD: tree-wide: mark a few numeric constants as explicitly long long
* DOC: Fix usage/examples of deprecated ACLs
* BUG/MINOR: stream: make the call_rate only count the no-progress calls
* BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
* BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
* DEBUG: stream: Fix stream trace message to print response buffer state
* DEBUG: stream: Add the missing descriptions for stream trace events
* BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
* DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
* BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
* BUG/MINOR: cli: shows correct mode in &quot;show sess&quot;
* BUG/MINOR: add missing modes in proxy_mode_str()
* BUILD: pools: fix backport of no-memory-trimming on non-linux OS
* MINOR: pools: add a new global option &quot;no-memory-trimming&quot;
* BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
* BUG/MINOR: pool: always align pool_heads to 64 bytes
* REGTESTS: fix the race conditions in secure_memcmp.vtc
* REGTESTS: fix the race conditions in normalize_uri.vtc
* BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
* CI: github actions: use cache for SSL libs
* CI: github actions: use cache for OpenTracing
* CI: github actions: add OpenTracing builds
* CI: github actions: add the output of $CC -dM -E-
* [RELEASE] Released version 2.4.14
* BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
* CI: github: enable pool debugging by default
* REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
* BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
* BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
* BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
* BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
* BUG/MINOR: tools: url2sa reads ipv4 too far
* BUG/MINOR: mailers: negotiate SMTP, not ESMTP
* CI: github actions: update OpenSSL to 3.0.1
* CI: github: switch to OpenSSL 3.0.0
* CI: github actions: relax OpenSSL-3.0.0 version comparision
* CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
* CI: github actions: add OpenSSL-3.0.0 builds
* BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
* BUILD: fix compilation for OpenSSL-3.0.0-alpha17
* CI: ssl: keep the old method for ancient OpenSSL versions
* CI: ssl: do not needlessly build the OpenSSL docs
* CI: ssl: enable parallel builds for OpenSSL on Linux
* BUG/MAJOR: compiler: relax alignment constraints on certain structures
* BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
* BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
* BUG/MINOR: sink: Use the right field in appctx context in release callback
* BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
* BUG/MEDIUM: mworker: close unused transferred FDs on load failure
* MINOR: sock: move the unused socket cleaning code into its own function
* [RELEASE] Released version 2.4.13
* BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
* BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
* REGTESTS: peers: leave a bit more time to peers to synchronize
* BUG/MAJOR: spoe: properly detach all agents when releasing the applet
* BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
* BUG/MEDIUM: listener: read-lock the listener during accept()
* MINOR: listener: replace the listener's spinlock with an rwlock
* BUG/MINOR: mworker: does not erase the pidfile upon reload
* BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
* DEBUG: pools: replace the link pointer with the caller's address on pool_free()
* DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
* DEBUG: pools: add extra sanity checks when picking objects from a local cache
* BUG/MINOR: pools: always flush pools about to be destroyed
* BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
* DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
* BUILD: debug/cli: condition test of O_ASYNC to its existence
* DEBUG: cli: add a new &quot;debug dev fd&quot; expert command
* MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
* BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
* BUG/MEDIUM: mcli: do not try to parse empty buffers
* BUG/MEDIUM: cli: Never wait for more data on client shutdown
* BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
* MINOR: channel: add new function co_getdelim() to support multiple delimiters
* MEDIUM: cli: yield between each pipelined command
* BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
* BUILD/MINOR: fix solaris build with clang.
* BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
* BUG/MEDIUM: connection: properly leave stopping list on error
* [RELEASE] Released version 2.4.12
* BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
* BUG/MEDIUM: mworker: don't use _getsocks in wait mode
* [RELEASE] Released version 2.4.11
* BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
* BUG/MINOR: cli: fix _getsocks with musl libc
* BUILD/MINOR: tools: solaris build fix on dladdr.
* BUILD/MINOR: cpuset FreeBSD 14 build fix.
* BUG/MEDIUM: ssl: free the ckch instance linked to a server
* BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
* MINOR: debug: add support for -dL to dump library names at boot
* MINOR: debug: add ability to dump loaded shared libraries
* MINOR: compat: detect support for dl_iterate_phdr()
* BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
* BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
* BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
* MINOR: proxy: add option idle-close-on-response
* REGTESTS: ssl: fix ssl_default_server.vtc
* BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
* DOC: fix misspelled keyword &quot;resolve_retries&quot; in resolvers
* BUILD: ssl: unbreak the build with newer libressl
* BUILD: cli: clear a maybe-unused  warning on some older compilers
* BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
* BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
* [RELEASE] Released version 2.4.10
* BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
* BUG/MINOR: backend: do not set sni on connection reuse
* MINOR: pools: work around possibly slow malloc_trim() during gc
* BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
* DOC: config: retry-on list is space-delimited
* DOC: config: Specify %Ta is only available in HTTP mode
* DOC: spoe: Clarify use of the event directive in spoe-message section
* BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
* IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
* BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
* MINOR: cli: &quot;show version&quot; displays the current process version
* CI: Github Actions: temporarily disable BoringSSL builds
* BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
* MINOR: mux-h1: Improve H1 traces by adding info about http parsers
* BUG/MAJOR: segfault using multiple log forward sections.
* BUG/MEDIUM: resolvers: Detach query item on response error
* BUG/MINOR: server: Don't rely on last default-server to init server SSL context
* BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
* BUILD/MINOR: server: fix compilation without SSL
* [RELEASE] Released version 2.4.9
* BUG/MINOR: cache: Fix loop on cache entries in &quot;show cache&quot;
* MINOR: promex: backend aggregated server check status
* MINOR: server: add ws keyword
* MEDIUM: server/backend: implement websocket protocol selection
* MINOR: connection: add alternative mux_ops param for conn_install_mux_be
* MINOR: connection: implement function to update ALPN
* MINOR: stream/mux: implement websocket stream flag
* BUG/MINOR: ssl: make SSL counters atomic
* MINOR: shctx: add a few BUG_ON() for consistency checks
* BUG/MINOR: shctx: do not look for available blocks when the first one is enough
* BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
* BUG/MEDIUM: cache/cli: make &quot;show cache&quot; thread-safe
* BUG/MEDIUM: mux-h2: always process a pending shut read
* BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
* CLEANUP: ssl: fix wrong #else commentary
* BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
* BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
* BUILD: makefile: simplify detection of libatomic
* BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
* BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
* BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
* BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
* BUG/MINOR: mworker: doesn't launch the program postparser
* BUG/MEDIUM: conn-stream: Don't reset CS flags on close
* MINOR: mux-h1: Slightly Improve H1 traces
* DOC: lua: Be explicit with the Reply object limits
* Revert &quot;BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back&quot;
* BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
* DOC: config: Fix typo in ssl_fc_unique_id description
* BUG/MINOR: cache: properly ignore unparsable max-age in quotes
* BUG/MINOR: resolvers: throw log message if trash not large enough for query
* BUG/MINOR: resolvers: fix sent messages were counted twice
* BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
* MINOR: mux-h2: add trace on extended connect usage
* MINOR: mux-h2: perform a full cycle shutdown+drain on close
* MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="src" src="src/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.src.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="x86_64" src="x86_64/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.x86_64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="s390x" src="s390x/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.s390x.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.s390x.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.13.1" arch="aarch64" src="aarch64/haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.aarch64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2234</id>
    <title>Security update for ovmf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684333353"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14560" id="CVE-2019-14560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38578" id="CVE-2021-38578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38578" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196741" id="1196741" title="VUL-0: CVE-2021-38578: ovmf: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174246" id="1174246" title="VUL-0: CVE-2019-14560: ovmf: improper check of GetEfiGlobalVariable2() return can potentially lead to to secure boot bypass" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205613" id="1205613" title="win 2k22 UEFI xen VMs  cannot boot in xen after upgrade" type="bugzilla"/>
    </references>
    <description>This update for ovmf fixes the following issues:

- CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize (bsc#1196741).
- CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2() return value (bsc#1174246).
- revert a patch to fix xen boot problems (bsc#1205613)
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202202" release="150400.5.10.1" arch="src" src="src/ovmf-202202-150400.5.10.1.src.rpm">
          <filename>ovmf-202202-150400.5.10.1.src.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202202" release="150400.5.10.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202202-150400.5.10.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202202-150400.5.10.1.noarch.rpm</filename>
        </package>
        <package name="qemu-uefi-aarch64" epoch="0" version="202202" release="150400.5.10.1" arch="noarch" src="noarch/qemu-uefi-aarch64-202202-150400.5.10.1.noarch.rpm">
          <filename>qemu-uefi-aarch64-202202-150400.5.10.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2133</id>
    <title>Recommended update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683632253"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206513" id="1206513" title="SLES 15 SP4 - zlib: add DFLTCC support for using inflate() with a small window" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issues:

- Add DFLTCC support for using inflate() with a small window (bsc#1206513)
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.42.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.42.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.42.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.42.1" arch="src" src="src/zlib-1.2.11-150000.3.42.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.42.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.42.1" arch="x86_64" src="x86_64/zlib-devel-1.2.11-150000.3.42.1.x86_64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.42.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.42.1" arch="s390x" src="s390x/libz1-1.2.11-150000.3.42.1.s390x.rpm">
          <filename>libz1-1.2.11-150000.3.42.1.s390x.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.42.1" arch="s390x" src="s390x/zlib-devel-1.2.11-150000.3.42.1.s390x.rpm">
          <filename>zlib-devel-1.2.11-150000.3.42.1.s390x.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.42.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.42.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.42.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.42.1" arch="aarch64" src="aarch64/zlib-devel-1.2.11-150000.3.42.1.aarch64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.42.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2341</id>
    <title>Recommended update for libsigc++2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685611902"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209094" id="1209094" title="L3-Question: file permissions changed after upgrade from SP1 to SP4 on SLES15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209140" id="1209140" title="Wrongly set executable permission for file /usr/share/doc/packages/libsigc-2_0-0/NEWS" type="bugzilla"/>
    </references>
    <description>This update for libsigc++2 fixes the following issues:

- Remove executable permission for file (bsc#1209094, bsc#1209140)
</description>
    <pkglist>
      <collection>
        <package name="libsigc++2" epoch="0" version="2.10.7" release="150400.3.3.1" arch="src" src="src/libsigc++2-2.10.7-150400.3.3.1.src.rpm">
          <filename>libsigc++2-2.10.7-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libsigc-2_0-0" epoch="0" version="2.10.7" release="150400.3.3.1" arch="x86_64" src="x86_64/libsigc-2_0-0-2.10.7-150400.3.3.1.x86_64.rpm">
          <filename>libsigc-2_0-0-2.10.7-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsigc-2_0-0" epoch="0" version="2.10.7" release="150400.3.3.1" arch="s390x" src="s390x/libsigc-2_0-0-2.10.7-150400.3.3.1.s390x.rpm">
          <filename>libsigc-2_0-0-2.10.7-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libsigc-2_0-0" epoch="0" version="2.10.7" release="150400.3.3.1" arch="aarch64" src="aarch64/libsigc-2_0-0-2.10.7-150400.3.3.1.aarch64.rpm">
          <filename>libsigc-2_0-0-2.10.7-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2224</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684310059"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2580" id="PED-2580" title="https://jira.suse.com/browse/PED-2580" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211230" id="1211230" title="VUL-0: EMBARGOED: CVE-2023-28319: curl:  use-after-free in SSH sha256 fingerprint check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211233" id="1211233" title="VUL-0: EMBARGOED: CVE-2023-28322: curl: POST-after-PUT confusion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211231" id="1211231" title="VUL-0: EMBARGOED: CVE-2023-28320: curl: siglongjmp race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211232" id="1211232" title="VUL-0: EMBARGOED: CVE-2023-28321: curl: IDN wildcard match" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28319" id="CVE-2023-28319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320" id="CVE-2023-28320" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321" id="CVE-2023-28321" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322" id="CVE-2023-28322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322" type="cve"/>
    </references>
    <description>This update for curl adds the following feature:

Update to version 8.0.1 (jsc#PED-2580)

- CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230).
- CVE-2023-28320: siglongjmp race condition (bsc#1211231).
- CVE-2023-28321: IDN wildcard matching (bsc#1211232).
- CVE-2023-28322: POST-after-PUT confusion (bsc#1211233).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="src" src="src/curl-8.0.1-150400.5.23.1.src.rpm">
          <filename>curl-8.0.1-150400.5.23.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.23.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.23.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.23.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.23.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.23.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.23.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.23.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.23.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.23.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.23.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.23.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.23.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.23.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.23.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.23.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2231</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684310943"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1142685" id="1142685" title="SLES 15 SP1 - next set of kernel patches in support of FATE 327775 [SCM/vpmem]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1155798" id="1155798" title="Placeholder bug for CPU scheduler backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174777" id="1174777" title="Disable NVMe kABI checkers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189999" id="1189999" title="Scheduler functional and performance backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203039" id="1203039" title="PVT:1030:virt:vPMEM: BTRFS reports read errors from multipath device after installing 5.14.21-150400.24.18 kernel [REGRESSION]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203325" id="1203325" title="[EAR - NOT FOR USA Citizens] workqueue issue rendering XFS and the system unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206649" id="1206649" title="[PATCH] udf: Fix a slab-out-of-bounds write bug in udf_find_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206891" id="1206891" title="[PATCH] ext4: fix corruption when online resizing a 1K bigalloc fs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207088" id="1207088" title="L3: Kernel BUG at ../lib/assoc_array.c:652 — ref:_00D1igLOd._5005qJQ2E6:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208076" id="1208076" title="[VT][Xen][15SP5-beta3] Sequential write on iozone(single thread) with 4k block size suffer 27%-49% regression on both xen PV/HV on all QA test boxes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208845" id="1208845" title="VUL-0: CVE-2023-23006: kernel-source-rt,kernel-source,kernel-source-azure: drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209615" id="1209615" title="VUL-0: CVE-2023-0386: kernel: FUSE filesystem low-privileged user privileges escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209693" id="1209693" title="[NetApp SLES15 SP4 Bug] Send Identify with CNS 06h only to I/O controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209739" id="1209739" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209871" id="1209871" title="VUL-0: CVE-2023-1670: kernel-source-rt,kernel-source-azure,kernel-source: Use after free bug in xirc2ps_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209927" id="1209927" title="backport sev-guest security fix for SNP into SLES15 for GCP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209999" id="1209999" title="SLES15 SP5 - [P10][DD2.0] - Wrong numa_node is assigned to vpmem device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210034" id="1210034" title="1GB Hugepages are generated very slowly on SLES 15 SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210158" id="1210158" title="ice / E810 issues with &gt;= 5.14.21-150400.24.41-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210202" id="1210202" title="VUL-0: CVE-2023-1855: kernel: use-after-free bug in remove function xgene_hwmon_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210206" id="1210206" title="DW PCIe driver update causes kABI breakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210301" id="1210301" title="VUL-0: kernel: cifs.ko out of bounds memory access in smb311_decode_neg_context()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210329" id="1210329" title="VUL-0: CVE-2023-30772: kernel: use after free bug in da9150_charger_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210336" id="1210336" title="VUL-0: CVE-2023-1989: kernel: Use after free bug in btsdio_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210337" id="1210337" title="VUL-0: CVE-2023-1990: kernel: Use after free bug in ndlc_remove due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210439" id="1210439" title="signal handling: don't use BUG_ON() for debugging" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210453" id="1210453" title="VUL-0: CVE-2023-2008: kernel: udmabuf Improper Validation of Array Index Local Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210454" id="1210454" title="VUL-0: CVE-2023-2019: kernel: netdevsim Improper Update of Reference Count Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210469" id="1210469" title="Obsolete KMP obsoletes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210506" id="1210506" title="VUL-0: CVE-2023-1998: kernel: x86/speculation: Allow enabling STIBP with legacy IBRS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210629" id="1210629" title="VUL-0: CVE-2023-2176: kernel: Slab-out-of-bound read in compare_netdev_and_ip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210725" id="1210725" title="NFS Null pointer with 5.14.21-150400.24.60" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210762" id="1210762" title="[PATCH] ext4: fix bad checksum after online resize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210763" id="1210763" title="[PATCH] ext4: Fix possible corruption when moving a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210764" id="1210764" title="[PATCH] ext4: fix incorrect options show of original mount_opt and  extend mount_opt2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210765" id="1210765" title="[PATCH] ext4: fix cgroup writeback accounting with fs-layer  encryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210766" id="1210766" title="[PATCH] ext4: fix RENAME_WHITEOUT handling for inline directories" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210767" id="1210767" title="[PATCH] ext4: fix another off-by-one fsmap error on 1k block  filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210768" id="1210768" title="[PATCH] mm/filemap: fix page end in filemap_get_read_batch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210769" id="1210769" title="[PATCH] writeback, cgroup: fix null-ptr-deref write in  bdi_split_work_to_wbs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210770" id="1210770" title="[PATCH] udf: Support splicing to file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210771" id="1210771" title="[PATCH] udf: Check consistency of Space Bitmap Descriptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210793" id="1210793" title="Processes stuck waiting jbd2_fc_begin_commit prevent zombies from being killed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210816" id="1210816" title="signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210817" id="1210817" title="seccomp: Move copy_seccomp() to no failure path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210827" id="1210827" title="cgroup/cpuset: Wake up cpuset_attach_wq tasks in  cpuset_cancel_attach()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210943" id="1210943" title="Update Broadcom Emulex lpfc driver to 14.2.0.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210953" id="1210953" title="arm64: CPPC: high cpu overhead if FIE is enabled and registers are in PCC subspace" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" id="CVE-2023-23006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" id="CVE-2023-1670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1670" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" id="CVE-2023-2176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" id="CVE-2023-0386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" id="CVE-2023-1998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1998" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" id="CVE-2023-1855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" id="CVE-2023-30772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" id="CVE-2023-2019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" id="CVE-2023-2008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" id="CVE-2023-1989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1989" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" id="CVE-2023-1990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1990" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3750" id="PED-3750" title="https://jira.suse.com/browse/PED-3750" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3759" id="PED-3759" title="https://jira.suse.com/browse/PED-3759" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206992" id="1206992" title="VUL-0: CVE-2022-2196: kernel-source,kernel-source-rt,kernel-source-azure: kvm: L2 can carry out Spectre v2 attacks on L1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210986" id="1210986" title="VUL-0: CVE-2023-2235: kernel: use-after-free inside the Performance Events" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211025" id="1211025" title="mm: take a page reference when removing device exclusive entries" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" id="CVE-2023-2235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" id="CVE-2022-2196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2196" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).
- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).
- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).
- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).
- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).

The following non-security bugs were fixed:

- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).
- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).
- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).
- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).
- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).
- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).
- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).
- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).
- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).
- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).
- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).
- ARM: dts: gta04: fix excess dma channel usage (git-fixes).
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).
- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).
- ASN.1: Fix check for strdup() success (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).
- Add 42a11bf5c543 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
- Add eee878537941 cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).
- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).
- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).
- KEYS: Add missing function documentation (git-fixes).
- KEYS: Create static version of public_key_verify_signature (git-fixes).
- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL (git-fixes).
- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).
- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match (git-fixes).
- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).
- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).
- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)
- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)
- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)
- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)
- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)
- Remove obsolete KMP obsoletes (bsc#1210469).
- Revert &quot;Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work&quot; (git-fixes).
- Revert &quot;pinctrl: amd: Disable and mask interrupts on resume&quot; (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).
- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).
- USB: serial: option: add Telit FE990 compositions (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).
- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).
- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).
- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).
- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).
- arm64: enable jump-label jump-label was disabled on arm64 by a backport error.
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).
- cifs: fix negotiate context parsing (bsc#1210301).
- clk: add missing of_node_put() in &quot;assigned-clocks&quot; property parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).
- clk: sprd: set max_register according to mapping range (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).
- config: arm64: enable ERRATUM_843419 Config option was incorrectly replaced by the rt-refresh-configs script
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).
- crypto: caam - Clear some memory in instantiate_rng (git-fixes).
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).
- crypto: sa2ul - Select CRYPTO_DES (git-fixes).
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).
- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).
- drm/amd/display: Fix potential null dereference (git-fixes).
- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).
- drm/armada: Fix a potential double free in an error handling path (git-fixes).
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).
- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).
- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).
- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).
- drm/i915: Fix fast wake AUX sync len (git-fixes).
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).
- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).
- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).
- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).
- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).
- drm/probe-helper: Cancel previous job before starting new one (git-fixes).
- drm/rockchip: Drop unbalanced obj unref (git-fixes).
- drm/vgem: add missing mutex_destroy (git-fixes).
- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).
- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).
- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).
- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).
- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).
- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).
- ext4: Fix deadlock during directory rename (bsc#1210763).
- ext4: Fix possible corruption when moving a directory (bsc#1210763).
- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).
- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).
- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).
- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).
- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).
- ext4: fix possible double unlock when moving a directory (bsc#1210763).
- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).
- firmware: qcom_scm: Clear download bit during reboot (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).
- i2c: hisi: Avoid redundant interrupts (git-fixes).
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).
- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).
- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).
- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- k-m-s: Drop Linux 2.6 support
- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).
- kABI: x86/msi: Fix msi message data shadow struct (kabi).
- kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users.
- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- locking/rwbase: Mitigate indefinite writer starvation.
- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).
- media: max9286: Free control handler (git-fixes).
- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).
- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).
- media: venus: dec: Fix handling of the start cmd (git-fixes).
- memstick: fix memory leak if card device is never registered (git-fixes).
- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).
- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).
- mm: take a page reference when removing device exclusive entries (bsc#1211025).
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).
- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).
- mtd: core: fix error path for nvmem provider (git-fixes).
- mtd: core: fix nvmem error reporting (git-fixes).
- mtd: core: provide unique name for nvmem device, take two (git-fixes).
- mtd: spi-nor: Fix a trivial typo (git-fixes).
- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).
- nfsd: call op_release, even when op_func returns an error (git-fixes).
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).
- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).
- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).
- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).
- nvme-fcloop: fix &quot;inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W} usage&quot; (git-fixes).
- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).
- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).
- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).
- nvme-pci: fix doorbell buffer value endianness (git-fixes).
- nvme-pci: fix mempool alloc size (git-fixes).
- nvme-pci: fix page size checks (git-fixes).
- nvme-pci: fix timeout request state check (git-fixes).
- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).
- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).
- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).
- nvme: add device name to warning in uuid_show() (git-fixes).
- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).
- nvme: copy firmware_rev on each init (git-fixes).
- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvme: fix handling single range discard request (git-fixes).
- nvme: fix per-namespace chardev deletion (git-fixes).
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).
- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).
- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- nvme: move nvme_multi_css into nvme.h (git-fixes).
- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).
- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).
- nvme: set dma alignment to dword (git-fixes).
- nvme: use command_id instead of req-&gt;tag in trace_nvme_complete_rq() (git-fixes).
- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).
- nvmet-tcp: fix incomplete data digest send (git-fixes).
- nvmet-tcp: fix regression in data_digest calculation (git-fixes).
- nvmet: add helpers to set the result field for connect commands (git-fixes).
- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).
- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- nvmet: fix a memory leak (git-fixes).
- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).
- nvmet: fix a use-after-free (git-fixes).
- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).
- nvmet: force reconnect when number of queue changes (git-fixes).
- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).
- nvmet: only allocate a single slab for bvecs (git-fixes).
- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).
- perf/core: Fix the same task check in perf_event_set_output (git fixes).
- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).
- perf: fix perf_event_context-&gt;time (git fixes).
- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).
- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).
- power: supply: cros_usbpd: reclassify &quot;default case!&quot; as debug (git-fixes).
- power: supply: generic-adc-battery: fix unit scaling (git-fixes).
- powerpc/64: Always build with 128-bit long double (bsc#1194869).
- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).
- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).
- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).
- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
- powerpc: declare unmodified attribute_group usages const (git-fixes).
- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).
- regulator: fan53555: Explicitly include bits header (git-fixes).
- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).
- regulator: stm32-pwr: fix of_iomap leak (git-fixes).
- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).
- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).
- remoteproc: st: Call of_node_put() on iteration error (git-fixes).
- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).
- sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)).
- sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)).
- sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)).
- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).
- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).
- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)).
- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)).
- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream)
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).
- scsi: core: Fix a procfs host directory removal regression (git-fixes).
- scsi: core: Fix a source code comment (git-fixes).
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).
- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).
- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).
- scsi: ipr: Work around fortify-string warning (git-fixes).
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).
- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).
- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).
- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).
- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).
- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).
- scsi: mpt3sas: Fix a memory leak (git-fixes).
- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).
- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).
- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).
- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).
- scsi: ses: Do not attach if enclosure has no components (git-fixes).
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).
- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).
- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).
- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).
- selftests: sigaltstack: fix -Wuninitialized (git-fixes).
- selinux: ensure av_permissions.h is built when needed (git-fixes).
- selinux: fix Makefile dependencies of flask.h (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).
- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).
- signal handling: do not use BUG_ON() for debugging (bsc#1210439).
- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).
- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).
- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Do not skip cleanup in remove's error path (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).
- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- supported.conf: declaring usb_f_ncm supported as requested in (jsc#PED-3750) Support for the legacy functionality g_ncm is still under discussion (see jsc-PED#3200) For maintainance see (jsc#PED-3759)
- supported.conf: support u_ether and libcomposite (jsc-PED#3750) This is necessary for g_ncm (for maintainance see jsc-PED#3759)
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).
- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).
- udf: Support splicing to file (bsc#1210770).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).
- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).
- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).
- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).
- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).
- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).
- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).
- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).
- virtio_ring: do not update event idx on get_buf (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).
- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).
- wifi: ath6kl: minor fix for allocation size (git-fixes).
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).
- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).
- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).
- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).
- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).
- wifi: iwlwifi: fw: move memset before early return (git-fixes).
- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).
- wifi: iwlwifi: mvm: check firmware response size (git-fixes).
- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).
- wifi: iwlwifi: mvm: fix mvmtxq-&gt;stopped handling (git-fixes).
- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).
- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).
- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).
- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).
- wifi: mac80211: adjust scan cancel comment/check (git-fixes).
- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).
- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).
- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).
- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).
- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).
- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).
- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).
- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- x86/entry: Avoid very early RET (git-fixes).
- x86/entry: Do not call error_entry() for XENPV (git-fixes).
- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).
- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).
- x86/entry: Switch the stack after error_entry() returns (git-fixes).
- x86/fpu: Prevent FPU state corruption (git-fixes).
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).
- x86/msi: Fix msi message data shadow struct (git-fixes).
- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).
- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).
- x86/tsx: Disable TSX development mode at boot (git-fixes).
- x86: __memcpy_flushcache: fix wrong alignment if size &gt; 2^32 (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.28.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.28.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.28.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.28.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.28.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.28.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2254</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684502462"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210298" id="1210298" title="VUL-0: containerd: go1.18 is EOL" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

- Rebuild containerd with a current version of go to catch up on bugfixes and security fixes (bsc#1210298)
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="src" src="src/containerd-1.6.19-150000.90.3.src.rpm">
          <filename>containerd-1.6.19-150000.90.3.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="x86_64" src="x86_64/containerd-1.6.19-150000.90.3.x86_64.rpm">
          <filename>containerd-1.6.19-150000.90.3.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="s390x" src="s390x/containerd-1.6.19-150000.90.3.s390x.rpm">
          <filename>containerd-1.6.19-150000.90.3.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.19" release="150000.90.3" arch="aarch64" src="aarch64/containerd-1.6.19-150000.90.3.aarch64.rpm">
          <filename>containerd-1.6.19-150000.90.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2325</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685455124"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="src" src="src/cni-0.7.1-150100.3.10.1.src.rpm">
          <filename>cni-0.7.1-150100.3.10.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.10.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.10.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="s390x" src="s390x/cni-0.7.1-150100.3.10.1.s390x.rpm">
          <filename>cni-0.7.1-150100.3.10.1.s390x.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.10.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.10.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2324</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685454806"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.13.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.13.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="s390x" src="s390x/cni-plugins-0.8.6-150100.3.13.1.s390x.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.s390x.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.13.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.13.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2157</id>
    <title>Security update for conmon</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683717701"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of conmon fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="src" src="src/conmon-2.1.5-150400.3.8.1.src.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="x86_64" src="x86_64/conmon-2.1.5-150400.3.8.1.x86_64.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="s390x" src="s390x/conmon-2.1.5-150400.3.8.1.s390x.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.8.1" arch="aarch64" src="aarch64/conmon-2.1.5-150400.3.8.1.aarch64.rpm">
          <filename>conmon-2.1.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2139</id>
    <title>Security update for ignition</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1683634873"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of ignition fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.15.0" release="150400.4.2.1" arch="src" src="src/ignition-2.15.0-150400.4.2.1.src.rpm">
          <filename>ignition-2.15.0-150400.4.2.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.15.0" release="150400.4.2.1" arch="x86_64" src="x86_64/ignition-2.15.0-150400.4.2.1.x86_64.rpm">
          <filename>ignition-2.15.0-150400.4.2.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.15.0" release="150400.4.2.1" arch="x86_64" src="x86_64/ignition-dracut-grub2-2.15.0-150400.4.2.1.x86_64.rpm">
          <filename>ignition-dracut-grub2-2.15.0-150400.4.2.1.x86_64.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.15.0" release="150400.4.2.1" arch="s390x" src="s390x/ignition-2.15.0-150400.4.2.1.s390x.rpm">
          <filename>ignition-2.15.0-150400.4.2.1.s390x.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.15.0" release="150400.4.2.1" arch="s390x" src="s390x/ignition-dracut-grub2-2.15.0-150400.4.2.1.s390x.rpm">
          <filename>ignition-dracut-grub2-2.15.0-150400.4.2.1.s390x.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.15.0" release="150400.4.2.1" arch="aarch64" src="aarch64/ignition-2.15.0-150400.4.2.1.aarch64.rpm">
          <filename>ignition-2.15.0-150400.4.2.1.aarch64.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.15.0" release="150400.4.2.1" arch="aarch64" src="aarch64/ignition-dracut-grub2-2.15.0-150400.4.2.1.aarch64.rpm">
          <filename>ignition-dracut-grub2-2.15.0-150400.4.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2256</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684502840"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200441" id="1200441" title="go1.19 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of runc fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="src" src="src/runc-1.1.5-150000.43.1.src.rpm">
          <filename>runc-1.1.5-150000.43.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="x86_64" src="x86_64/runc-1.1.5-150000.43.1.x86_64.rpm">
          <filename>runc-1.1.5-150000.43.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="s390x" src="s390x/runc-1.1.5-150000.43.1.s390x.rpm">
          <filename>runc-1.1.5-150000.43.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.5" release="150000.43.1" arch="aarch64" src="aarch64/runc-1.1.5-150000.43.1.aarch64.rpm">
          <filename>runc-1.1.5-150000.43.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2761</id>
    <title>Recommended update for libjansson</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688390234"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201817" id="1201817" title="Update libjansson from 2.9 to 2.14 on Leap" type="bugzilla"/>
    </references>
    <description>This update for libjansson fixes the following issues:

- Update to 2.14 (bsc#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
      corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime version checking
    + Add json_object_update_new(), json_object_update_existing_new()
      and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
      that can be omitted if null 
    + Add `json_error_code()` to retrieve numeric error codes
    + Enable thread safety for `json_dump()` on all systems.
      Enable thread safe `json_decref()` and `json_incref()` for
      modern compilers 
    + Add `json_sprintf()` and `json_vsprintf()` 
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object 
    + Avoid invalid memory read in `json_pack()` 
    + Call va_end after va_copy in `json_vsprintf()` 
    + Improve handling of formats with '?' and '*' in `json_pack()`
    + Remove inappropriate `jsonp_free()` which caused
      segmentation fault in error handling 
    + Fix incorrect report of success from `json_dump_file()` when
      an error is returned by `fclose()` 
    + Make json_equal() const-correct 
    + Fix incomplete stealing of references by `json_pack()` 
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.
</description>
    <pkglist>
      <collection>
        <package name="libjansson" epoch="0" version="2.14" release="150000.3.3.1" arch="src" src="src/libjansson-2.14-150000.3.3.1.src.rpm">
          <filename>libjansson-2.14-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.3.1" arch="x86_64" src="x86_64/libjansson4-2.14-150000.3.3.1.x86_64.rpm">
          <filename>libjansson4-2.14-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.3.1" arch="s390x" src="s390x/libjansson4-2.14-150000.3.3.1.s390x.rpm">
          <filename>libjansson4-2.14-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.3.1" arch="aarch64" src="aarch64/libjansson4-2.14-150000.3.3.1.aarch64.rpm">
          <filename>libjansson4-2.14-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2585</id>
    <title>Security update for salt and python-pyzmq</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687349845"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-666" id="MSQA-666" title="https://jira.suse.com/browse/MSQA-666" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186945" id="1186945" title="python3-jupyter_console has a missing requirement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207071" id="1207071" title="[Build 20230111] fails to start salt: AttributeError: 'EntryPoints' object has no attribute 'items'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209233" id="1209233" title="salt 3005.1: Need to add python3-jmespath to python3-salt's RPM Requires" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211612" id="1211612" title="salt update to 3006 has excessively tight requirements for python-pyzmq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211754" id="1211754" title="SLE Micro 5.x: Module function `transactional_update.pkg_install` is not available" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212516" id="1212516" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212517" id="1212517" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-4361" id="PED-4361" title="https://jira.suse.com/browse/PED-4361" type="jira"/>
    </references>
    <description>This update for salt and python-pyzmq fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for &quot;importlib-metadata&gt;=5.0.0&quot; (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)

python-pyzmq:

- Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)
</description>
    <pkglist>
      <collection>
        <package name="python-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="src" src="src/python-pyzmq-17.1.2-150000.3.5.2.src.rpm">
          <filename>python-pyzmq-17.1.2-150000.3.5.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="x86_64" src="x86_64/python3-pyzmq-17.1.2-150000.3.5.2.x86_64.rpm">
          <filename>python3-pyzmq-17.1.2-150000.3.5.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="s390x" src="s390x/python3-pyzmq-17.1.2-150000.3.5.2.s390x.rpm">
          <filename>python3-pyzmq-17.1.2-150000.3.5.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-pyzmq" epoch="0" version="17.1.2" release="150000.3.5.2" arch="aarch64" src="aarch64/python3-pyzmq-17.1.2-150000.3.5.2.aarch64.rpm">
          <filename>python3-pyzmq-17.1.2-150000.3.5.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2571</id>
    <title>Security update for Salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687346842"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-666" id="MSQA-666" title="https://jira.suse.com/browse/MSQA-666" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207071" id="1207071" title="[Build 20230111] fails to start salt: AttributeError: 'EntryPoints' object has no attribute 'items'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209233" id="1209233" title="salt 3005.1: Need to add python3-jmespath to python3-salt's RPM Requires" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211612" id="1211612" title="salt update to 3006 has excessively tight requirements for python-pyzmq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211754" id="1211754" title="SLE Micro 5.x: Module function `transactional_update.pkg_install` is not available" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212516" id="1212516" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212517" id="1212517" title="Salt &lt;= 3000: Empty highstate due to missing compatibility layer with Salt 3006" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-4361" id="PED-4361" title="https://jira.suse.com/browse/PED-4361" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for &quot;importlib-metadata&gt;=5.0.0&quot; (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
    
python-jmespath:
    
- Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt
  (no source changes)
    
python-ply:
    
- Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath
  (no source changes)
 </description>
    <pkglist>
      <collection>
        <package name="python-jmespath" epoch="0" version="0.9.3" release="150000.3.3.4" arch="src" src="src/python-jmespath-0.9.3-150000.3.3.4.src.rpm">
          <filename>python-jmespath-0.9.3-150000.3.3.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python-ply" epoch="0" version="3.10" release="150000.3.3.4" arch="src" src="src/python-ply-3.10-150000.3.3.4.src.rpm">
          <filename>python-ply-3.10-150000.3.3.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="src" src="src/python-simplejson-3.17.2-150300.3.2.3.src.rpm">
          <filename>python-simplejson-3.17.2-150300.3.2.3.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-jmespath" epoch="0" version="0.9.3" release="150000.3.3.4" arch="noarch" src="noarch/python3-jmespath-0.9.3-150000.3.3.4.noarch.rpm">
          <filename>python3-jmespath-0.9.3-150000.3.3.4.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-ply" epoch="0" version="3.10" release="150000.3.3.4" arch="noarch" src="noarch/python3-ply-3.10-150000.3.3.4.noarch.rpm">
          <filename>python3-ply-3.10-150000.3.3.4.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="x86_64" src="x86_64/python3-simplejson-3.17.2-150300.3.2.3.x86_64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.2.3.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="src" src="src/salt-3006.0-150400.8.34.2.src.rpm">
          <filename>salt-3006.0-150400.8.34.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/salt-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>salt-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.34.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.34.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.34.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.34.2.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.34.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="s390x" src="s390x/python3-simplejson-3.17.2-150300.3.2.3.s390x.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.2.3.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="s390x" src="s390x/salt-3006.0-150400.8.34.2.s390x.rpm">
          <filename>salt-3006.0-150400.8.34.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.34.2" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.34.2.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.34.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.34.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.34.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.34.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.2.3" arch="aarch64" src="aarch64/python3-simplejson-3.17.2-150300.3.2.3.aarch64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.2.3.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/salt-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>salt-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.34.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.34.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.34.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2214</id>
    <title>Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684228621"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210906" id="1210906" title="[Kubevirt][PublicBeta][Build72.4] Unable to execute QEMU command 'migrate-set-capabilities'" type="bugzilla"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

- Always render block devices in hp-volume- pod template
- Detect ServiceMonitor and PrometheusRule CRDs
- TSC frequencies: add 250PPM tolerance (bsc#1210906)
- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.16.1" arch="src" src="src/kubevirt-0.54.0-150400.3.16.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.16.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.16.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.16.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.16.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.16.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.16.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2236</id>
    <title>Security update for python-looseversion</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684334667"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-666" id="MSQA-666" title="https://jira.suse.com/browse/MSQA-666" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4360" id="PED-4360" title="https://jira.suse.com/browse/PED-4360" type="jira"/>
    </references>
    <description>This update for python-looseversion fixes the following issues:

- Provide python-looseversion version 1.0.2 as new Salt 3006 dependency. (jsc#PED-4360)
</description>
    <pkglist>
      <collection>
        <package name="python-looseversion" epoch="0" version="1.0.2" release="150100.3.3.1" arch="src" src="src/python-looseversion-1.0.2-150100.3.3.1.src.rpm">
          <filename>python-looseversion-1.0.2-150100.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-looseversion" epoch="0" version="1.0.2" release="150100.3.3.1" arch="noarch" src="noarch/python3-looseversion-1.0.2-150100.3.3.1.noarch.rpm">
          <filename>python3-looseversion-1.0.2-150100.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2237</id>
    <title>Recommended update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684336270"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211144" id="1211144" title="[Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim" type="bugzilla"/>
    </references>
    <description>This update for vim fixes the following issues:

* Make xxd conflict with the previous vim packages to avoid a file conflict during migration (bsc#1211144)
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="src" src="src/vim-9.0.1443-150000.5.43.1.src.rpm">
          <filename>vim-9.0.1443-150000.5.43.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="noarch" src="noarch/vim-data-common-9.0.1443-150000.5.43.1.noarch.rpm">
          <filename>vim-data-common-9.0.1443-150000.5.43.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="x86_64" src="x86_64/vim-small-9.0.1443-150000.5.43.1.x86_64.rpm">
          <filename>vim-small-9.0.1443-150000.5.43.1.x86_64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="x86_64" src="x86_64/xxd-9.0.1443-150000.5.43.1.x86_64.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="s390x" src="s390x/vim-small-9.0.1443-150000.5.43.1.s390x.rpm">
          <filename>vim-small-9.0.1443-150000.5.43.1.s390x.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="s390x" src="s390x/xxd-9.0.1443-150000.5.43.1.s390x.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.s390x.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="ppc64le" src="ppc64le/xxd-9.0.1443-150000.5.43.1.ppc64le.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.ppc64le.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="aarch64" src="aarch64/vim-small-9.0.1443-150000.5.43.1.aarch64.rpm">
          <filename>vim-small-9.0.1443-150000.5.43.1.aarch64.rpm</filename>
        </package>
        <package name="xxd" epoch="0" version="9.0.1443" release="150000.5.43.1" arch="aarch64" src="aarch64/xxd-9.0.1443-150000.5.43.1.aarch64.rpm">
          <filename>xxd-9.0.1443-150000.5.43.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2262</id>
    <title>Recommended update for nftables</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684749593"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210773" id="1210773" title="firewalld: crash in libnftables when trying to apply a rich reject rules based on MAC address" type="bugzilla"/>
    </references>
    <description>This update for nftables fixes the following issue:

- A crash in nftables if layer2 reject rules are processed (bsc#1210773).
</description>
    <pkglist>
      <collection>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150300.3.6.1" arch="x86_64" src="x86_64/libnftables1-0.9.8-150300.3.6.1.x86_64.rpm">
          <filename>libnftables1-0.9.8-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="src" src="src/nftables-0.9.8-150300.3.6.1.src.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="x86_64" src="x86_64/nftables-0.9.8-150300.3.6.1.x86_64.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="x86_64" src="x86_64/python3-nftables-0.9.8-150300.3.6.1.x86_64.rpm">
          <filename>python3-nftables-0.9.8-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150300.3.6.1" arch="s390x" src="s390x/libnftables1-0.9.8-150300.3.6.1.s390x.rpm">
          <filename>libnftables1-0.9.8-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="s390x" src="s390x/nftables-0.9.8-150300.3.6.1.s390x.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="s390x" src="s390x/python3-nftables-0.9.8-150300.3.6.1.s390x.rpm">
          <filename>python3-nftables-0.9.8-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150300.3.6.1" arch="aarch64" src="aarch64/libnftables1-0.9.8-150300.3.6.1.aarch64.rpm">
          <filename>libnftables1-0.9.8-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="aarch64" src="aarch64/nftables-0.9.8-150300.3.6.1.aarch64.rpm">
          <filename>nftables-0.9.8-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150300.3.6.1" arch="aarch64" src="aarch64/python3-nftables-0.9.8-150300.3.6.1.aarch64.rpm">
          <filename>python3-nftables-0.9.8-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2235</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684334142"/>
    <references/>
    <description>This update for selinux-policy fixes the following issue:

- Prevent labeling of overlayfs mountpoint.
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20221019" release="150400.4.3.1" arch="noarch" src="noarch/selinux-policy-20221019-150400.4.3.1.noarch.rpm">
          <filename>selinux-policy-20221019-150400.4.3.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20221019" release="150400.4.3.1" arch="src" src="src/selinux-policy-20221019-150400.4.3.1.src.rpm">
          <filename>selinux-policy-20221019-150400.4.3.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20221019" release="150400.4.3.1" arch="noarch" src="noarch/selinux-policy-devel-20221019-150400.4.3.1.noarch.rpm">
          <filename>selinux-policy-devel-20221019-150400.4.3.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20221019" release="150400.4.3.1" arch="noarch" src="noarch/selinux-policy-targeted-20221019-150400.4.3.1.noarch.rpm">
          <filename>selinux-policy-targeted-20221019-150400.4.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2279</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684907899"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210640" id="1210640" title="dracut network-legacy creates lease info file without IP version suffix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204478" id="1204478" title="unable to boot on fips mode with  disk encryption" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="src" src="src/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.src.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="x86_64" src="x86_64/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="s390x" src="s390x/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.s390x.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="s390x" src="s390x/dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.s390x.rpm">
          <filename>dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.s390x.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="s390x" src="s390x/dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.s390x.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="aarch64" src="aarch64/dracut-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm">
          <filename>dracut-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.342.g2e6dce8e" release="150400.3.22.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.342.g2e6dce8e-150400.3.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2243</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684413684"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208479" id="1208479" title="VUL-0: CVE-2022-33972: ucode-intel: kernel: Intel firmware update for incorrect calculation in microcode keying mechanism" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211382" id="1211382" title="VUL-0: ucode-intel: 20230512  release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33972" id="CVE-2022-33972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33972" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382).
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
- Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20230512" release="150200.24.1" arch="src" src="src/ucode-intel-20230512-150200.24.1.src.rpm">
          <filename>ucode-intel-20230512-150200.24.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20230512" release="150200.24.1" arch="x86_64" src="x86_64/ucode-intel-20230512-150200.24.1.x86_64.rpm">
          <filename>ucode-intel-20230512-150200.24.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2276</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1684907723"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208581" id="1208581" title="SAP LPAR deployment with 90 cores with PowerVS fail to boot with SRC B2008105" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204563" id="1204563" title="grub2-once --list outputs sh: line 1: terminal_output: command not found" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563) 

- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="src" src="src/grub2-2.06-150400.11.33.1.src.rpm">
          <filename>grub2-2.06-150400.11.33.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.33.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.33.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="s390x" src="s390x/grub2-2.06-150400.11.33.1.s390x.rpm">
          <filename>grub2-2.06-150400.11.33.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150400.11.33.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150400.11.33.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150400.11.33.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.33.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.33.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.33.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.33.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.33.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.33.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2307</id>
    <title>Recommended update for kbd</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685349012"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210702" id="1210702" title="Update keyboard layouts 'korean' and 'arabic'" type="bugzilla"/>
    </references>
    <description>This update for kbd fixes the following issue:

- Add 'ara' vc keymap, 'ara' is slightly better than 'arabic' as it matches the name of its X11 layout counterpart. (bsc#1210702)
</description>
    <pkglist>
      <collection>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="src" src="src/kbd-2.4.0-150400.5.6.1.src.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="x86_64" src="x86_64/kbd-2.4.0-150400.5.6.1.x86_64.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="kbd-legacy" epoch="0" version="2.4.0" release="150400.5.6.1" arch="noarch" src="noarch/kbd-legacy-2.4.0-150400.5.6.1.noarch.rpm">
          <filename>kbd-legacy-2.4.0-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="s390x" src="s390x/kbd-2.4.0-150400.5.6.1.s390x.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="kbd" epoch="0" version="2.4.0" release="150400.5.6.1" arch="aarch64" src="aarch64/kbd-2.4.0-150400.5.6.1.aarch64.rpm">
          <filename>kbd-2.4.0-150400.5.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2786</id>
    <title>Recommended update for openssl-ibmca</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688562124"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209038" id="1209038" title="openssl-ibmca for openSSL 1.1.1l configuration issue upon package installation (regression)" type="bugzilla"/>
    </references>
    <description>This update for openssl-ibmca fixes the following issues:

- Updated BuildRequires for libica-devel and libica-tools to &gt;= 4.0.0 

- Added dependency on libica4 (bsc#1209038)
</description>
    <pkglist>
      <collection>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.11.1" arch="s390x" src="s390x/openssl-ibmca-2.4.0-150400.4.11.1.s390x.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.11.1.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.11.1" arch="src" src="src/openssl-ibmca-2.4.0-150400.4.11.1.src.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.11.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2649</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687852959"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- update to 0.371:
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.371" release="150000.3.62.1" arch="noarch" src="noarch/hwdata-0.371-150000.3.62.1.noarch.rpm">
          <filename>hwdata-0.371-150000.3.62.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.371" release="150000.3.62.1" arch="src" src="src/hwdata-0.371-150000.3.62.1.src.rpm">
          <filename>hwdata-0.371-150000.3.62.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2482</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686547215"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211272" id="1211272" title="%sysctl_apply() and %binfmt_apply() rpm macros provided by systemd can incorrectly operate in a chroot" type="bugzilla"/>
    </references>
    <description>This update for systemd-rpm-macros fixes the following issues:

- Adjust functions so they are disabled when called from a chroot (bsc#1211272)
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="13" release="150000.7.33.1" arch="noarch" src="noarch/systemd-rpm-macros-13-150000.7.33.1.noarch.rpm">
          <filename>systemd-rpm-macros-13-150000.7.33.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="13" release="150000.7.33.1" arch="src" src="src/systemd-rpm-macros-13-150000.7.33.1.src.rpm">
          <filename>systemd-rpm-macros-13-150000.7.33.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2510</id>
    <title>Recommended update for drbd-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686747942"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209783" id="1209783" title="drbd-utils: crm-fence-peer incompatible with Pacemaker 2.1 and need backport 854a5f6 and 8a28be7" type="bugzilla"/>
    </references>
    <description>This update for drbd-utils fixes the following issues:

- Improve compatibility with Pacemaker 2.1 (bsc#1209783)
</description>
    <pkglist>
      <collection>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="src" src="src/drbd-utils-9.19.0-150400.3.17.1.src.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.src.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="x86_64" src="x86_64/drbd-utils-9.19.0-150400.3.17.1.x86_64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="s390x" src="s390x/drbd-utils-9.19.0-150400.3.17.1.s390x.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.s390x.rpm</filename>
        </package>
        <package name="drbd-utils" epoch="0" version="9.19.0" release="150400.3.17.1" arch="aarch64" src="aarch64/drbd-utils-9.19.0-150400.3.17.1.aarch64.rpm">
          <filename>drbd-utils-9.19.0-150400.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2333</id>
    <title>Recommended update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685516597"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210593" id="1210593" title="Crash in zlib deflateBound() function on s390x" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issue:

- Fix function calling order to avoid crashes (bsc#1210593)
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.45.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.45.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.45.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.45.1" arch="src" src="src/zlib-1.2.11-150000.3.45.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.45.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.45.1" arch="x86_64" src="x86_64/zlib-devel-1.2.11-150000.3.45.1.x86_64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.45.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.45.1" arch="s390x" src="s390x/libz1-1.2.11-150000.3.45.1.s390x.rpm">
          <filename>libz1-1.2.11-150000.3.45.1.s390x.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.45.1" arch="s390x" src="s390x/zlib-devel-1.2.11-150000.3.45.1.s390x.rpm">
          <filename>zlib-devel-1.2.11-150000.3.45.1.s390x.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.45.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.45.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.45.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.45.1" arch="aarch64" src="aarch64/zlib-devel-1.2.11-150000.3.45.1.aarch64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2625</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687533492"/>
    <references/>
    <description>This update for gcc12 fixes the following issues:

- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204

  * includes regression and other bug fixes

- Speed up builds with --enable-link-serialization.

- Update embedded newlib to version 4.2.0
</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="src" src="src/gcc12-12.3.0+git1204-150000.1.10.1.src.rpm">
          <filename>gcc12-12.3.0+git1204-150000.1.10.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="x86_64" src="x86_64/libgcc_s1-12.3.0+git1204-150000.1.10.1.x86_64.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.10.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="x86_64" src="x86_64/libstdc++6-12.3.0+git1204-150000.1.10.1.x86_64.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.10.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="s390x" src="s390x/libgcc_s1-12.3.0+git1204-150000.1.10.1.s390x.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.10.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="s390x" src="s390x/libstdc++6-12.3.0+git1204-150000.1.10.1.s390x.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.10.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="aarch64" src="aarch64/libgcc_s1-12.3.0+git1204-150000.1.10.1.aarch64.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.10.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.10.1" arch="aarch64" src="aarch64/libstdc++6-12.3.0+git1204-150000.1.10.1.aarch64.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2366</id>
    <title>Recommended update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685949798"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209245" id="1209245" title="Xen HVM fails to be destroyed if it crashes with crashkernel+kdump configured" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209237" id="1209237" title="xen-syms doesn't contain debug-info" type="bugzilla"/>
    </references>
    <description>This update for xen fixes the following issues:

- Added debug-info to xen-syms (bsc#1209237)

- Update to Xen 4.16.4 bug fix release (bsc#1027519)

- Added upstream bug fixes (bsc#1027519)
  
- Fix host-assisted kexec/kdump for HVM domUs (bsc#1209245)

- Drop patches contained in new tarball and switch to upstream backports for some patches
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.4_02" release="150400.4.28.1" arch="src" src="src/xen-4.16.4_02-150400.4.28.1.src.rpm">
          <filename>xen-4.16.4_02-150400.4.28.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.4_02" release="150400.4.28.1" arch="x86_64" src="x86_64/xen-libs-4.16.4_02-150400.4.28.1.x86_64.rpm">
          <filename>xen-libs-4.16.4_02-150400.4.28.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2313</id>
    <title>Security update for c-ares</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685431838"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31124" id="CVE-2023-31124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31124" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32067" id="CVE-2023-32067" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32067" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31147" id="CVE-2023-31147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31130" id="CVE-2023-31130" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31130" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211604" id="1211604" title="VUL-0: CVE-2023-32067: c-ares: 0-byte UDP payload causes Denial of Service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211607" id="1211607" title="VUL-0: CVE-2023-31124: c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211605" id="1211605" title="VUL-0: CVE-2023-31147: c-ares: Insufficient randomness in generation of DNS query IDs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211606" id="1211606" title="VUL-0: CVE-2023-31130: c-ares: Buffer Underwrite in ares_inet_net_pton()" type="bugzilla"/>
    </references>
    <description>This update for c-ares fixes the following issues:

Update to version 1.19.1:

- CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604)
- CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605)
- CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606)
- CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607)
- Fix uninitialized memory warning in test
- ares_getaddrinfo() should allow a port of 0
- Fix memory leak in ares_send() on error
- Fix comment style in ares_data.h
- Fix typo in ares_init_options.3
- Sync ax_pthread.m4 with upstream
- Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support 
</description>
    <pkglist>
      <collection>
        <package name="c-ares" epoch="0" version="1.19.1" release="150000.3.23.1" arch="src" src="src/c-ares-1.19.1-150000.3.23.1.src.rpm">
          <filename>c-ares-1.19.1-150000.3.23.1.src.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.23.1" arch="x86_64" src="x86_64/libcares2-1.19.1-150000.3.23.1.x86_64.rpm">
          <filename>libcares2-1.19.1-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.23.1" arch="s390x" src="s390x/libcares2-1.19.1-150000.3.23.1.s390x.rpm">
          <filename>libcares2-1.19.1-150000.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.23.1" arch="aarch64" src="aarch64/libcares2-1.19.1-150000.3.23.1.aarch64.rpm">
          <filename>libcares2-1.19.1-150000.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3577</id>
    <title>Recommended update for crypto-policies</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1694437681"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209998" id="1209998" title="crypto-policies: Behaviour / documentation of crypto-policies introduction in SLES 15 SP4" type="bugzilla"/>
    </references>
    <description>This update for crypto-policies fixes the following issues:

- Update update-crypto-policies(8) man pages and README.SUSE to mention the supported back-end policies. (bsc#1209998)
</description>
    <pkglist>
      <collection>
        <package name="crypto-policies" epoch="0" version="20210917.c9d86d1" release="150400.3.3.1" arch="noarch" src="noarch/crypto-policies-20210917.c9d86d1-150400.3.3.1.noarch.rpm">
          <filename>crypto-policies-20210917.c9d86d1-150400.3.3.1.noarch.rpm</filename>
        </package>
        <package name="crypto-policies" epoch="0" version="20210917.c9d86d1" release="150400.3.3.1" arch="src" src="src/crypto-policies-20210917.c9d86d1-150400.3.3.1.src.rpm">
          <filename>crypto-policies-20210917.c9d86d1-150400.3.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2658</id>
    <title>Recommended update for containerd, docker, runc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687870095"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211578" id="1211578" title="docker 23.0.6-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210298" id="1210298" title="VUL-0: containerd: go1.18 is EOL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208074" id="1208074" title="docker 23.0.0-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207004" id="1207004" title="runc changes owner of the /dev/null - ref:_00D1igLOd._5005qIpzdl:ref" type="bugzilla"/>
    </references>
    <description>This update for containerd, docker, runc fixes the following issues:

- Update to containerd v1.6.21 (bsc#1211578)
- Update to Docker 23.0.6-ce (bsc#1211578)
- Update to runc v1.1.7
- Require a minimum Go version explicitly (bsc#1210298)
- Re-unify packaging for SLE-12 and SLE-15
- Fix build on SLE-12 by switching back to libbtrfs-devel headers
- Allow man pages to be built without internet access in OBS
- Add apparmor-parser as a Recommends to make sure that most users will end up with it installed   
  even if they are primarily running SELinux
- Fix syntax of boolean dependency
- Allow to install container-selinux instead of apparmor-parser
- Change to using systemd-sysusers
- Update runc.keyring to upstream version
- Fix the inability to use `/dev/null` when inside a container (bsc#1207004)
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="src" src="src/containerd-1.6.21-150000.93.1.src.rpm">
          <filename>containerd-1.6.21-150000.93.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="x86_64" src="x86_64/containerd-1.6.21-150000.93.1.x86_64.rpm">
          <filename>containerd-1.6.21-150000.93.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="src" src="src/docker-23.0.6_ce-150000.178.1.src.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="x86_64" src="x86_64/docker-23.0.6_ce-150000.178.1.x86_64.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="src" src="src/runc-1.1.7-150000.46.1.src.rpm">
          <filename>runc-1.1.7-150000.46.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="x86_64" src="x86_64/runc-1.1.7-150000.46.1.x86_64.rpm">
          <filename>runc-1.1.7-150000.46.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="s390x" src="s390x/containerd-1.6.21-150000.93.1.s390x.rpm">
          <filename>containerd-1.6.21-150000.93.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="s390x" src="s390x/docker-23.0.6_ce-150000.178.1.s390x.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="s390x" src="s390x/runc-1.1.7-150000.46.1.s390x.rpm">
          <filename>runc-1.1.7-150000.46.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.93.1" arch="aarch64" src="aarch64/containerd-1.6.21-150000.93.1.aarch64.rpm">
          <filename>containerd-1.6.21-150000.93.1.aarch64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="23.0.6_ce" release="150000.178.1" arch="aarch64" src="aarch64/docker-23.0.6_ce-150000.178.1.aarch64.rpm">
          <filename>docker-23.0.6_ce-150000.178.1.aarch64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.7" release="150000.46.1" arch="aarch64" src="aarch64/runc-1.1.7-150000.46.1.aarch64.rpm">
          <filename>runc-1.1.7-150000.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2347</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685622834"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32324" id="CVE-2023-32324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32324" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211643" id="1211643" title="VUL-0: EMBARGOED: CVE-2023-32324: cups: buffer overflow vulnerability in the function format_log_line could cause a denial-of-service" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643).
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.43.1" arch="src" src="src/cups-2.2.7-150000.3.43.1.src.rpm">
          <filename>cups-2.2.7-150000.3.43.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.43.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.43.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.43.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.43.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.43.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.43.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.43.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.43.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.43.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.43.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.43.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.43.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.43.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.43.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.43.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.43.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.43.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.43.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2334</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685518185"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0800" id="CVE-2023-0800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0802" id="CVE-2023-0802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0803" id="CVE-2023-0803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0803" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0799" id="CVE-2023-0799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0795" id="CVE-2023-0795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0795" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0804" id="CVE-2023-0804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0801" id="CVE-2023-0801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0796" id="CVE-2023-0796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0796" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0798" id="CVE-2023-0798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0797" id="CVE-2023-0797" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0797" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208234" id="1208234" title="VUL-1: CVE-2023-0803: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208228" id="1208228" title="VUL-1: CVE-2023-0797: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208232" id="1208232" title="VUL-1: CVE-2023-0801: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208233" id="1208233" title="VUL-1: CVE-2023-0802: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208230" id="1208230" title="VUL-1: CVE-2023-0799: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208231" id="1208231" title="VUL-1: CVE-2023-0800: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208227" id="1208227" title="VUL-1: CVE-2023-0796: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208236" id="1208236" title="VUL-1: CVE-2023-0804: tiff: out of bounds write when combining regions in composite images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208226" id="1208226" title="VUL-1: CVE-2023-0795: tiff: out-of-bounds read due to incorrect image rotation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208229" id="1208229" title="VUL-1: CVE-2023-0798: tiff: out of bounds read due to incorrect image rotation" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

Fixed multiple out of bounds read/write security issues:

  CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228),
  CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231),
  CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234),
  CVE-2023-0804 (bsc#1208236).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.28.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.28.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.28.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.28.1" arch="src" src="src/tiff-4.0.9-150000.45.28.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.28.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.28.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.28.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.28.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.28.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.28.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2305</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685336259"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211045" id="1211045" title="[SELinux] haveged.service fails to start" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Fix entropy daemon failing to start (bsc#1211045)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.6.1" arch="noarch" src="noarch/selinux-policy-20230511+git3.b78f5aff-150400.4.6.1.noarch.rpm">
          <filename>selinux-policy-20230511+git3.b78f5aff-150400.4.6.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.6.1" arch="src" src="src/selinux-policy-20230511+git3.b78f5aff-150400.4.6.1.src.rpm">
          <filename>selinux-policy-20230511+git3.b78f5aff-150400.4.6.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.6.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git3.b78f5aff-150400.4.6.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git3.b78f5aff-150400.4.6.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.6.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git3.b78f5aff-150400.4.6.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git3.b78f5aff-150400.4.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2912</id>
    <title>Recommended update for linux-glibc-devel</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689844398"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211096" id="1211096" title="sev-guest.h missing from linux-glibc-devel package" type="bugzilla"/>
    </references>
    <description>This update for linux-glibc-devel fixes the following issues:

- Add linux/sev-guest.h (bsc#1211096)
</description>
    <pkglist>
      <collection>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="src" src="src/linux-glibc-devel-5.14-150400.6.6.1.src.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.src.rpm</filename>
        </package>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="x86_64" src="x86_64/linux-glibc-devel-5.14-150400.6.6.1.x86_64.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.x86_64.rpm</filename>
        </package>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="s390x" src="s390x/linux-glibc-devel-5.14-150400.6.6.1.s390x.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.s390x.rpm</filename>
        </package>
        <package name="linux-glibc-devel" epoch="0" version="5.14" release="150400.6.6.1" arch="aarch64" src="aarch64/linux-glibc-devel-5.14-150400.6.6.1.aarch64.rpm">
          <filename>linux-glibc-devel-5.14-150400.6.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2311</id>
    <title>Recommended update for s390-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685428257"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211318" id="1211318" title="ziomon: fix for SCSI devices of type disk without block dev" type="bugzilla"/>
    </references>
    <description>This update for s390-tools fixes the following issues:

- Fix error during evaluation of ziomon data for disk type SCSI devices without block dev (bsc#1211318)
</description>
    <pkglist>
      <collection>
        <package name="libekmfweb1" epoch="0" version="2.19.0" release="150400.7.21.1" arch="s390x" src="s390x/libekmfweb1-2.19.0-150400.7.21.1.s390x.rpm">
          <filename>libekmfweb1-2.19.0-150400.7.21.1.s390x.rpm</filename>
        </package>
        <package name="libkmipclient1" epoch="0" version="2.19.0" release="150400.7.21.1" arch="s390x" src="s390x/libkmipclient1-2.19.0-150400.7.21.1.s390x.rpm">
          <filename>libkmipclient1-2.19.0-150400.7.21.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.19.0" release="150400.7.21.1" arch="s390x" src="s390x/s390-tools-2.19.0-150400.7.21.1.s390x.rpm">
          <filename>s390-tools-2.19.0-150400.7.21.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.19.0" release="150400.7.21.1" arch="src" src="src/s390-tools-2.19.0-150400.7.21.1.src.rpm">
          <filename>s390-tools-2.19.0-150400.7.21.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2342</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685612078"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" id="CVE-2023-2650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211430" id="1211430" title="VUL-0: CVE-2023-2650: EMBARGOED: openssl-3,openssl-1_1,compat-openssl098,openssl1,openssl-1_0_0,openssl: Possible DoS translating ASN.1 object identifiers" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.37.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.37.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.37.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.37.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.37.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.37.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.37.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.37.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.37.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.37.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.37.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2363</id>
    <title>Recommended update for libnvme, nvme-cli</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685949712"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209131" id="1209131" title="Segfault in libnvme during garbage collection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209550" id="1209550" title="Misc fixes required for nvme supported-log-pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209905" id="1209905" title="libnvme: Fix segmentation fault during garbage collection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209669" id="1209669" title="nvme admin-passthru command displays junk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210105" id="1210105" title="NVMe/FC autoconnect scripts fail to parse config JSON file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210089" id="1210089" title="NVMe/FC config JSON file handling is broken" type="bugzilla"/>
    </references>
    <description>This update for libnvme, nvme-cli fixes the following issues:

- Fix GC in Python binding (bsc#1209905 bsc#1209131)
- Fix crash when printing json output for supported log pages (bsc#1209550)
- Add coverity reported fixes (bsc#1209669)
- Update host_traddr when using config.json file (bsc#1210089)
- Fix compiler warning (git-fixes)
- Fix condition in autoconnect service (bsc#1210105)
- Set version-tag so that version are correctly reported
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="src" src="src/libnvme-1.0+32.gb30ab4c96c2d-150400.3.21.1.src.rpm">
          <filename>libnvme-1.0+32.gb30ab4c96c2d-150400.3.21.1.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="x86_64" src="x86_64/libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.x86_64.rpm">
          <filename>libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="src" src="src/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.src.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="x86_64" src="x86_64/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.x86_64.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="s390x" src="s390x/libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.s390x.rpm">
          <filename>libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.s390x.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="s390x" src="s390x/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.s390x.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.s390x.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+32.gb30ab4c96c2d" release="150400.3.21.1" arch="aarch64" src="aarch64/libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.aarch64.rpm">
          <filename>libnvme1-1.0+32.gb30ab4c96c2d-150400.3.21.1.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+40.gd857ed9befd6" release="150400.3.18.1" arch="aarch64" src="aarch64/nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.aarch64.rpm">
          <filename>nvme-cli-2.0+40.gd857ed9befd6-150400.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2657</id>
    <title>Recommended update for libcontainers-common</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687869877"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211124" id="1211124" title="Path &quot;/etc/SUSEConnect&quot; from &quot;/etc/containers/mounts.conf&quot; (and others) doesn't exist on every container startup" type="bugzilla"/>
    </references>
    <description>This update for libcontainers-common fixes the following issues:

- New subpackage libcontainers-sles-mounts which adds SLE-specific mounts on SLE systems (bsc#1211124)
- Own /etc/containers/systemd and /usr/share/containers/systemd for podman quadlet
- Remove container-storage-driver.sh to default to the overlay driver instead of btrfs
</description>
    <pkglist>
      <collection>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.8.1" arch="noarch" src="noarch/libcontainers-common-20230214-150400.3.8.1.noarch.rpm">
          <filename>libcontainers-common-20230214-150400.3.8.1.noarch.rpm</filename>
        </package>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.8.1" arch="src" src="src/libcontainers-common-20230214-150400.3.8.1.src.rpm">
          <filename>libcontainers-common-20230214-150400.3.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2484</id>
    <title>Security update for openldap2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686552830"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211795" id="1211795" title="VUL-0: CVE-2023-2953: openldap2: null pointer dereference in  ber_memalloc_x  function" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953" id="CVE-2023-2953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953" type="cve"/>
    </references>
    <description>This update for openldap2 fixes the following issues:

- CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).
</description>
    <pkglist>
      <collection>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="x86_64" src="x86_64/libldap-2_4-2-2.4.46-150200.14.14.1.x86_64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.14.1.x86_64.rpm</filename>
        </package>
        <package name="libldap-data" epoch="0" version="2.4.46" release="150200.14.14.1" arch="noarch" src="noarch/libldap-data-2.4.46-150200.14.14.1.noarch.rpm">
          <filename>libldap-data-2.4.46-150200.14.14.1.noarch.rpm</filename>
        </package>
        <package name="openldap2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="src" src="src/openldap2-2.4.46-150200.14.14.1.src.rpm">
          <filename>openldap2-2.4.46-150200.14.14.1.src.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="s390x" src="s390x/libldap-2_4-2-2.4.46-150200.14.14.1.s390x.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.14.1.s390x.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.14.1" arch="aarch64" src="aarch64/libldap-2_4-2-2.4.46-150200.14.14.1.aarch64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2885</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689778782"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209229" id="1209229" title="&quot;logname&quot; returns &quot;No login name&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208721" id="1208721" title="ulp livepatchable reports non-livepatchable libraries as livepatchable." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211828" id="1211828" title="getaddrinfo may deadlock in out-of-memory situation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235)
- Exclude static archives from preparation for live patching (bsc#1208721)
- resolv_conf: release lock on allocation failure (bsc#1211828, BZ #30527)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="src" src="src/glibc-2.31-150300.52.2.src.rpm">
          <filename>glibc-2.31-150300.52.2.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.52.2" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.52.2.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.52.2.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="s390x" src="s390x/glibc-2.31-150300.52.2.s390x.rpm">
          <filename>glibc-2.31-150300.52.2.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.52.2" arch="s390x" src="s390x/glibc-devel-2.31-150300.52.2.s390x.rpm">
          <filename>glibc-devel-2.31-150300.52.2.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.52.2" arch="s390x" src="s390x/glibc-locale-2.31-150300.52.2.s390x.rpm">
          <filename>glibc-locale-2.31-150300.52.2.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.52.2" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.52.2.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.52.2.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.52.2" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.52.2.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.52.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2356</id>
    <title>Security update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1685705771"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2700" id="CVE-2023-2700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2700" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199583" id="1199583" title="KVM guest does not start with 5TB of memory assigned to it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211390" id="1211390" title="VUL-0: CVE-2023-2700: libvirt: Memory leak in virPCIVirtualFunctionList cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208567" id="1208567" title="qemu-system-x86_64: Failed to lock byte 100" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183247" id="1183247" title="starting lxc container failes with GDBus.Error:org.freedesktop.machine1.NoMachineForPID: PID 4370 does not belong to any known machine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209861" id="1209861" title="SLE-15 SP2 libvirtd core dump due to race condition [ref:_00D1igLOd._5005qOEA8t:ref]" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- CVE-2023-2700: Fixed a memory leak that could be triggered by
  repeatedly querying an SR-IOV PCI device's capabilities
  (bsc#1211390).

Non-security fixes:

- Fixed a potential crash during driver cleanup (bsc#1209861).
- Added Apparmor support for SUSE edk2 firmware paths (boo#1208567).
- Fixed lxc container initialization with systemd and hybrid groups
  (boo#1183247).
- Added the option to specify the virtual CPU address size in bits for
  qemu (bsc#1199583).
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="8.0.0" release="150400.7.6.1" arch="src" src="src/libvirt-8.0.0-150400.7.6.1.src.rpm">
          <filename>libvirt-8.0.0-150400.7.6.1.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-client-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-client-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.6.1" arch="x86_64" src="x86_64/libvirt-libs-8.0.0-150400.7.6.1.x86_64.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-client-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-client-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-network-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-daemon-qemu-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.6.1" arch="s390x" src="s390x/libvirt-libs-8.0.0-150400.7.6.1.s390x.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.6.1.s390x.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-client-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-client-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-network-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-daemon-qemu-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.6.1" arch="aarch64" src="aarch64/libvirt-libs-8.0.0-150400.7.6.1.aarch64.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2648</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687852374"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201627" id="1201627" title="openssl-1_0_0 FTBFS 2023-05-26" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207534" id="1207534" title="VUL-0: CVE-2022-4304: openssl: Timing Oracle in RSA Decryption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" id="CVE-2022-4304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.
  The previous fix for this timing side channel turned out to cause a
  severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect the testsuite (bsc#1201627).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.42.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.42.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.42.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.42.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.42.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.42.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.42.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.42.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.42.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.42.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.42.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.42.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2516</id>
    <title>Security update for opensc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686805726"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2977" id="CVE-2023-2977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2977" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211894" id="1211894" title="VUL-0: CVE-2023-2977: opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()" type="bugzilla"/>
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-2977: Fixed out of bounds read in pkcs15 cardos_have_verifyrc_package() (bsc#1211894).
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="src" src="src/opensc-0.22.0-150400.3.3.1.src.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="x86_64" src="x86_64/opensc-0.22.0-150400.3.3.1.x86_64.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="s390x" src="s390x/opensc-0.22.0-150400.3.3.1.s390x.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.3.1" arch="aarch64" src="aarch64/opensc-0.22.0-150400.3.3.1.aarch64.rpm">
          <filename>opensc-0.22.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2517</id>
    <title>Security update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686805836"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203750" id="1203750" title="VUL-0: CVE-2007-4559: python36,python3,python39,python310,python,python27: python tarfile module directory traversal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211158" id="1211158" title="python39: unittest.mock.patch.dict returns function when applied to coroutines" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559" id="CVE-2007-4559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).

- Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.48.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.48.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.48.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="src" src="src/python3-3.6.15-150300.10.48.1.src.rpm">
          <filename>python3-3.6.15-150300.10.48.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.48.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.48.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.48.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.48.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.48.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.48.1" arch="src" src="src/python3-core-3.6.15-150300.10.48.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.48.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.48.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.48.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.48.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.48.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.48.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.48.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.48.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.48.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.48.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.48.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.48.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.48.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.48.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.48.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.48.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.48.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2519</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686810349"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203818" id="1203818" title="VUL-0: supportutils: Some passwords are not censored in supportconfig files" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

 - Added missed sanitation check on crash.txt (bsc#1203818)
 - Added check to _sanitize_file
 - Using variable for replement text in _sanitize_file
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.18.1" arch="noarch" src="noarch/supportutils-3.1.21-150300.7.35.18.1.noarch.rpm">
          <filename>supportutils-3.1.21-150300.7.35.18.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.18.1" arch="src" src="src/supportutils-3.1.21-150300.7.35.18.1.src.rpm">
          <filename>supportutils-3.1.21-150300.7.35.18.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2811</id>
    <title>Recommended update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689156281"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-4521" id="PED-4521" title="https://jira.suse.com/browse/PED-4521" type="jira"/>
    </references>
    <description>This update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt fixes the following issues:

This update provides a feature update to the FIDO2 stack.

Changes in libfido2:

- Version 1.13.0 (2023-02-20)

    * New API calls:

      + fido_assert_empty_allow_list;
      + fido_cred_empty_exclude_list.

    * fido2-token: fix issue when listing large blobs.

- Version 1.12.0 (2022-09-22)

  * Support for COSE_ES384.
  * Improved support for FIDO 2.1 authenticators.

  * New API calls:

    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.

   * Documentation and reliability fixes.

- Version 1.11.0 (2022-05-03)

  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise &quot;uv&quot; instead of &quot;clientPin&quot;.
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:

    + fido_cbor_info_maxlargeblob.

  * Documentation and reliability fixes.
  * Separate build and regress targets.

- Version 1.10.0 (2022-01-17)

  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * New API calls:

     - fido_dev_info_set;
     - fido_dev_io_handle;
     - fido_dev_new_with_info;
     - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.

- Version 1.9.0 (2021-10-27)

  * Enabled NFC support on Linux.
  * Support for FIDO 2.1 &quot;minPinLength&quot; extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:

       - es256_pk_from_EVP_PKEY;
       - fido_cred_attstmt_len;
       - fido_cred_attstmt_ptr;
       - fido_cred_pin_minlen;
       - fido_cred_set_attstmt;
       - fido_cred_set_pin_minlen;
       - fido_dev_set_pin_minlen_rpid;
       - fido_dev_set_timeout;
       - rs256_pk_from_EVP_PKEY.

  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.

- Update to version 1.8.0:

	* Better support for FIDO 2.1 authenticators.
	* Support for attestation format 'none'.
	* New API calls:

		- fido_assert_set_clientdata;
		- fido_cbor_info_algorithm_cose;
		- fido_cbor_info_algorithm_count;
		- fido_cbor_info_algorithm_type;
		- fido_cbor_info_transports_len;
		- fido_cbor_info_transports_ptr;
		- fido_cred_set_clientdata;
		- fido_cred_set_id;
		- fido_credman_set_dev_rk;
		- fido_dev_is_winhello.

	* fido2-token: new -Sc option to update a resident credential.
	* Documentation and reliability fixes.
	* HID access serialisation on Linux.

- Update to version 1.7.0:

  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 &quot;credBlobs&quot; and &quot;largeBlobs&quot; extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.

- Enabled hidapi again, issues related to hidapi are fixed upstream

- Update to version 1.6.0:

  * Documentation and reliability fixes.

  * New API calls:

    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.

- Create a udev subpackage and ship the udev rule.

Changes in python-fido2:

- update to 0.9.3:

  * Don't fail device discovery when hidraw doesn't support HIDIOCGRAWUNIQ
  * Support the latest Windows webauthn.h API (included in Windows 11).
  * Add product name and serial number to HidDescriptors.
  * Remove the need for the uhid-freebsd dependency on FreeBSD.

- Update to version 0.9.1

  * Add new CTAP error codes and improve handling of unknown codes.
  * Client: API changes to better support extensions.
  * Client.make_credential now returns a AuthenticatorAttestationResponse,
    which holds the AttestationObject and ClientData, as well as any
    client extension results for the credential.
  * Client.get_assertion now returns an AssertionSelection object,
    which is used to select between multiple assertions
  * Renames: The CTAP1 and CTAP2 classes have been renamed to
    Ctap1 and Ctap2, respectively.
  * ClientPin: The ClientPin API has been restructured to support
    multiple PIN protocols, UV tokens, and token permissions.
  * CTAP 2.1 PRE: Several new features have been added for CTAP 2.1
  * HID: The platform specific HID code has been revamped

- Version 0.8.1 (released 2019-11-25)

  * Bugfix: WindowsClient.make_credential error when resident key requirement is unspecified.

- Version 0.8.0 (released 2019-11-25)

  * New fido2.webauthn classes modeled after the W3C WebAuthn spec introduced.
  * CTAP2 send_cbor/make_credential/get_assertion and U2fClient request/authenticate timeout arguments replaced with event used to cancel a request.
  * Fido2Client:

    - make_credential/get_assertion now take WebAuthn options objects.
    - timeout is now provided in ms in WebAuthn options objects. Event based cancelation also available by passing an Event.

  * Fido2Server:

    - ATTESTATION, USER_VERIFICATION, and AUTHENTICATOR_ATTACHMENT enums have been replaced with fido2.webauthn classes.
    - RelyingParty has been replaced with PublicKeyCredentialRpEntity, and name is no longer optional.
    - Options returned by register_begin/authenticate_begin now omit unspecified values if they are optional, instead of filling in default values.
    - Fido2Server.allowed_algorithms now contains a list of PublicKeyCredentialParameters instead of algorithm identifiers.
    - Fido2Server.timeout is now in ms and of type int.

  * Support native WebAuthn API on Windows through WindowsClient.

- Version 0.7.2 (released 2019-10-24)

  * Support for the TPM attestation format.
  * Allow passing custom challenges to register/authenticate in Fido2Server.
  * Bugfix: CTAP2 CANCEL command response handling fixed.
  * Bugfix: Fido2Client fix handling of empty allow_list.
  * Bugfix: Fix typo in CTAP2.get_assertions() causing it to fail.

- Version 0.7.1 (released 2019-09-20)

  * Enforce canonical CBOR on Authenticator responses by default.
  * PCSC: Support extended APDUs.
  * Server: Verify that UP flag is set.
  * U2FFido2Server: Implement AppID exclusion extension.
  * U2FFido2Server: Allow custom U2F facet verification.
  * Bugfix: U2FFido2Server.authenticate_complete now returns the result.

- Version 0.7.0 (released 2019-06-17)

  * Add support for NFC devices using PCSC.
  * Add support for the hmac-secret Authenticator extension.
  * Honor max credential ID length and number of credentials to Authenticator.
  * Add close() method to CTAP devices to explicitly release their resources.

- Version 0.6.0 (released 2019-05-10)

  * Don't fail if CTAP2 Info contains unknown fields.
  * Replace cbor loads/dumps functions with encode/decode/decode_from.
  * Server: Add support for AuthenticatorAttachment.
  * Server: Add support for more key algorithms.
  * Client: Expose CTAP2 Info object as Fido2Client.info. 

Changes in yubikey-manager:

- Update to version 4.0.9 (released 2022-06-17)

  * Dependency: Add support for python-fido2 1.x
  * Fix: Drop stated support for Click 6 as features from 7 are being used.

- Update to version 4.0.8 (released 2022-01-31)

  * Bugfix: Fix error message for invalid modhex when programing a YubiOTP credential.
  * Bugfix: Fix issue with displaying a Steam credential when it is the only account.
  * Bugfix: Prevent installation of files in site-packages root.
  * Bugfix: Fix cleanup logic in PIV for protected management key.
  * Add support for token identifier when programming slot-based HOTP.
  * Add support for programming NDEF in text mode.
  * Dependency: Add support for Cryptography ⇐ 38.

- version update to 4.0.7

  ** Bugfix release: Fix broken naming for &quot;YubiKey 4&quot;, and a small OATH issue with
      touch Steam credentials.

- version 4.0.6 (released 2021-09-08)

   ** Improve handling of YubiKey device reboots.
   ** More consistently mask PIN/password input in prompts.
   ** Support switching mode over CCID for YubiKey Edge.
   ** Run pkill from PATH instead of fixed location.

- version 4.0.5 (released 2021-07-16)

   ** Bugfix: Fix PIV feature detection for some YubiKey NEO versions.
   ** Bugfix: Fix argument short form for --period when adding TOTP credentials.
   ** Bugfix: More strict validation for some arguments, resulting in better error messages.
   ** Bugfix: Correctly handle TOTP credentials using period != 30 AND touch_required.
   ** Bugfix: Fix prompting for access code in the otp settings command (now uses &quot;-A -&quot;).

- Update to version 4.0.3

  * Add support for fido reset over NFC.
  * Bugfix: The --touch argument to piv change-management-key was
    ignored.
  * Bugfix: Don’t prompt for password when importing PIV key/cert
    if file is invalid.
  * Bugfix: Fix setting touch-eject/auto-eject for YubiKey 4 and NEO.
  * Bugfix: Detect PKCS#12 format when outer sequence uses
    indefinite length.
  * Dependency: Add support for Click 8.

- Update to version 4.0.2

  * Update device names
  * Add read_info output to the --diagnose command, and show
    exception types.
  * Bugfix: Fix read_info for YubiKey Plus.
  * Add support for YK5-based FIPS YubiKeys.
  * Bugfix: Fix OTP device enumeration on Win32.
  * Drop reliance on libusb and libykpersonalize.
  * Support the &quot;fido&quot; and &quot;otp&quot; subcommands over NFC
  * New &quot;ykman --diagnose&quot; command to aid in troubleshooting.
  * New &quot;ykman apdu&quot; command for sending raw APDUs over the smart
    card interface.
  * New &quot;yubikit&quot; package added for custom development and advanced
    scripting.
  * OpenPGP: Add support for KDF enabled YubiKeys.
  * Static password: Add support for FR, IT, UK and BEPO keyboard
    layouts.

- Update to 3.1.1

  * Add support for YubiKey 5C NFC
  * OpenPGP: set-touch now performs compatibility checks before prompting for PIN
  * OpenPGP: Improve error messages and documentation for set-touch
  * PIV: read-object command no longer adds a trailing newline
  * CLI: Hint at missing permissions when opening a device fails
  * Linux: Improve error handling when pcscd is not running
  * Windows: Improve how .DLL files are loaded, thanks to Marius Gabriel Mihai for reporting this!
  * Bugfix: set-touch now accepts the cached-fixed option
  * Bugfix: Fix crash in OtpController.prepare_upload_key() error parsing
  * Bugfix: Fix crash in piv info command when a certificate slot contains an invalid certificate
  * Library: PivController.read_certificate(slot) now wraps certificate parsing exceptions in new exception type InvalidCertificate
  * Library: PivController.list_certificates() now returns None for slots containing invalid certificate, instead of raising an exception

- Version 3.1.0 (released 2019-08-20)

  * Add support for YubiKey 5Ci
  * OpenPGP: the info command now prints OpenPGP specification version as well
  * OpenPGP: Update support for attestation to match OpenPGP v3.4
  * PIV: Use UTC time for self-signed certificates
  * OTP: Static password now supports the Norman keyboard layout

- Version 3.0.0 (released 2019-06-24)

  * Add support for new YubiKey Preview and lightning form factor
  * FIDO: Support for credential management
  * OpenPGP: Support for OpenPGP attestation, cardholder certificates and
    cached touch policies
  * OTP: Add flag for using numeric keypad when sending digits 

- Version 2.1.1 (released 2019-05-28)

  * OTP: Add initial support for uploading Yubico OTP credentials to YubiCloud
  * Don’t automatically select the U2F applet on YubiKey NEO, it might be
    blocked by the OS
  * ChalResp: Always pad challenge correctly
  * Bugfix: Don’t crash with older versions of cryptography
  * Bugfix: Password was always prompted in OATH command, even if sent as
    argument

Changes in yubikey-manager-qt:

- update to 1.2.5:

  * Compatibility update for ykman 5.0.1.
  * Update to Python 3.11.
  * Update product images.

- Update to version 1.2.4 (released 2021-10-26)

  * Update device names and images.
  * PIV: Fix import of certificate.

- Update to version 1.2.3

  * Improved error handling when using Security Key Series devices.
  * PIV: Fix generation of certificate in slot 9c.

- Update to version 1.2.2

  * Fix detection of YubiKey Plus
  * Compatibility update for yubikey-manager 4.0
  * Bugfix: Device caching with multiple devices
  * Drop dependencies on libusb and libykpers.
  * Add additional product names and images

- update to 1.1.5

  * Add support for YubiKey 5C NFC

- Update to version 1.1.4

 * OTP: Add option to upload YubiOTP credential to YubiCloud
 * Linux: Show hint about pcscd service if opening device fails
 * Bugfix: Signal handling now compatible with Python 3.8

- Version 1.1.3 (released 2019-08-20)

  * Add suppport for YubiKey 5Ci
  * PIV: Use UTC time for self-signed certificates

- Version 1.1.2 (released 2019-06-24)

  * Add support for new YubiKey Preview
  * PIV: The popup for the management key now have a &quot;Use default&quot; option
  * Windows: Fix issue with importing PIV certificates
  * Bugfix: generate static password now works correctly 
</description>
    <pkglist>
      <collection>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="x86_64" src="x86_64/libfido2-1-1.13.0-150400.5.3.1.x86_64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.x86_64.rpm</filename>
        </package>
        <package name="libfido2" epoch="0" version="1.13.0" release="150400.5.3.1" arch="src" src="src/libfido2-1.13.0-150400.5.3.1.src.rpm">
          <filename>libfido2-1.13.0-150400.5.3.1.src.rpm</filename>
        </package>
        <package name="libfido2-udev" epoch="0" version="1.13.0" release="150400.5.3.1" arch="noarch" src="noarch/libfido2-udev-1.13.0-150400.5.3.1.noarch.rpm">
          <filename>libfido2-udev-1.13.0-150400.5.3.1.noarch.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="s390x" src="s390x/libfido2-1-1.13.0-150400.5.3.1.s390x.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.s390x.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.3.1" arch="aarch64" src="aarch64/libfido2-1-1.13.0-150400.5.3.1.aarch64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2742</id>
    <title>Recommended update for autoyast2, libzypp, yast2-pkg-bindings, yast2-update, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688118273"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="libzypp started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211261" id="1211261" title="'zypper targetos' produces just an empty output line" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212222" id="1212222" title="libzypp fails to build against libproxy 0.5.x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209565" id="1209565" title="L3: Bad upgrade from 12 SP5 to 15 SP3: rpm database problem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202234" id="1202234" title="Release packages of addon products are not installed by autoyast" type="bugzilla"/>
    </references>
    <description>This update for yast2-pkg-bindings fixes the following issues:

libzypp was updated to version 17.31.14 (22):

- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- build: honor libproxy.pc's includedir (bsc#1212222)

zypper was updated to version 1.14.61:

- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)

yast2-pkg-bindings, autoyast:

- Added a new option for rebuilding the RPM database (--rebuilddb) (bsc#1209565)
- Selected products are not installed after resetting the package manager internally (bsc#1202234)

yast2-update:

- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
</description>
    <pkglist>
      <collection>
        <package name="libprotobuf-lite20" epoch="0" version="3.9.2" release="150200.4.21.1" arch="x86_64" src="x86_64/libprotobuf-lite20-3.9.2-150200.4.21.1.x86_64.rpm">
          <filename>libprotobuf-lite20-3.9.2-150200.4.21.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="protobuf" epoch="0" version="3.9.2" release="150200.4.21.1" arch="src" src="src/protobuf-3.9.2-150200.4.21.1.src.rpm">
          <filename>protobuf-3.9.2-150200.4.21.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite20" epoch="0" version="3.9.2" release="150200.4.21.1" arch="s390x" src="s390x/libprotobuf-lite20-3.9.2-150200.4.21.1.s390x.rpm">
          <filename>libprotobuf-lite20-3.9.2-150200.4.21.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libprotobuf-lite20" epoch="0" version="3.9.2" release="150200.4.21.1" arch="aarch64" src="aarch64/libprotobuf-lite20-3.9.2-150200.4.21.1.aarch64.rpm">
          <filename>libprotobuf-lite20-3.9.2-150200.4.21.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2640</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691676571"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211257" id="1211257" title="VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210996" id="1210996" title="VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211256" id="1211256" title="VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2426" id="CVE-2023-2426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2426" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2609" id="CVE-2023-2609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2610" id="CVE-2023-2610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2610" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
- CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
- CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="src" src="src/vim-9.0.1572-150000.5.46.1.src.rpm">
          <filename>vim-9.0.1572-150000.5.46.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="noarch" src="noarch/vim-data-common-9.0.1572-150000.5.46.1.noarch.rpm">
          <filename>vim-data-common-9.0.1572-150000.5.46.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="x86_64" src="x86_64/vim-small-9.0.1572-150000.5.46.1.x86_64.rpm">
          <filename>vim-small-9.0.1572-150000.5.46.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="s390x" src="s390x/vim-small-9.0.1572-150000.5.46.1.s390x.rpm">
          <filename>vim-small-9.0.1572-150000.5.46.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.46.1" arch="aarch64" src="aarch64/vim-small-9.0.1572-150000.5.46.1.aarch64.rpm">
          <filename>vim-small-9.0.1572-150000.5.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2653</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687860572"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1172073" id="1172073" title="kernel-devel and kernel-source need Obsolete for previous package rebuilds of the same version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191731" id="1191731" title="kernel-default-base from SLE-15-SP4-JeOS-Alpha-202110-1 conflicts with kernel-default-base from the &quot;moving target&quot; repository" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195655" id="1195655" title="SLES15 SP4 - [P8][P9][P10]- Hard lockups are observed while running stress-ng and LPAR hangs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195921" id="1195921" title="ACPI patch for supporting nBFT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205650" id="1205650" title="cgroup: Honor caller's cgroup NS when resolving path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205756" id="1205756" title="VUL-0: CVE-2022-45884: kernel-source-azure,kernel-source-rt,kernel-source: UaF in drivers/media/dvb-core/dvbdev.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205758" id="1205758" title="VUL-0: CVE-2022-45885: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_frontend.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205760" id="1205760" title="VUL-0: CVE-2022-45886: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_net.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205762" id="1205762" title="VUL-0: CVE-2022-45887: kernel-source-rt,kernel-source,kernel-source-azure: Memory leak in drivers/media/usb/ttusb-dec/ttusb_dec.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205803" id="1205803" title="VUL-0: CVE-2022-45919: kernel: use-after-free when there is a disconnect after an open in drivers/media/dvb-core/dvb_ca_en50221.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206024" id="1206024" title="VUL-0: CVE-2022-4269: kernel-source,kernel-source-rt,kernel-source-azure: kernel: net: CPU soft lockup in TC mirred egress-to-ingress action" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206578" id="1206578" title="Cannot boot into OS when Enhanced REP MOVSB/STOSB set Disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207553" id="1207553" title="Missing '/usr/lib/firmware/iwlwifi-so-a0-gf-a0.pnvm', so Intel Wi-Fi 6E AX211 fails to work with iwlwifi module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208604" id="1208604" title="VUL-0: CVE-2023-1079: kernel: Use After Free in asus_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208758" id="1208758" title="L3: BUG: kernel NULL pointer dereference, address: 0000000000000028 - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209287" id="1209287" title="VUL-0: CVE-2023-1380: kernel: A USB-accessible slab-out-of-bounds read in Linux kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209288" id="1209288" title="VUL-0: CVE-2023-1382: kernel: denial of service in tipc_conn_close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209856" id="1209856" title="SLES 15 SP4 - kernel: fix __clear_user() inline assembly constraints" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209982" id="1209982" title="[Azure][MANA][Debuggability] Add new MANA VF performance counters for easier troubleshooting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210165" id="1210165" title="Kernel WARNING &quot;thunderbolt 0000:34:00.6: interrupt for TX ring 0 is already enabled&quot; at S3/S4 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210294" id="1210294" title="VUL-0: CVE-2023-30456: kernel: nVMX CR0 and CR4 consistency checks issue on x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210449" id="1210449" title="SLES 15 SP4 - s390/qeth: NET2016 - fix use-after-free in HSCI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210450" id="1210450" title="SLES 15 SP4 - s390/extmem: return correct segment type in __segment_load()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210498" id="1210498" title="VUL-0: CVE-2023-2124: kernel-source: OOB access in the XFS subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210533" id="1210533" title="VUL-0: CVE-2023-2002: kernel-source-azure,kernel-source-rt,kernel-source: unauthorized management command execution" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210551" id="1210551" title="[Azure][MANA] Backport Patches for MANA Jumbo Frame Support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210647" id="1210647" title="VUL-0: CVE-2023-2162: kernel-source-rt,kernel-source,kernel-source-azure: UAF during login when accessing the shost ipaddress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210741" id="1210741" title="[Azure][MANA][InfinitiBand] Features Support and InfiniBand for MANA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210775" id="1210775" title="[859215.187505] kernel BUG at ../mm/slub.c:379! - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210783" id="1210783" title="VUL-0: CVE-2023-31084: kernel: blocking operation when a task is in !TASK_RUNNING when dvb_frontend_get_event, wait_event_interruptible is called" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210791" id="1210791" title="KMP build fails with ld: cannot find arch/s390/lib/expoline/expoline.o" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210806" id="1210806" title="VUL-0: CVE-2023-2269: kernel-source-azure,kernel-source-rt,kernel-source: deadlock in dm_get_inactive_table() in dm-ioctl.c leads to local DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210940" id="1210940" title="VUL-0: CVE-2023-31436: kernel: out-of-bounds write because lmax can exceed QFQ_MIN_LMAX in qfq_change_class in net/sched/sch_qfq.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210947" id="1210947" title="s390/ap: fix crash on older machines based on QCI info missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211037" id="1211037" title="VUL-0: CVE-2023-2483: kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211043" id="1211043" title="VUL-0: CVE-2023-32233: kernel: LPE due to use-after-free in Netfilter nf_tables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211044" id="1211044" title="kernel: Improve workqueue stall reports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211089" id="1211089" title="ALP Workbench: kmod-testsuite fails to build on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211105" id="1211105" title="VUL-0: CVE-2023-2513: kernel-source-azure,kernel-source,kernel-source-rt: ext4: use-after-free in ext4_xattr_set_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211113" id="1211113" title="apparmor DENIED errors for gzip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211131" id="1211131" title="VUL-0: CVE-2023-2156: kernel-source-rt,kernel-source,kernel-source-azure: Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211205" id="1211205" title="Regression: 5.14.21-150400.24.60 lacks avx cpu flags on Sapphire Rapids processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211263" id="1211263" title="VUL-0: CVE-2023-28410: kernel-source: A potential security vulnerability in some Intel i915 Graphics drivers for linux may allow escalation of privilege" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211280" id="1211280" title="Add patch to support rumble on latest xbox controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211281" id="1211281" title="[Azure][Hyper-V]  Backport request for the the bug Unable to send packet via vmbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211449" id="1211449" title="VUL-1: kernel: Use after free bug in r592_remov due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211465" id="1211465" title="SLES 15 SP4 - net/iucv: Fix size of interrupt data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211519" id="1211519" title="Update gve kernel module to 6.2 upstream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211564" id="1211564" title="mlxbf_gige driver crash during YES Certification testing, kernel BUG at ../net/core/skbuff.c:111!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211590" id="1211590" title="VUL-0: CVE-2023-33288: kernel-source-rt,kernel-source,kernel-source-azure: Use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211686" id="1211686" title="s390/ctcm: Fix return type of ctc{mp,}m_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211687" id="1211687" title="s390/dasd: fix hanging blockdevice after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211688" id="1211688" title="s390/kprobes: fix current_kprobe never cleared after kprobes reenter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211689" id="1211689" title="s390/kprobes: fix irq mask clobbering on kprobe reenter from  post_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211690" id="1211690" title="s390/lcs: Fix return type of lcs_start_xmit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211691" id="1211691" title="s390/mem_detect: fix detect_memory() error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211692" id="1211692" title="s390/netiucv: Fix return type of netiucv_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211693" id="1211693" title="s390/qdio: fix do_sqbs() inline assembly constraint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211714" id="1211714" title="s390/vdso: remove -nostdlib compiler flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211796" id="1211796" title="kernel modules not usrmerged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211804" id="1211804" title="ceph: force updating the msg pointer in non-split case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211807" id="1211807" title="fuse: fix attr version comparison in fuse_read_update_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211808" id="1211808" title="fuse: always revalidate rename target dentry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211847" id="1211847" title="Update Broadcom Emulex lpfc driver to 14.2.0.12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211855" id="1211855" title="VUL-0: CVE-2023-3006: kernel: Add Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211960" id="1211960" title="qla2xxx: update driver to 10.02.08.300-k" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" id="CVE-2023-28410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" id="CVE-2023-2156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" id="CVE-2023-1382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" id="CVE-2023-3006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" id="CVE-2023-2269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" id="CVE-2023-1079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" id="CVE-2023-2162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" id="CVE-2023-33288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" id="CVE-2022-45886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" id="CVE-2022-45885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" id="CVE-2022-45887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" id="CVE-2022-45919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" id="CVE-2022-45884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" id="CVE-2023-31084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" id="CVE-2023-2002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" id="CVE-2023-31436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" id="CVE-2023-30456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" id="CVE-2022-4269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" id="CVE-2023-32233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" id="CVE-2023-1380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" id="CVE-2023-2513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" id="CVE-2023-2483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" id="CVE-2023-2124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3692" id="PED-3692" title="https://jira.suse.com/browse/PED-3692" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4022" id="PED-4022" title="https://jira.suse.com/browse/PED-4022" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19556" id="SLE-19556" title="https://jira.suse.com/browse/SLE-19556" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18383" id="SLE-18383" title="https://jira.suse.com/browse/SLE-18383" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18385" id="SLE-18385" title="https://jira.suse.com/browse/SLE-18385" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18377" id="SLE-18377" title="https://jira.suse.com/browse/SLE-18377" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18384" id="SLE-18384" title="https://jira.suse.com/browse/SLE-18384" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19255" id="SLE-19255" title="https://jira.suse.com/browse/SLE-19255" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18378" id="SLE-18378" title="https://jira.suse.com/browse/SLE-18378" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18379" id="SLE-18379" title="https://jira.suse.com/browse/SLE-18379" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18375" id="SLE-18375" title="https://jira.suse.com/browse/SLE-18375" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18978" id="SLE-18978" title="https://jira.suse.com/browse/SLE-18978" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19001" id="SLE-19001" title="https://jira.suse.com/browse/SLE-19001" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-18992" id="SLE-18992" title="https://jira.suse.com/browse/SLE-18992" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
- CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
- CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855).
- CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806).
- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294).
- CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024).
- CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
- CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).


The following non-security bugs were fixed:

- 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes).
- ACPI: EC: Fix oops when removing custom query handlers (git-fixes).
- ACPI: bus: Ensure that notify handlers are not running after removal (git-fixes).
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes).
- ACPI: tables: Add support for NBFT (bsc#1195921).
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes).
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (git-fixes).
- ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes).
- ALSA: cs46xx: mark snd_cs46xx_download_image as static (git-fixes).
- ALSA: firewire-digi00x: prevent potential use after free (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes).
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo L140AU (git-fixes).
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes).
- ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes).
- ALSA: hda/realtek: Apply HP B&amp;O top speaker profile to Pavilion 15 (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes).
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes).
- ALSA: hda: Fix Oops by 9.1 surround channel names (git-fixes).
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes).
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes).
- ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes).
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes).
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes).
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes).
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes).
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds (git-fixes).
- ASoC: rt5682: Disable jack detection interrupt during suspend (git-fixes).
- ASoC: soc-pcm: fix hw-&gt;formats cleared by soc_pcm_hw_init() for dpcm (git-fixes).
- Bluetooth: L2CAP: fix &quot;bad unlock balance&quot; in l2cap_disconnect_rsp (git-fixes).
- Bluetooth: btintel: Add LE States quirk support (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes).
- HID: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes).
- HID: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes).
- HID: microsoft: Add rumble support to latest xbox controllers (bsc#1211280).
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes).
- HID: wacom: Force pen out of prox if no events have been received in a while (git-fixes).
- HID: wacom: Set a default resolution for older tablets (git-fixes).
- HID: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes).
- HID: wacom: generic: Set battery quirk only when we see battery data (git-fixes).
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes)
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes)
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes)
- Input: xpad - add constants for GIP interface numbers (git-fixes).
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes).
- KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes)
- KVM: Disallow user memslot with size that exceeds &quot;unsigned long&quot; (git-fixes)
- KVM: Do not create VM debugfs files outside of the VM directory (git-fixes)
- KVM: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes)
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes).
- KVM: Prevent module exit until all VMs are freed (git-fixes)
- KVM: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes).
- KVM: SVM: Fix benign &quot;bool vs. int&quot; comparison in svm_set_cr0() (git-fixes).
- KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes).
- KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes).
- KVM: SVM: hyper-v: placate modpost section mismatch error (git-fixes).
- KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes).
- KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes).
- KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes).
- KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes).
- KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes).
- KVM: arm64: Do not arm a hrtimer for an already pending timer (git-fixes)
- KVM: arm64: Do not return from void function (git-fixes)
- KVM: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes)
- KVM: arm64: Fix S1PTW handling on RO memslots (git-fixes)
- KVM: arm64: Fix bad dereference on MTE-enabled systems (git-fixes)
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes)
- KVM: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes)
- KVM: arm64: Free hypervisor allocations if vector slot init fails (git-fixes)
- KVM: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes)
- KVM: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes)
- KVM: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes)
- KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes)
- KVM: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes)
- KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes)
- KVM: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes)
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes)
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes).
- KVM: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes).
- KVM: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes).
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes).
- KVM: nVMX: Inject #GP, not #UD, if &quot;generic&quot; VMXON CR0/CR4 check fails (git-fixes).
- KVM: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes).
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes).
- KVM: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes).
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes).
- KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes).
- KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes).
- KVM: x86/pmu: Ignore pmu-&gt;global_ctrl check if vPMU does not support global_ctrl (git-fixes).
- KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes).
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes).
- KVM: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes).
- KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes).
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes).
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes).
- KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes).
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes).
- KVM: x86: Protect the unused bits in MSR exiting flags (git-fixes).
- KVM: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes).
- KVM: x86: Report deprecated x87 features in supported CPUID (git-fixes).
- KVM: x86: do not set st-&gt;preempted when going back to user space (git-fixes).
- KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes).
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes).
- PCI/ASPM: Remove pcie_aspm_pm_state_change() (git-fixes).
- PM: hibernate: Do not get block device exclusively in test_resume mode (git-fixes).
- PM: hibernate: Turn snapshot_test into global variable (git-fixes).
- PM: hibernate: fix load_image_and_restore() error path (git-fixes).
- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes)
- RDMA/bnxt_re: Fix the page_size used during the MR creation (git-fixes)
- RDMA/cm: Trace icm_send_rej event before the cm state is reset (git-fixes)
- RDMA/core: Fix multiple -Warray-bounds warnings (git-fixes)
- RDMA/efa: Fix unsupported page sizes in device (git-fixes)
- RDMA/hns: Fix base address table allocation (git-fixes)
- RDMA/hns: Fix timeout attr in query qp for HIP08 (git-fixes)
- RDMA/hns: Modify the value of long message loopback slice (git-fixes)
- RDMA/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383).
- RDMA/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383).
- RDMA/irdma: Fix Local Invalidate fencing (git-fixes)
- RDMA/irdma: Fix RQ completion opcode (jsc#SLE-18383).
- RDMA/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383).
- RDMA/irdma: Fix inline for multiple SGE's (jsc#SLE-18383).
- RDMA/irdma: Prevent QP use after free (git-fixes)
- RDMA/irdma: Remove enum irdma_status_code (jsc#SLE-18383).
- RDMA/irdma: Remove excess error variables (jsc#SLE-18383).
- RDMA/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022).
- RDMA/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022).
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255).
- RDMA/mlx5: Fix flow counter query via DEVX (git-fixes)
- RDMA/mlx5: Use correct device num_ports when modify DC (git-fixes)
- RDMA/rxe: Remove tasklet call from rxe_cq.c (git-fixes)
- RDMA/siw: Fix potential page_array out of range access (git-fixes)
- RDMA/siw: Remove namespace check from siw_netdev_event() (git-fixes)
- RDMA/srpt: Add a check for valid 'mad_agent' pointer (git-fixes)
- Revert &quot;KVM: set owner of cpu and vm file operations&quot; (git-fixes)
- SMB3.1.1: add new tree connect ShareFlags (bsc#1193629).
- SMB3: Add missing locks to protect deferred close file list (git-fixes).
- SMB3: Close all deferred handles of inode in case of handle lease break (bsc#1193629).
- SMB3: Close deferred file handles in case of handle lease break (bsc#1193629).
- SMB3: drop reference to cfile before sending oplock break (bsc#1193629).
- SMB3: force unmount was failing to close deferred close files (bsc#1193629).
- SUNRPC: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775).
- USB / dwc3: Fix a checkpatch warning in core.c (git-fixes).
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes).
- USB: core: Add routines for endpoint checks in old drivers (git-fixes).
- USB: sisusbvga: Add endpoint checks (git-fixes).
- USB: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes).
- apparmor: add a kernel label to use on kernel objects (bsc#1211113).
- arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes).
- arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes).
- arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes).
- arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes).
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes).
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage.
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes)
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes).
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes).
- ata: pata_octeon_cf: drop kernel-doc notation (git-fixes).
- block: add a bdev_max_zone_append_sectors helper (git-fixes).
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes).
- bnxt: Do not read past the end of test names (jsc#SLE-18978).
- bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978).
- bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978).
- bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978).
- bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978).
- bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978).
- bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978).
- bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978).
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978).
- bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978).
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes).
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes).
- can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes).
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes).
- can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes).
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes).
- can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes).
- can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes).
- cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes).
- ceph: force updating the msg pointer in non-split case (bsc#1211804).
- cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906).
- cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650).
- cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650).
- cgroup: Make cgroup_get_from_id() prettier (bsc#1205650).
- cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650).
- cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup  id (bsc#1205650).
- cgroup: reduce dependency on cgroup_mutex (bsc#1205650).
- cifs: Avoid a cast in add_lease_context() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes).
- cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758).
- cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629).
- cifs: fix potential race when tree connecting ipc (bsc#1208758).
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758).
- cifs: fix sharing of DFS connections (bsc#1208758).
- cifs: fix smb1 mount regression (bsc#1193629).
- cifs: mapchars mount option ignored (bsc#1193629).
- cifs: missing lock when updating session status (bsc#1193629).
- cifs: print smb3_fs_context::source when mounting (bsc#1193629).
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758).
- cifs: protect session status check in smb2_reconnect() (bsc#1208758).
- cifs: release leases for deferred close handles when freezing (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes).
- clk: qcom: regmap: add PHY clock source implementation (git-fixes).
- clk: tegra20: fix gcc-7 constant overflow warning (git-fixes).
- configfs: fix possible memory leak in configfs_create_dir() (git-fixes).
- crypto: acomp - define max size for destination (jsc#PED-3692)
- crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692)
- crypto: qat - Fix unsigned function returning negative (jsc#PED-3692)
- crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692)
- crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692)
- crypto: qat - abstract PFVF receive logic (jsc#PED-3692)
- crypto: qat - abstract PFVF send function (jsc#PED-3692)
- crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692)
- crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692)
- crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692)
- crypto: qat - add backlog mechanism (jsc#PED-3692)
- crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692)
- crypto: qat - add check to validate firmware images (jsc#PED-3692)
- crypto: qat - add limit to linked list parsing (jsc#PED-3692)
- crypto: qat - add misc workqueue (jsc#PED-3692)
- crypto: qat - add missing restarting event notification in (jsc#PED-3692)
- crypto: qat - add param check for DH (jsc#PED-3692)
- crypto: qat - add param check for RSA (jsc#PED-3692)
- crypto: qat - add pfvf_ops (jsc#PED-3692)
- crypto: qat - add resubmit logic for decompression (jsc#PED-3692)
- crypto: qat - add support for 401xx devices (jsc#PED-3692)
- crypto: qat - add support for compression for 4xxx (jsc#PED-3692)
- crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692)
- crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692)
- crypto: qat - change PFVF ACK behaviour (jsc#PED-3692)
- crypto: qat - change behaviour of (jsc#PED-3692)
- crypto: qat - change bufferlist logic interface (jsc#PED-3692)
- crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692)
- crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692)
- crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692)
- crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692)
- crypto: qat - do not rely on min version (jsc#PED-3692)
- crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692)
- crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692)
- crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692)
- crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692)
- crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692)
- crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - extend buffer list interface (jsc#PED-3692)
- crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692)
- crypto: qat - extract send and wait from (jsc#PED-3692)
- crypto: qat - fix DMA transfer direction (jsc#PED-3692)
- crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692)
- crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692)
- crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692)
- crypto: qat - fix a typo in a comment (jsc#PED-3692)
- crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692)
- crypto: qat - fix definition of ring reset results (jsc#PED-3692)
- crypto: qat - fix error return code in adf_probe (jsc#PED-3692)
- crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692)
- crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692)
- crypto: qat - fix wording and formatting in code comment (jsc#PED-3692)
- crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692)
- crypto: qat - free irq in case of failure (jsc#PED-3692)
- crypto: qat - free irqs only if allocated (jsc#PED-3692)
- crypto: qat - generalize crypto request buffers (jsc#PED-3692)
- crypto: qat - get compression extended capabilities (jsc#PED-3692)
- crypto: qat - handle retries due to collisions in (jsc#PED-3692)
- crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692)
- crypto: qat - improve logging of PFVF messages (jsc#PED-3692)
- crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692)
- crypto: qat - introduce support for PFVF block messages (jsc#PED-3692)
- crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692)
- crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692)
- crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692)
- crypto: qat - make PFVF message construction direction (jsc#PED-3692)
- crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692)
- crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692)
- crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692)
- crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692)
- crypto: qat - move pfvf collision detection values (jsc#PED-3692)
- crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692)
- crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692)
- crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692)
- crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692)
- crypto: qat - re-enable registration of algorithms (jsc#PED-3692)
- crypto: qat - refactor PF top half for PFVF (jsc#PED-3692)
- crypto: qat - refactor pfvf version request messages (jsc#PED-3692)
- crypto: qat - refactor submission logic (jsc#PED-3692)
- crypto: qat - relocate PFVF PF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF VF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF disabled function (jsc#PED-3692)
- crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692)
- crypto: qat - relocate backlog related structures (jsc#PED-3692)
- crypto: qat - relocate bufferlist logic (jsc#PED-3692)
- crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692)
- crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692)
- crypto: qat - remove empty sriov_configure() (jsc#PED-3692)
- crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692)
- crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692)
- crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692)
- crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692)
- crypto: qat - remove unneeded assignment (jsc#PED-3692)
- crypto: qat - remove unneeded braces (jsc#PED-3692)
- crypto: qat - remove unneeded packed attribute (jsc#PED-3692)
- crypto: qat - remove unused PFVF stubs (jsc#PED-3692)
- crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692)
- crypto: qat - rename bufferlist functions (jsc#PED-3692)
- crypto: qat - rename pfvf collision constants (jsc#PED-3692)
- crypto: qat - reorganize PFVF code (jsc#PED-3692)
- crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692)
- crypto: qat - replace deprecated MSI API (jsc#PED-3692)
- crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692)
- crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692)
- crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692)
- crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692)
- crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692)
- crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692)
- crypto: qat - simplify adf_enable_aer() (jsc#PED-3692)
- crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692)
- crypto: qat - split PFVF message decoding from handling (jsc#PED-3692)
- crypto: qat - stop using iommu_present() (jsc#PED-3692)
- crypto: qat - store the PFVF protocol version of the (jsc#PED-3692)
- crypto: qat - store the ring-to-service mapping (jsc#PED-3692)
- crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692)
- crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692)
- crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692)
- crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692)
- crypto: qat - use hweight for bit counting (jsc#PED-3692)
- crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692)
- crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692)
- crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692)
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes).
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992).
- debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes).
- dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes).
- dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes).
- dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes).
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes).
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes).
- dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes).
- dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes).
- dmaengine: mv_xor_v2: Fix an error code (git-fixes).
- do not reuse connection if share marked as isolated (bsc#1193629).
- docs: networking: fix x25-iface.rst heading &amp; index order (git-fixes).
- drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes).
- drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes).
- drm-hyperv: Add a bug reference to two existing changes (bsc#1211281).
- drm/amd/display: Fix hang when skipping modeset (git-fixes).
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes).
- drm/amd/display: fix flickering caused by S/G mode (git-fixes).
- drm/amd: Fix an out of bounds error in BIOS parser (git-fixes).
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes).
- drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes).
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes).
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes).
- drm/displayid: add displayid_get_header() and check bounds better (git-fixes).
- drm/exynos: fix g2d_open/close helper function definitions (git-fixes).
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes).
- drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes).
- drm/i915/dg2: Support 4k@30 on HDMI (git-fixes).
- drm/i915/dp: prevent potential div-by-zero (git-fixes).
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes).
- drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes).
- drm/msm/dp: unregister audio driver during unbind (git-fixes).
- drm/msm/dpu: Add INTF_5 interrupts (git-fixes).
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes).
- drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- drm/tegra: Avoid potential 32-bit integer overflow (git-fixes).
- drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes).
- drm/ttm: optimize pool allocations a bit v2 (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix &quot;snps,hsphy_interface&quot; type (git-fixes).
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes).
- fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes).
- fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes).
- fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes).
- fbdev: udlfb: Fix endpoint check (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes).
- fuse: always revalidate rename target dentry (bsc#1211808).
- fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807).
- futex: Resend potentially swallowed owner death notification (git-fixes).
- google/gve:fix repeated words in comments (bsc#1211519).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (git-fixes).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake &quot;droping&quot; -&gt; &quot;dropping&quot; (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (git-fixes).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes).
- gve: enhance no queue page list detection (bsc#1211519).
- i2c: omap: Fix standard mode false ACK readings (git-fixes).
- i2c: tegra: Fix PEC support for SMBUS block read (git-fixes).
- i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378).
- i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378).
- i40e: Fix DMA mappings leak (jsc#SLE-18378).
- i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378).
- i40e: Fix VF set max MTU size (jsc#SLE-18378).
- i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378).
- i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378).
- i40e: Fix calculating the number of queue pairs (jsc#SLE-18378).
- i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378).
- i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378).
- i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378).
- i40e: Fix for VF MAC address 0 (jsc#SLE-18378).
- i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378).
- i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378).
- i40e: Fix kernel crash during module removal (jsc#SLE-18378).
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378).
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378).
- i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378).
- i40e: Refactor tc mqprio checks (jsc#SLE-18378).
- i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378).
- i40e: fix accessing vsi-&gt;active_filters without holding lock (jsc#SLE-18378).
- i40e: fix flow director packet filter programming (jsc#SLE-18378).
- i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378).
- i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378).
- iavf/iavf_main: actually log -&gt;src mask when talking about it (jsc#SLE-18385).
- iavf: Detach device during reset task (jsc#SLE-18385).
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385).
- iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385).
- iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385).
- iavf: Fix a crash during reset task (jsc#SLE-18385).
- iavf: Fix bad page state (jsc#SLE-18385).
- iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385).
- iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385).
- iavf: Fix max_rate limiting (jsc#SLE-18385).
- iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385).
- iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385).
- iavf: fix hang on reboot with ice (jsc#SLE-18385).
- iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385).
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385).
- ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375).
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375).
- igb: Add lock to avoid data race (jsc#SLE-18379).
- igb: Enable SR-IOV after reinit (jsc#SLE-18379).
- igb: Initialize mailbox message for VF reset (jsc#SLE-18379).
- igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379).
- igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379).
- igbvf: Regard vf reset nack as success (jsc#SLE-18379).
- igc: Add checking for basetime less than zero (jsc#SLE-18377).
- igc: Add ndo_tx_timeout support (jsc#SLE-18377).
- igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377).
- igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377).
- igc: Lift TAPRIO schedule restriction (jsc#SLE-18377).
- igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377).
- igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377).
- igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377).
- igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377).
- igc: fix the validation logic for taprio's gate list (jsc#SLE-18377).
- igc: read before write to SRRCTL register (jsc#SLE-18377).
- igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377).
- igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377).
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes).
- iio: adc: ad7192: Change &quot;shorted&quot; channels to differential (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes).
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553).
- ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384).
- ixgbe: Enable setting RSS table to default values (jsc#SLE-18384).
- ixgbe: Fix panic during XDP_TX with &gt; 64 CPUs (jsc#SLE-18384).
- ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384).
- ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384).
- ixgbe: fix pci device refcount leak (jsc#SLE-18384).
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384).
- kABI workaround for btbcm.c (git-fixes).
- kABI workaround for mt76_poll_msec() (git-fixes).
- kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest  (git-fixes)
- kabi/severities: added Microsoft mana symbold (bsc#1210551)
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- kernel-source: Remove unused macro variant_symbols
- kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731).
- kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes).
- leds: Fix reference to led_set_brightness() in doc (git-fixes).
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes).
- leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes).
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes).
- locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes).
- mailbox: zynqmp: Fix IPI isr handling (git-fixes).
- mailbox: zynqmp: Fix typo in IPI documentation (git-fixes).
- mce: fix set_mce_nospec to always unmap the whole page (git-fixes).
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes).
- media: netup_unidvb: fix use-after-free at del_timer() (git-fixes).
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes).
- media: radio-shark: Add endpoint checks (git-fixes).
- media: rcar_fdp1: Fix the correct variable assignments (git-fixes).
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449).
- mfd: dln2: Fix memory leak in dln2_probe() (git-fixes).
- mfd: tqmx86: Correct board names for TQMxE39x (git-fixes).
- mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes).
- misc: fastrpc: reject new invocations during device removal (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes).
- mmc: sdhci-esdhc-imx: make &quot;no-mmc-hs400&quot; works (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes).
- mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written (git-fixes).
- net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes).
- net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes).
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes).
- net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982).
- net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022).
- net: mana: Add support for jumbo frame (bsc#1210551).
- net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551).
- net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022).
- net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022).
- net: mana: Enable RX path to handle various MTU sizes (bsc#1210551).
- net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022).
- net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes).
- net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022).
- net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022).
- net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022).
- net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022).
- net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551).
- net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551).
- net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022).
- net: mana: Use napi_build_skb in RX path (bsc#1210551).
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes).
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564).
- net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes).
- net: qrtr: correct types of trace event parameters (git-fixes).
- net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes).
- net: tun: avoid disabling NAPI twice (git-fixes).
- net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes).
- net: tun: stop NAPI when detaching queues (git-fixes).
- net: tun: unlink NAPI from device on destruction (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes).
- net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes).
- nilfs2: do not write dirty data after degenerating to read-only (git-fixes).
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes).
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes).
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes).
- nvme-multipath: fix hang when disk goes live over reconnect (git-fixes).
- nvme-pci: add quirks for Samsung X5 SSDs (git-fixes).
- nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes).
- nvme-pci: clear the prp2 field when not used (git-fixes).
- nvme-pci: disable write zeroes on various Kingston SSD (git-fixes).
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes).
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes).
- nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes).
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes).
- nvme-tcp: fix bogus request completion when failing to send AER (git-fixes).
- nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes).
- nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes).
- nvme: also return I/O command effects from nvme_command_effects (git-fixes).
- nvme: check for duplicate identifiers earlier (git-fixes).
- nvme: cleanup __nvme_check_ids (git-fixes).
- nvme: fix discard support without oncs (git-fixes).
- nvme: fix interpretation of DMRSL (git-fixes).
- nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes).
- nvme: fix passthrough csi check (git-fixes).
- nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes).
- nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes).
- nvme: set non-mdts limits in nvme_scan_work (git-fixes).
- nvmet-tcp: add bounds check on Transfer Tag (git-fixes).
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes).
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes).
- nvmet: fix mar and mor off-by-one errors (git-fixes).
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes).
- nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes).
- nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes).
- nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes).
- phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes).
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes).
- pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes).
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes).
- platform/x86: hp-wmi: Support touchpad on/off (git-fixes).
- platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes).
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes).
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes).
- power: supply: bq27xxx: expose battery data when CI=1 (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes).
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes).
- powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729).
- powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729).
- pstore: Revert pmsg_lock back to a normal mutex (git-fixes).
- purgatory: fix disabling debug info (git-fixes).
- pwm: meson: Fix axg ao mux parents (git-fixes).
- pwm: meson: Fix g12a ao clk81 name (git-fixes).
- qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001).
- qed/qed_mng_tlv: correctly zero out -&gt;min instead of -&gt;hour (jsc#SLE-19001).
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001).
- qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001).
- qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001).
- r8152: fix flow control issue of RTL8156A (git-fixes).
- r8152: fix the poor throughput for 2.5G devices (git-fixes).
- r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes).
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes).
- regulator: mt6359: add read check for PMIC MT6359 (git-fixes).
- regulator: pca9450: Fix BUCK2 enable_mask (git-fixes).
- remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes).
- ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes).
- ring-buffer: Fix kernel-doc (git-fixes).
- ring-buffer: Sync IRQ works before buffer destruction (git-fixes).
- rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
- rtmutex: Ensure that the top waiter is always woken up (git-fixes).
- s390/ap: fix crash on older machines based on QCI info missing (bsc#1210947)
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686).
- s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687).
- s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes).
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688).
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689).
- s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690).
- s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691).
- s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692).
- s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693).
- s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes).
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes).
- s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714).
- s390x: Fixed hard lockups while running stress-ng and LPAR hangs (bsc#1195655 ltc#195733).
- scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes).
- scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes).
- scsi: libsas: Add sas_ata_device_link_abort() (git-fixes).
- scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes).
- scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847).
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847).
- scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847).
- scsi: lpfc: Match lock ordering of lpfc_cmd-&gt;buf_lock and hbalock for abort paths (bsc#1211847).
- scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847).
- scsi: lpfc: Update congestion warning notification period (bsc#1211847).
- scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847).
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes).
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes).
- scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes).
- scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960).
- scsi: qla2xxx: Fix hang in task management (bsc#1211960).
- scsi: qla2xxx: Fix mem access after free (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd failure (bsc#1211960).
- scsi: qla2xxx: Multi-que support for TMF (bsc#1211960).
- scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960).
- scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960).
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960).
- scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960).
- scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960).
- scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes).
- scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes).
- selftests mount: Fix mount_setattr_test builds failed (git-fixes).
- selftests/resctrl: Allow -&gt;setup() to return errors (git-fixes).
- selftests/resctrl: Check for return value after write_schemata() (git-fixes).
- selftests/resctrl: Extend CPU vendor detection (git-fixes).
- selftests/resctrl: Move -&gt;setup() call outside of test specific branches (git-fixes).
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes).
- selftests/sgx: Add &quot;test_encl.elf&quot; to TEST_FILES (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes).
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes).
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes).
- selftests: xsk: Disable IPv6 on VETH1 (git-fixes).
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes).
- selinux: do not use make's grouped targets feature yet (git-fixes).
- serial: 8250: Reinit port-&gt;pm on port specific driver unbind (git-fixes).
- serial: 8250_bcm7271: balance clk_enable calls (git-fixes).
- serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes).
- serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes).
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes).
- serial: Add support for Advantech PCI-1611U card (git-fixes).
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes).
- serial: qcom-geni: fix enabling deactivated interrupt (git-fixes).
- serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes).
- sfc: Change VF mac via PF as first preference if available (git-fixes).
- sfc: Fix module EEPROM reporting for QSFP modules (git-fixes).
- sfc: Fix use-after-free due to selftest_work (git-fixes).
- sfc: correctly advertise tunneled IPv6 segmentation (git-fixes).
- sfc: ef10: do not overwrite offload features at NIC reset (git-fixes).
- sfc: fix TX channel offset when using legacy interrupts (git-fixes).
- sfc: fix considering that all channels have TX queues (git-fixes).
- sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes).
- sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes).
- sfc: include vport_id in filter spec hash and equal() (git-fixes).
- smb3: display debug information better for encryption (bsc#1193629).
- smb3: fix problem remounting a share after shutdown (bsc#1193629).
- smb3: improve parallel reads of large files (bsc#1193629).
- smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629).
- smb3: move some common open context structs to smbfs_common (bsc#1193629).
- soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes).
- soundwire: qcom: gracefully handle too many ports in DT (git-fixes).
- spi: spi-imx: fix MX51_ECSPI_* macros when cs &gt; 3 (git-fixes).
- spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes).
- struct ci_hdrc: hide new member at end (git-fixes).
- supported.conf: mark mana_ib supported
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes).
- thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165).
- thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165).
- tools/virtio: compile with -pthread (git-fixes).
- tools/virtio: fix the vringh test for virtio ring changes (git-fixes).
- tools/virtio: fix virtio_test execution (git-fixes).
- tools/virtio: initialize spinlocks in vring_test.c (git-fixes).
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes).
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes).
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes).
- tracing: Fix permissions for the buffer_percent file (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes).
- usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes).
- usb: chipidea: core: fix possible concurrent when switch role (git-fixes).
- usb: dwc3: Align DWC3_EP_* flag macros (git-fixes).
- usb: dwc3: Fix a repeated word checkpatch warning (git-fixes).
- usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes).
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes).
- usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes).
- usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes).
- usb: dwc3: gadget: Delay issuing End Transfer (git-fixes).
- usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes).
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes).
- usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes).
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes).
- usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes).
- usb: gadget: u_ether: Fix host MAC address case (git-fixes).
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes).
- usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes).
- usb: typec: tcpm: fix multiple times discover svids error (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usrmerge: Remove usrmerge compatibility symlink in buildroot (boo#1211796).
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes).
- vdpa: fix use-after-free on vp_vdpa_remove (git-fixes).
- vhost/net: Clear the pending messages when the backend is removed (git-fixes).
- virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes).
- virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes).
- virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes).
- virtio_net: split free_unused_bufs() (git-fixes).
- virtio_net: suppress cpu stall when free_unused_bufs (git-fixes).
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes).
- wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes).
- wifi: ath: Silence memcpy run-time false positive warning (git-fixes).
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes).
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes).
- wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes).
- wifi: iwlwifi: fw: fix DBGI dump (git-fixes).
- wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes).
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes).
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes).
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes).
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes).
- wifi: mac80211: fix min center freq offset tracing (git-fixes).
- wifi: mt76: add flexible polling wait-interval support (git-fixes).
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes).
- wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes).
- wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes).
- wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes).
- workqueue: Fix hung time report of worker pools (bsc#1211044).
- workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044).
- workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044).
- workqueue: Warn when a new worker could not be created (bsc#1211044).
- workqueue: Warn when a rescuer could not be created (bsc#1211044).
- x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes).
- x86/MCE/AMD: Use an u64 for bank_map (git-fixes).
- x86/alternative: Make debug-alternative selective (bsc#1206578).
- x86/alternative: Report missing return thunk details (git-fixes).
- x86/alternative: Support relocations in alternatives (bsc#1206578).
- x86/amd: Use IBPB for firmware calls (git-fixes).
- x86/boot: Skip realmode init code when running as Xen PV guest  (git-fixes).
- x86/bugs: Add &quot;unknown&quot; reporting for MMIO Stale Data (git-fixes).
- x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes).
- x86/bugs: Warn when &quot;ibrs&quot; mitigation is selected on Enhanced IBRS parts (git-fixes).
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes).
- x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes).
- x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes).
- x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes).
- x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205).
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes).
- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes).
- x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes).
- x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578).
- x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes).
- x86/microcode/AMD: Fix mixed steppings support (git-fixes).
- x86/microcode/AMD: Track patch allocation size explicitly (git-fixes).
- x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes).
- x86/microcode: Add explicit CPU vendor dependency (git-fixes).
- x86/microcode: Adjust late loading result reporting message (git-fixes).
- x86/microcode: Rip out the OLD_INTERFACE (git-fixes).
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes).
- x86/mm: Use proper mask when setting PUD mapping (git-fixes).
- x86/nospec: Unwreck the RSB stuffing (git-fixes).
- x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes).
- x86/pat: Fix x86_has_pat_wp() (git-fixes).
- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes).
- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes).
- x86/signal: Fix the value returned by strict_sas_size() (git-fixes).
- x86/speculation/mmio: Print SMT warning (git-fixes).
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes).
- x86/static_call: Serialize __static_call_fixup() properly (git-fixes).
- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- x86/topology: Fix duplicated core ID within a package (git-fixes).
- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- x86: Fix return value of __setup handlers (git-fixes).
- x86: drop bogus &quot;cc&quot; clobber from __try_cmpxchg_user_asm() (git-fixes).
- xen/netback: do not do grant copy across page boundary (git-fixes).
- xen/netback: use same error messages for same errors (git-fixes).
- xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes).
- xhci: Fix incorrect tracking of free space on transfer rings (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.66.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.66.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.66.1.150400.24.29.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.66.1.150400.24.29.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.66.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.66.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.66.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.66.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.66.1.150400.24.29.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.66.1.150400.24.29.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2495</id>
    <title>Recommended update for libzypp</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686661618"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211661" id="1211661" title="Signature verification failed for repomd.xml after extra keys download failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="L3: SUSE Manager reposync has started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
    </references>
    <description>This update for libzypp fixes the following issues:

- Fix &quot;Curl error 92&quot; when synchronizing SUSE Manager repositories. [bsc#1212187]
- Do not unconditionally release a medium if provideFile failed. [bsc#1211661]
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="src" src="src/libzypp-17.31.13-150400.3.30.1.src.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="x86_64" src="x86_64/libzypp-17.31.13-150400.3.30.1.x86_64.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="s390x" src="s390x/libzypp-17.31.13-150400.3.30.1.s390x.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.30.1" arch="aarch64" src="aarch64/libzypp-17.31.13-150400.3.30.1.aarch64.rpm">
          <filename>libzypp-17.31.13-150400.3.30.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2547</id>
    <title>Recommended update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687179112"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211000" id="1211000" title="vCPU stalls in Qemu when storage on NFS [ref:_00D1igLOd._5005qQ2Egk:ref]" type="bugzilla"/>
    </references>
    <description>This update for qemu fixes the following issues:

- vCPU stalls in Qemu with NFS storage (bsc#1211000) 
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="src" src="src/qemu-6.2.0-150400.37.17.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.17.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.17.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.17.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.17.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.17.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.17.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.17.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.17.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.17.1" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.17.1.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.17.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.17.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.17.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2782</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688484891"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152489" id="1152489" title="[TRACKERBUG] git-fixes pile for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1160435" id="1160435" title="5.5 kernel-docs package build failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1172073" id="1172073" title="kernel-devel and kernel-source need Obsolete for previous package rebuilds of the same version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191731" id="1191731" title="kernel-default-base from SLE-15-SP4-JeOS-Alpha-202110-1 conflicts with kernel-default-base from the &quot;moving target&quot; repository" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195655" id="1195655" title="SLES15 SP4 - [P8][P9][P10]- Hard lockups are observed while running stress-ng and LPAR hangs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195921" id="1195921" title="ACPI patch for supporting nBFT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205650" id="1205650" title="cgroup: Honor caller's cgroup NS when resolving path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205756" id="1205756" title="VUL-0: CVE-2022-45884: kernel-source-azure,kernel-source-rt,kernel-source: UaF in drivers/media/dvb-core/dvbdev.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205758" id="1205758" title="VUL-0: CVE-2022-45885: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_frontend.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205760" id="1205760" title="VUL-0: CVE-2022-45886: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_net.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205762" id="1205762" title="VUL-0: CVE-2022-45887: kernel-source-rt,kernel-source,kernel-source-azure: Memory leak in drivers/media/usb/ttusb-dec/ttusb_dec.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205803" id="1205803" title="VUL-0: CVE-2022-45919: kernel: use-after-free when there is a disconnect after an open in drivers/media/dvb-core/dvb_ca_en50221.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206024" id="1206024" title="VUL-0: CVE-2022-4269: kernel-source,kernel-source-rt,kernel-source-azure: kernel: net: CPU soft lockup in TC mirred egress-to-ingress action" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206578" id="1206578" title="Cannot boot into OS when Enhanced REP MOVSB/STOSB set Disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207553" id="1207553" title="Missing '/usr/lib/firmware/iwlwifi-so-a0-gf-a0.pnvm', so Intel Wi-Fi 6E AX211 fails to work with iwlwifi module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208050" id="1208050" title="Partner-L3: [HPS Bug] OOB NIC driver failed with SLES15-SP4-QU1.1 but passed with SLES15-SP4 GM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208410" id="1208410" title="[NetApp SLES15 SP5 Bug] multipathd hang seen on SAN-booted host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208600" id="1208600" title="VUL-0: CVE-2023-1077: kernel: type confusion in pick_next_rt_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208604" id="1208604" title="VUL-0: CVE-2023-1079: kernel: Use After Free in asus_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208758" id="1208758" title="BUG: kernel NULL pointer dereference, address: 0000000000000028 - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209287" id="1209287" title="VUL-0: CVE-2023-1380: kernel: A USB-accessible slab-out-of-bounds read in Linux kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209288" id="1209288" title="VUL-0: CVE-2023-1382: kernel: denial of service in tipc_conn_close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209367" id="1209367" title="PSP_CI: P10 Up-to 8% degradation using Unixbench 16 copy filecopy on SLES15SP4 SS1 compared to SLES15SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209856" id="1209856" title="SLES 15 SP4 - kernel: fix __clear_user() inline assembly constraints" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209982" id="1209982" title="[Azure][MANA][Debuggability] Add new MANA VF performance counters for easier troubleshooting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210165" id="1210165" title="Kernel WARNING &quot;thunderbolt 0000:34:00.6: interrupt for TX ring 0 is already enabled&quot; at S3/S4 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210294" id="1210294" title="VUL-0: CVE-2023-30456: kernel: nVMX CR0 and CR4 consistency checks issue on x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210449" id="1210449" title="SLES 15 SP4 - s390/qeth: NET2016 - fix use-after-free in HSCI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210450" id="1210450" title="SLES 15 SP4 - s390/extmem: return correct segment type in __segment_load()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210498" id="1210498" title="VUL-0: CVE-2023-2124: kernel-source: OOB access in the XFS subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210533" id="1210533" title="VUL-0: CVE-2023-2002: kernel-source-azure,kernel-source-rt,kernel-source: unauthorized management command execution" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210551" id="1210551" title="[Azure][MANA] Backport Patches for MANA Jumbo Frame Support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210647" id="1210647" title="VUL-0: CVE-2023-2162: kernel-source-rt,kernel-source,kernel-source-azure: UAF during login when accessing the shost ipaddress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210741" id="1210741" title="[Azure][MANA][InfinitiBand] Features Support and InfiniBand for MANA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210775" id="1210775" title="[859215.187505] kernel BUG at ../mm/slub.c:379! - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210783" id="1210783" title="VUL-0: CVE-2023-31084: kernel: blocking operation when a task is in !TASK_RUNNING when dvb_frontend_get_event, wait_event_interruptible is called" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210791" id="1210791" title="KMP build fails with ld: cannot find arch/s390/lib/expoline/expoline.o" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210806" id="1210806" title="VUL-0: CVE-2023-2269: kernel-source-azure,kernel-source-rt,kernel-source: deadlock in dm_get_inactive_table() in dm-ioctl.c leads to local DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210940" id="1210940" title="VUL-0: CVE-2023-31436: kernel: out-of-bounds write because lmax can exceed QFQ_MIN_LMAX in qfq_change_class in net/sched/sch_qfq.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210947" id="1210947" title="s390/ap: fix crash on older machines based on QCI info missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211037" id="1211037" title="VUL-0: CVE-2023-2483: kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211043" id="1211043" title="VUL-0: CVE-2023-32233: kernel: LPE due to use-after-free in Netfilter nf_tables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211044" id="1211044" title="kernel: Improve workqueue stall reports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211089" id="1211089" title="ALP Workbench: kmod-testsuite fails to build on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211105" id="1211105" title="VUL-0: CVE-2023-2513: kernel-source-azure,kernel-source,kernel-source-rt: ext4: use-after-free in ext4_xattr_set_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211113" id="1211113" title="apparmor DENIED errors for gzip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211131" id="1211131" title="VUL-0: CVE-2023-2156: kernel-source-rt,kernel-source,kernel-source-azure: Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211205" id="1211205" title="Regression: 5.14.21-150400.24.60 lacks avx cpu flags on Sapphire Rapids processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211263" id="1211263" title="VUL-0: CVE-2023-28410: kernel-source: A potential security vulnerability in some Intel i915 Graphics drivers for linux may allow escalation of privilege" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211280" id="1211280" title="Add patch to support rumble on latest xbox controllers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211281" id="1211281" title="[Azure][Hyper-V]  Backport request for the the bug Unable to send packet via vmbus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211299" id="1211299" title="LTP nfs08.sh (cache invalidation for directories) fails on NFS &gt;= v4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211346" id="1211346" title="Partner-L3: NULL pointer dereference in lpfc_dev_loss_tmo_callbk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211387" id="1211387" title="VUL-0: kernel: Use after free bug in imsttfb_probe due to lack of error-handling of init_imstt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211414" id="1211414" title="Updating kernel causes 3rd party drivers error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211449" id="1211449" title="VUL-1: kernel: Use after free bug in r592_remov due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211465" id="1211465" title="SLES 15 SP4 - net/iucv: Fix size of interrupt data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211519" id="1211519" title="Update gve kernel module to 6.2 upstream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211564" id="1211564" title="mlxbf_gige driver crash during YES Certification testing, kernel BUG at ../net/core/skbuff.c:111!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211590" id="1211590" title="VUL-0: CVE-2023-33288: kernel-source-rt,kernel-source,kernel-source-azure: Use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211686" id="1211686" title="s390/ctcm: Fix return type of ctc{mp,}m_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211687" id="1211687" title="s390/dasd: fix hanging blockdevice after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211688" id="1211688" title="s390/kprobes: fix current_kprobe never cleared after kprobes reenter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211689" id="1211689" title="s390/kprobes: fix irq mask clobbering on kprobe reenter from  post_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211690" id="1211690" title="s390/lcs: Fix return type of lcs_start_xmit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211691" id="1211691" title="s390/mem_detect: fix detect_memory() error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211692" id="1211692" title="s390/netiucv: Fix return type of netiucv_tx()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211693" id="1211693" title="s390/qdio: fix do_sqbs() inline assembly constraint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211714" id="1211714" title="s390/vdso: remove -nostdlib compiler flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211796" id="1211796" title="kernel modules not usrmerged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211804" id="1211804" title="ceph: force updating the msg pointer in non-split case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211807" id="1211807" title="fuse: fix attr version comparison in fuse_read_update_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211808" id="1211808" title="fuse: always revalidate rename target dentry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211847" id="1211847" title="Update Broadcom Emulex lpfc driver to 14.2.0.12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211852" id="1211852" title="Update Broadcom Emulex lpfc driver to 14.2.0.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211855" id="1211855" title="VUL-0: CVE-2023-3006: kernel: Add Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211960" id="1211960" title="qla2xxx: update driver to 10.02.08.300-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212129" id="1212129" title="VUL-0: CVE-2023-3141: kernel-source,kernel-source-azure,kernel-source-rt: kernel: Use after free bug in r592_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212154" id="1212154" title="VUL-0: CVE-2023-3161: kernel: fbcon: shift-out-of-bounds in fbcon_set_font()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212155" id="1212155" title="VUL-0: CVE-2023-21102: kernel: bypass of shadow stack protection due to a logic error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212158" id="1212158" title="kernel-docs missing top level chapter numbers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212350" id="1212350" title="SLE-15SP4 KOTD: Kernel warning during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212448" id="1212448" title="Backport of cleanup patches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212494" id="1212494" title="VUL-0: CVE-2023-35823: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212504" id="1212504" title="VUL-0: CVE-2023-35788: kernel: out-of-bounds write in net/sched/cls_flower.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212513" id="1212513" title="VUL-0: CVE-2023-35828: kernel: use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209039" id="1209039" title="VUL-0: CVE-2023-1249: kernel: missing mmap_lock in fill_files_note that could possibly lead to a use after free in the coredump code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212540" id="1212540" title="ceph: fix use-after-free bug for inodes when flushing capsnaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211410" id="1211410" title="Weird \vmalloc error\ kernel stack trace when lsof is executed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212561" id="1212561" title="cgroup: always put cset in cgroup_css_set_put_fork" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212563" id="1212563" title="cgroup: fix missing cpus_read_{lock,unlock}() in  cgroup_transfer_tasks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212564" id="1212564" title="bpf: Fix UAF in task local storage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212592" id="1212592" title="s390/dasd: Use correct lock while counting channel queue length" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" id="CVE-2023-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" id="CVE-2023-1249" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" id="CVE-2023-35788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" id="CVE-2023-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" id="CVE-2023-3161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" id="CVE-2023-21102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" id="CVE-2023-3141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" id="CVE-2023-1077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" id="CVE-2023-28410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" id="CVE-2023-2156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" id="CVE-2023-1382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" id="CVE-2023-3006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" id="CVE-2023-2269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" id="CVE-2023-1079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" id="CVE-2023-2162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" id="CVE-2023-33288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" id="CVE-2022-45886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45886" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" id="CVE-2022-45885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45885" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" id="CVE-2022-45887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45887" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" id="CVE-2022-45919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" id="CVE-2022-45884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45884" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" id="CVE-2023-31084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31084" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" id="CVE-2023-2002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" id="CVE-2023-31436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" id="CVE-2023-30456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" id="CVE-2022-4269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4269" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" id="CVE-2023-32233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" id="CVE-2023-1380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" id="CVE-2023-2513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" id="CVE-2023-2483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" id="CVE-2023-2124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2124" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3692" id="PED-3692" title="https://jira.suse.com/browse/PED-3692" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3931" id="PED-3931" title="https://jira.suse.com/browse/PED-3931" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4022" id="PED-4022" title="https://jira.suse.com/browse/PED-4022" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-35828: Fixed a use-after-free flaw inside renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
- CVE-2023-35823: Fixed a use-after-free in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
- CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590).
- CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294).
- CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855).
- CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove due caused by a race condition (bsc#1211037).
- CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
- CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-1249: Fixed a use-after-free flaw inside the core dump subsystem, that could have been used to crash the system (bsc#1209039).
- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024).

The following non-security bugs were fixed:

- 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes).
- ACPI: EC: Fix oops when removing custom query handlers (git-fixes).
- ACPI: bus: Ensure that notify handlers are not running after removal (git-fixes).
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes).
- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes).
- ACPI: tables: Add support for NBFT (bsc#1195921).
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes).
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (git-fixes).
- ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes).
- ALSA: cs46xx: mark snd_cs46xx_download_image as static (git-fixes).
- ALSA: firewire-digi00x: prevent potential use after free (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes).
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo L140AU (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes).
- ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes).
- ALSA: hda/realtek: Apply HP B&amp;O top speaker profile to Pavilion 15 (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes).
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes).
- ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes).
- ALSA: hda: Fix Oops by 9.1 surround channel names (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend period (git-fixes).
- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes).
- ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes).
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes).
- ALSA: usb-audio: Fix broken resume due to UAC3 power state (git-fixes).
- ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes).
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes)
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes).
- ARM: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes).
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes).
- ARM: dts: vexpress: add missing cache properties (git-fixes).
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes).
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds (git-fixes).
- ASoC: rt5682: Disable jack detection interrupt during suspend (git-fixes).
- ASoC: soc-pcm: fix hw-&gt;formats cleared by soc_pcm_hw_init() for dpcm (git-fixes).
- ASoC: soc-pcm: test if a BE can be prepared (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions (git-fixes).
- Add a bug reference to two existing drm-hyperv changes (bsc#1211281).
- Also include kernel-docs build requirements for ALP
- Avoid unsuported tar parameter on SLE12
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes).
- Bluetooth: L2CAP: fix &quot;bad unlock balance&quot; in l2cap_disconnect_rsp (git-fixes).
- Bluetooth: btintel: Add LE States quirk support (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- Documentation/filesystems: ramfs-rootfs-initramfs: use :Author: (git-fixes).
- Documentation/filesystems: sharedsubtree: add section headings (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- HID: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes).
- HID: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes).
- HID: microsoft: Add rumble support to latest xbox controllers (bsc#1211280).
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes).
- HID: wacom: Force pen out of prox if no events have been received in a while (git-fixes).
- HID: wacom: Set a default resolution for older tablets (git-fixes).
- HID: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes).
- HID: wacom: generic: Set battery quirk only when we see battery data (git-fixes).
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes)
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes)
- IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes)
- IB/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes)
- Input: fix open count when closing inhibited device (git-fixes).
- Input: psmouse - fix OOB access in Elantech protocol (git-fixes).
- Input: xpad - add constants for GIP interface numbers (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes).
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes).
- KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes)
- KVM: Disallow user memslot with size that exceeds &quot;unsigned long&quot; (git-fixes)
- KVM: Do not create VM debugfs files outside of the VM directory (git-fixes)
- KVM: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes)
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes).
- KVM: Prevent module exit until all VMs are freed (git-fixes)
- KVM: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes).
- KVM: SVM: Fix benign &quot;bool vs. int&quot; comparison in svm_set_cr0() (git-fixes).
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() (git-fixes).
- KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes).
- KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes).
- KVM: SVM: hyper-v: placate modpost section mismatch error (git-fixes).
- KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes).
- KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes).
- KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes).
- KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes).
- KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes).
- KVM: arm64: Do not arm a hrtimer for an already pending timer (git-fixes)
- KVM: arm64: Do not hypercall before EL2 init (git-fixes)
- KVM: arm64: Do not return from void function (git-fixes)
- KVM: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes)
- KVM: arm64: Fix S1PTW handling on RO memslots (git-fixes)
- KVM: arm64: Fix bad dereference on MTE-enabled systems (git-fixes)
- KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes)
- KVM: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes)
- KVM: arm64: Free hypervisor allocations if vector slot init fails (git-fixes)
- KVM: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes)
- KVM: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes)
- KVM: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes)
- KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes)
- KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes)
- KVM: arm64: Save PSTATE early on exit (git-fixes)
- KVM: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes)
- KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes)
- KVM: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes)
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes)
- KVM: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes)
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes).
- KVM: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes).
- KVM: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes).
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes).
- KVM: nVMX: Inject #GP, not #UD, if &quot;generic&quot; VMXON CR0/CR4 check fails (git-fixes).
- KVM: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes).
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes).
- KVM: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes).
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes).
- KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes).
- KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes).
- KVM: x86/pmu: Ignore pmu-&gt;global_ctrl check if vPMU does not support global_ctrl (git-fixes).
- KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes).
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes).
- KVM: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes).
- KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes).
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes).
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes).
- KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes).
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes).
- KVM: x86: Protect the unused bits in MSR exiting flags (git-fixes).
- KVM: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes).
- KVM: x86: Report deprecated x87 features in supported CPUID (git-fixes).
- KVM: x86: do not set st-&gt;preempted when going back to user space (git-fixes).
- KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes).
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes).
- PCI/ASPM: Remove pcie_aspm_pm_state_change() (git-fixes).
- PM: hibernate: Do not get block device exclusively in test_resume mode (git-fixes).
- PM: hibernate: Turn snapshot_test into global variable (git-fixes).
- PM: hibernate: fix load_image_and_restore() error path (git-fixes).
- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)
- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes)
- RDMA/bnxt_re: Fix the page_size used during the MR creation (git-fixes)
- RDMA/cm: Trace icm_send_rej event before the cm state is reset (git-fixes)
- RDMA/core: Fix multiple -Warray-bounds warnings (git-fixes)
- RDMA/efa: Fix unsupported page sizes in device (git-fixes)
- RDMA/hns: Fix base address table allocation (git-fixes)
- RDMA/hns: Fix timeout attr in query qp for HIP08 (git-fixes)
- RDMA/hns: Modify the value of long message loopback slice (git-fixes)
- RDMA/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383).
- RDMA/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383).
- RDMA/irdma: Fix Local Invalidate fencing (git-fixes)
- RDMA/irdma: Fix RQ completion opcode (jsc#SLE-18383).
- RDMA/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383).
- RDMA/irdma: Fix inline for multiple SGE's (jsc#SLE-18383).
- RDMA/irdma: Prevent QP use after free (git-fixes)
- RDMA/irdma: Remove enum irdma_status_code (jsc#SLE-18383).
- RDMA/irdma: Remove excess error variables (jsc#SLE-18383).
- RDMA/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022).
- RDMA/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022).
- RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022).
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255).
- RDMA/mlx5: Fix flow counter query via DEVX (git-fixes)
- RDMA/mlx5: Use correct device num_ports when modify DC (git-fixes)
- RDMA/rdmavt: Delete unnecessary NULL check (git-fixes)
- RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes)
- RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes)
- RDMA/rxe: Fix the error &quot;trying to register non-static key in rxe_cleanup_task&quot; (git-fixes)
- RDMA/rxe: Remove tasklet call from rxe_cq.c (git-fixes)
- RDMA/siw: Fix potential page_array out of range access (git-fixes)
- RDMA/siw: Remove namespace check from siw_netdev_event() (git-fixes)
- RDMA/srpt: Add a check for valid 'mad_agent' pointer (git-fixes)
- Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes).
- Revert &quot;KVM: set owner of cpu and vm file operations&quot; (git-fixes)
- SMB3.1.1: add new tree connect ShareFlags (bsc#1193629).
- SMB3: Add missing locks to protect deferred close file list (git-fixes).
- SMB3: Close all deferred handles of inode in case of handle lease break (bsc#1193629).
- SMB3: Close deferred file handles in case of handle lease break (bsc#1193629).
- SMB3: drop reference to cfile before sending oplock break (bsc#1193629).
- SMB3: force unmount was failing to close deferred close files (bsc#1193629).
- SUNRPC: Clean up svc_deferred_class trace events (git-fixes).
- SUNRPC: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775).
- Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
- Trim obsolete KMP list. SLE11 is out of support, we do not need to handle upgrading from SLE11 SP1.
- USB / dwc3: Fix a checkpatch warning in core.c (git-fixes).
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes).
- USB: core: Add routines for endpoint checks in old drivers (git-fixes).
- USB: dwc3: fix use-after-free on core driver unbind (git-fixes).
- USB: dwc3: qcom: fix NULL-deref on suspend (git-fixes).
- USB: serial: option: add Quectel EM061KGL series (git-fixes).
- USB: sisusbvga: Add endpoint checks (git-fixes).
- USB: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes).
- affs: initialize fsdata in affs_truncate() (git-fixes).
- apparmor: add a kernel label to use on kernel objects (bsc#1211113).
- arm64: Always load shadow stack pointer directly from the task struct (git-fixes)
- arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes)
- arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes).
- arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes).
- arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes).
- arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes).
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes).
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes).
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes)
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes).
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes).
- ata: pata_octeon_cf: drop kernel-doc notation (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work (git-fixes).
- block: add a bdev_max_zone_append_sectors helper (git-fixes).
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes).
- bnxt: Do not read past the end of test names (jsc#SLE-18978).
- bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978).
- bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978).
- bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978).
- bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978).
- bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes).
- bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978).
- bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978).
- bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978).
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes).
- bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes).
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978).
- bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978).
- bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes)
- bpf, arm64: Clear prog-&gt;jited_len along prog-&gt;jited (git-fixes)
- bpf, arm64: Feed byte-offset into bpf line info (git-fixes)
- bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes)
- bpf: Add extra path pointer check to d_path helper (git-fixes).
- bpf: Fix UAF in task local storage (bsc#1212564).
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes).
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes).
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes).
- can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes).
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes).
- can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes).
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes).
- can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes).
- can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes).
- cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes).
- ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540).
- ceph: force updating the msg pointer in non-split case (bsc#1211804).
- cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906).
- cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650).
- cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650).
- cgroup: Make cgroup_get_from_id() prettier (bsc#1205650).
- cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650).
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563).
- cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561).
- cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup  id (bsc#1205650).
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563).
- cgroup: reduce dependency on cgroup_mutex (bsc#1205650).
- cifs: Avoid a cast in add_lease_context() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: Simplify SMB2_open_init() (bsc#1193629).
- cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes).
- cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758).
- cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629).
- cifs: fix potential race when tree connecting ipc (bsc#1208758).
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758).
- cifs: fix sharing of DFS connections (bsc#1208758).
- cifs: fix smb1 mount regression (bsc#1193629).
- cifs: mapchars mount option ignored (bsc#1193629).
- cifs: missing lock when updating session status (bsc#1193629).
- cifs: print smb3_fs_context::source when mounting (bsc#1193629).
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758).
- cifs: protect session status check in smb2_reconnect() (bsc#1208758).
- cifs: release leases for deferred close handles when freezing (bsc#1193629).
- cifs: sanitize paths in cifs_update_super_prepath (git-fixes).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes).
- clk: qcom: regmap: add PHY clock source implementation (git-fixes).
- clk: tegra20: fix gcc-7 constant overflow warning (git-fixes).
- configfs: fix possible memory leak in configfs_create_dir() (git-fixes).
- crypto: acomp - define max size for destination (jsc#PED-3692)
- crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692)
- crypto: qat - Fix unsigned function returning negative (jsc#PED-3692)
- crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692)
- crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692)
- crypto: qat - abstract PFVF receive logic (jsc#PED-3692)
- crypto: qat - abstract PFVF send function (jsc#PED-3692)
- crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692)
- crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692)
- crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692)
- crypto: qat - add backlog mechanism (jsc#PED-3692)
- crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692)
- crypto: qat - add check to validate firmware images (jsc#PED-3692)
- crypto: qat - add limit to linked list parsing (jsc#PED-3692)
- crypto: qat - add misc workqueue (jsc#PED-3692)
- crypto: qat - add missing restarting event notification in (jsc#PED-3692)
- crypto: qat - add param check for DH (jsc#PED-3692)
- crypto: qat - add param check for RSA (jsc#PED-3692)
- crypto: qat - add pfvf_ops (jsc#PED-3692)
- crypto: qat - add resubmit logic for decompression (jsc#PED-3692)
- crypto: qat - add support for 401xx devices (jsc#PED-3692)
- crypto: qat - add support for compression for 4xxx (jsc#PED-3692)
- crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692)
- crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692)
- crypto: qat - change PFVF ACK behaviour (jsc#PED-3692)
- crypto: qat - change behaviour of (jsc#PED-3692)
- crypto: qat - change bufferlist logic interface (jsc#PED-3692)
- crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692)
- crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692)
- crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692)
- crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692)
- crypto: qat - do not rely on min version (jsc#PED-3692)
- crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692)
- crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692)
- crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692)
- crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692)
- crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692)
- crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692)
- crypto: qat - extend buffer list interface (jsc#PED-3692)
- crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692)
- crypto: qat - extract send and wait from (jsc#PED-3692)
- crypto: qat - fix DMA transfer direction (jsc#PED-3692)
- crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692)
- crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692)
- crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692)
- crypto: qat - fix a typo in a comment (jsc#PED-3692)
- crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692)
- crypto: qat - fix definition of ring reset results (jsc#PED-3692)
- crypto: qat - fix error return code in adf_probe (jsc#PED-3692)
- crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692)
- crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692)
- crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692)
- crypto: qat - fix wording and formatting in code comment (jsc#PED-3692)
- crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692)
- crypto: qat - free irq in case of failure (jsc#PED-3692)
- crypto: qat - free irqs only if allocated (jsc#PED-3692)
- crypto: qat - generalize crypto request buffers (jsc#PED-3692)
- crypto: qat - get compression extended capabilities (jsc#PED-3692)
- crypto: qat - handle retries due to collisions in (jsc#PED-3692)
- crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692)
- crypto: qat - improve logging of PFVF messages (jsc#PED-3692)
- crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692)
- crypto: qat - introduce support for PFVF block messages (jsc#PED-3692)
- crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692)
- crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692)
- crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692)
- crypto: qat - make PFVF message construction direction (jsc#PED-3692)
- crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692)
- crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692)
- crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692)
- crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692)
- crypto: qat - move pfvf collision detection values (jsc#PED-3692)
- crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692)
- crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692)
- crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692)
- crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692)
- crypto: qat - re-enable registration of algorithms (jsc#PED-3692)
- crypto: qat - refactor PF top half for PFVF (jsc#PED-3692)
- crypto: qat - refactor pfvf version request messages (jsc#PED-3692)
- crypto: qat - refactor submission logic (jsc#PED-3692)
- crypto: qat - relocate PFVF PF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF VF related logic (jsc#PED-3692)
- crypto: qat - relocate PFVF disabled function (jsc#PED-3692)
- crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692)
- crypto: qat - relocate backlog related structures (jsc#PED-3692)
- crypto: qat - relocate bufferlist logic (jsc#PED-3692)
- crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692)
- crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692)
- crypto: qat - remove empty sriov_configure() (jsc#PED-3692)
- crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692)
- crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692)
- crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692)
- crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692)
- crypto: qat - remove unneeded assignment (jsc#PED-3692)
- crypto: qat - remove unneeded braces (jsc#PED-3692)
- crypto: qat - remove unneeded packed attribute (jsc#PED-3692)
- crypto: qat - remove unused PFVF stubs (jsc#PED-3692)
- crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692)
- crypto: qat - rename bufferlist functions (jsc#PED-3692)
- crypto: qat - rename pfvf collision constants (jsc#PED-3692)
- crypto: qat - reorganize PFVF code (jsc#PED-3692)
- crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692)
- crypto: qat - replace deprecated MSI API (jsc#PED-3692)
- crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692)
- crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692)
- crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692)
- crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692)
- crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692)
- crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692)
- crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692)
- crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692)
- crypto: qat - simplify adf_enable_aer() (jsc#PED-3692)
- crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692)
- crypto: qat - split PFVF message decoding from handling (jsc#PED-3692)
- crypto: qat - stop using iommu_present() (jsc#PED-3692)
- crypto: qat - store the PFVF protocol version of the (jsc#PED-3692)
- crypto: qat - store the ring-to-service mapping (jsc#PED-3692)
- crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692)
- crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692)
- crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692)
- crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692)
- crypto: qat - use hweight for bit counting (jsc#PED-3692)
- crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692)
- crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692)
- crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692)
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes).
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992).
- debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes).
- dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes).
- dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes).
- dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes).
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes).
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes).
- dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes).
- dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes).
- dmaengine: mv_xor_v2: Fix an error code (git-fixes).
- dmaengine: pl330: rename _start to prevent build error (git-fixes).
- do not reuse connection if share marked as isolated (bsc#1193629).
- docs: networking: fix x25-iface.rst heading &amp; index order (git-fixes).
- drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes).
- drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes).
- drm/amd/display: Fix hang when skipping modeset (git-fixes).
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- drm/amd/display: fix flickering caused by S/G mode (git-fixes).
- drm/amd/pm: Fix power context allocation in SMU13 (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes).
- drm/amd: Fix an out of bounds error in BIOS parser (git-fixes).
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes).
- drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes).
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes).
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes).
- drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes).
- drm/amdgpu: release gpu full access after &quot;amdgpu_device_ip_late_init&quot; (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes).
- drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes).
- drm/ast: Fix ARM compatibility (git-fixes).
- drm/displayid: add displayid_get_header() and check bounds better (git-fixes).
- drm/exynos: fix g2d_open/close helper function definitions (git-fixes).
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes).
- drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes).
- drm/i915/dg2: Support 4k@30 on HDMI (git-fixes).
- drm/i915/dp: prevent potential div-by-zero (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes).
- drm/i915/selftests: Add some missing error propagation (git-fixes).
- drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes).
- drm/i915/selftests: Stop using kthread_stop() (git-fixes).
- drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes).
- drm/i915: Use 18 fast wake AUX sync len (git-fixes).
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes).
- drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes).
- drm/msm/dp: unregister audio driver during unbind (git-fixes).
- drm/msm/dpu: Add INTF_5 interrupts (git-fixes).
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes).
- drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes).
- drm/msm: Be more shouty if per-process pgtables are not working (git-fixes).
- drm/msm: Set max segment size earlier (git-fixes).
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (git-fixes).
- drm/nouveau: add nv_encoder pointer check for NULL (git-fixes).
- drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- drm/tegra: Avoid potential 32-bit integer overflow (git-fixes).
- drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes).
- drm/ttm: optimize pool allocations a bit v2 (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix &quot;snps,hsphy_interface&quot; type (git-fixes).
- eeprom: at24: also select REGMAP (git-fixes).
- ext4: unconditionally enable the i_version counter (bsc#1211299).
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472).
- fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes).
- fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes).
- fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489)
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes).
- fbdev: udlfb: Fix endpoint check (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes).
- fs/jfs: fix shift exponent db_agl2size negative (git-fixes).
- fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes).
- fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes).
- fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes).
- fuse: always revalidate rename target dentry (bsc#1211808).
- fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807).
- futex: Resend potentially swallowed owner death notification (git-fixes).
- google/gve:fix repeated words in comments (bsc#1211519).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (git-fixes).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake &quot;droping&quot; -&gt; &quot;dropping&quot; (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (git-fixes).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes).
- gve: enhance no queue page list detection (bsc#1211519).
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes).
- hfs/hfsplus: use WARN_ON for sanity check (git-fixes).
- hfs: Fix OOB Write in hfs_asc2mac (git-fixes).
- hfs: fix OOB Read in __hfs_brec_find (git-fixes).
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes).
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes).
- i2c: omap: Fix standard mode false ACK readings (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes).
- i2c: tegra: Fix PEC support for SMBUS block read (git-fixes).
- i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378).
- i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378).
- i40e: Fix DMA mappings leak (jsc#SLE-18378).
- i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378).
- i40e: Fix VF set max MTU size (jsc#SLE-18378).
- i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378).
- i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378).
- i40e: Fix calculating the number of queue pairs (jsc#SLE-18378).
- i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378).
- i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378).
- i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378).
- i40e: Fix for VF MAC address 0 (jsc#SLE-18378).
- i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378).
- i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378).
- i40e: Fix kernel crash during module removal (jsc#SLE-18378).
- i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378).
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378).
- i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378).
- i40e: Refactor tc mqprio checks (jsc#SLE-18378).
- i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378).
- i40e: fix accessing vsi-&gt;active_filters without holding lock (jsc#SLE-18378).
- i40e: fix flow director packet filter programming (jsc#SLE-18378).
- i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378).
- i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378).
- iavf/iavf_main: actually log -&gt;src mask when talking about it (jsc#SLE-18385).
- iavf: Detach device during reset task (jsc#SLE-18385).
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385).
- iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385).
- iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385).
- iavf: Fix a crash during reset task (jsc#SLE-18385).
- iavf: Fix bad page state (jsc#SLE-18385).
- iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385).
- iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385).
- iavf: Fix max_rate limiting (jsc#SLE-18385).
- iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385).
- iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385).
- iavf: fix hang on reboot with ice (jsc#SLE-18385).
- iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385).
- iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385).
- iavf: remove mask from iavf_irq_enable_queues() (git-fixes).
- ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375).
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375).
- igb: Add lock to avoid data race (jsc#SLE-18379).
- igb: Enable SR-IOV after reinit (jsc#SLE-18379).
- igb: Initialize mailbox message for VF reset (jsc#SLE-18379).
- igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379).
- igb: fix bit_shift to be in [1..8] range (git-fixes).
- igb: fix nvm.ops.read() error handling (git-fixes).
- igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379).
- igbvf: Regard vf reset nack as success (jsc#SLE-18379).
- igc: Add checking for basetime less than zero (jsc#SLE-18377).
- igc: Add ndo_tx_timeout support (jsc#SLE-18377).
- igc: Clean the TX buffer and TX descriptor ring (git-fixes).
- igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377).
- igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377).
- igc: Fix possible system crash when loading module (git-fixes).
- igc: Lift TAPRIO schedule restriction (jsc#SLE-18377).
- igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377).
- igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377).
- igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377).
- igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377).
- igc: fix the validation logic for taprio's gate list (jsc#SLE-18377).
- igc: read before write to SRRCTL register (jsc#SLE-18377).
- igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377).
- igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377).
- iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes).
- iio: adc: ad7192: Change &quot;shorted&quot; channels to differential (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes).
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448).
- init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448).
- init: Provide arch_cpu_finalize_init() (bsc#1212448).
- init: Remove check_bugs() leftovers (bsc#1212448).
- intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553).
- ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384).
- ixgbe: Enable setting RSS table to default values (jsc#SLE-18384).
- ixgbe: Fix panic during XDP_TX with &gt; 64 CPUs (jsc#SLE-18384).
- ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384).
- ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384).
- ixgbe: fix pci device refcount leak (jsc#SLE-18384).
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384).
- jfs: Fix fortify moan in symlink (git-fixes).
- kABI workaround for btbcm.c (git-fixes).
- kABI workaround for mt76_poll_msec() (git-fixes).
- kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest  (git-fixes)
- kABI: Fixed broken 3rd party dirvers issue (bsc#1208050 bsc#1211414).
- kabi/severities: added Microsoft mana symbold (bsc#1210551)
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base.
- kernel-docs: Add missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- kernel-source: Remove unused macro variant_symbols
- kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731).
- kprobe: reverse kp-&gt;flags when arm_kprobe failed (git-fixes).
- kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes).
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes).
- kprobes: Forbid probing on trampoline and BPF code areas (git-fixes).
- kprobes: Prohibit probes in gate area (git-fixes).
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes).
- kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes).
- kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes).
- leds: Fix reference to led_set_brightness() in doc (git-fixes).
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes).
- leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes).
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes).
- locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes).
- lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852).
- lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852).
- lpfc: Clean up SLI-4 CQE status handling (bsc#1211852).
- lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852).
- lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852).
- lpfc: Enhance congestion statistics collection (bsc#1211852).
- lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346).
- lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852).
- lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852).
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes).
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes).
- mailbox: zynqmp: Fix IPI isr handling (git-fixes).
- mailbox: zynqmp: Fix typo in IPI documentation (git-fixes).
- mce: fix set_mce_nospec to always unmap the whole page (git-fixes).
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes).
- media: netup_unidvb: fix use-after-free at del_timer() (git-fixes).
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes).
- media: radio-shark: Add endpoint checks (git-fixes).
- media: rcar_fdp1: Fix the correct variable assignments (git-fixes).
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449).
- mfd: dln2: Fix memory leak in dln2_probe() (git-fixes).
- mfd: tqmx86: Correct board names for TQMxE39x (git-fixes).
- mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes).
- misc: fastrpc: reject new invocations during device removal (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes).
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes).
- mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410).
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410).
- mmc: sdhci-esdhc-imx: make &quot;no-mmc-hs400&quot; works (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes).
- mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written (git-fixes).
- net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes).
- net/net_failover: fix txq exceeding warning (git-fixes).
- net/sched: fix initialization order when updating chain 0 head (git-fixes).
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes).
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes).
- net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes).
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes).
- net: ena: Account for the number of processed bytes in XDP (git-fixes).
- net: ena: Do not register memory info on XDP exchange (git-fixes).
- net: ena: Fix rx_copybreak value update (git-fixes).
- net: ena: Fix toeplitz initial hash value (git-fixes).
- net: ena: Set default value for RX interrupt moderation (git-fixes).
- net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes).
- net: ena: Use bitmask to indicate packet redirection (git-fixes).
- net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes).
- net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes).
- net: hns3: fix reset delay time to avoid configuration timeout (git-fixes).
- net: hns3: fix sending pfc frames after reset issue (git-fixes).
- net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes).
- net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982).
- net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022).
- net: mana: Add support for jumbo frame (bsc#1210551).
- net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551).
- net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022).
- net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022).
- net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022).
- net: mana: Enable RX path to handle various MTU sizes (bsc#1210551).
- net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022).
- net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes).
- net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022).
- net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022).
- net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022).
- net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022).
- net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551).
- net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551).
- net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022).
- net: mana: Use napi_build_skb in RX path (bsc#1210551).
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes).
- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564).
- net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes).
- net: qrtr: correct types of trace event parameters (git-fixes).
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes).
- net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes).
- net: tun: avoid disabling NAPI twice (git-fixes).
- net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes).
- net: tun: stop NAPI when detaching queues (git-fixes).
- net: tun: unlink NAPI from device on destruction (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes).
- nfp: only report pause frame configuration for physical device (git-fixes).
- nilfs2: do not write dirty data after degenerating to read-only (git-fixes).
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes).
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes).
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes).
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes).
- nouveau: fix client work fence deletion race (git-fixes).
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes).
- nvme-multipath: fix hang when disk goes live over reconnect (git-fixes).
- nvme-pci: add quirks for Samsung X5 SSDs (git-fixes).
- nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes).
- nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes).
- nvme-pci: clear the prp2 field when not used (git-fixes).
- nvme-pci: disable write zeroes on various Kingston SSD (git-fixes).
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes).
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes).
- nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes).
- nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes).
- nvme-tcp: fix bogus request completion when failing to send AER (git-fixes).
- nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes).
- nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes).
- nvme: also return I/O command effects from nvme_command_effects (git-fixes).
- nvme: check for duplicate identifiers earlier (git-fixes).
- nvme: cleanup __nvme_check_ids (git-fixes).
- nvme: fix discard support without oncs (git-fixes).
- nvme: fix interpretation of DMRSL (git-fixes).
- nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes).
- nvme: fix passthrough csi check (git-fixes).
- nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes).
- nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes).
- nvme: set non-mdts limits in nvme_scan_work (git-fixes).
- nvmet-tcp: add bounds check on Transfer Tag (git-fixes).
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes).
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes).
- nvmet: fix mar and mor off-by-one errors (git-fixes).
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes).
- nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes).
- nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes).
- nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes).
- octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes).
- octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes).
- octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes).
- octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes).
- phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes).
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes).
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes).
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes).
- platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes).
- platform/x86: hp-wmi: Support touchpad on/off (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes).
- platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes).
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes).
- power: supply: Fix logic checking if system is running from battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: ab8500: Fix external_power_changed race (git-fixes).
- power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes).
- power: supply: bq27xxx: expose battery data when CI=1 (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race (git-fixes).
- powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729).
- powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662).
- powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes).
- powerpc/purgatory: remove PGO flags (bsc#1194869).
- powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729).
- powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729).
- powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662).
- powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662).
- pstore: Revert pmsg_lock back to a normal mutex (git-fixes).
- purgatory: fix disabling debug info (git-fixes).
- pwm: meson: Fix axg ao mux parents (git-fixes).
- pwm: meson: Fix g12a ao clk81 name (git-fixes).
- qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001).
- qed/qed_mng_tlv: correctly zero out -&gt;min instead of -&gt;hour (jsc#SLE-19001).
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001).
- qed/qede: Fix scheduling while atomic (git-fixes).
- qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001).
- qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001).
- r8152: fix flow control issue of RTL8156A (git-fixes).
- r8152: fix the poor throughput for 2.5G devices (git-fixes).
- r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes).
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- regulator: Fix error checking for debugfs_create_dir (git-fixes).
- regulator: mt6359: add read check for PMIC MT6359 (git-fixes).
- regulator: pca9450: Fix BUCK2 enable_mask (git-fixes).
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- reiserfs: Add missing calls to reiserfs_security_free() (git-fixes).
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes).
- remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes).
- revert &quot;squashfs: harden sanity check in squashfs_read_xattr_id_table&quot; (git-fixes).
- ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes).
- ring-buffer: Fix kernel-doc (git-fixes).
- ring-buffer: Sync IRQ works before buffer destruction (git-fixes).
- rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
- rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches
- rtmutex: Ensure that the top waiter is always woken up (git-fixes).
- s390/ap: fix crash on older machines based on QCI info missing (bsc#1210947)
- s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686).
- s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592).
- s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687).
- s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes).
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688).
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689).
- s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690).
- s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691).
- s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692).
- s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693).
- s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes).
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes).
- s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714).
- s390: Hard lockups are observed while running stress-ng and LPAR hangs (bsc#1195655 ltc#195733).
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes).
- scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes).
- scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes).
- scsi: libsas: Add sas_ata_device_link_abort() (git-fixes).
- scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes).
- scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847).
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847).
- scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847).
- scsi: lpfc: Match lock ordering of lpfc_cmd-&gt;buf_lock and hbalock for abort paths (bsc#1211847).
- scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847).
- scsi: lpfc: Update congestion warning notification period (bsc#1211847).
- scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847).
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes).
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes).
- scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes).
- scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960).
- scsi: qla2xxx: Fix hang in task management (bsc#1211960).
- scsi: qla2xxx: Fix mem access after free (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960).
- scsi: qla2xxx: Fix task management cmd failure (bsc#1211960).
- scsi: qla2xxx: Multi-que support for TMF (bsc#1211960).
- scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960).
- scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960).
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960).
- scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960).
- scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960).
- scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes).
- scsi: stex: Fix gcc 13 warnings (git-fixes).
- scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes).
- selftests mount: Fix mount_setattr_test builds failed (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes).
- selftests/resctrl: Allow -&gt;setup() to return errors (git-fixes).
- selftests/resctrl: Check for return value after write_schemata() (git-fixes).
- selftests/resctrl: Extend CPU vendor detection (git-fixes).
- selftests/resctrl: Move -&gt;setup() call outside of test specific branches (git-fixes).
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes).
- selftests/sgx: Add &quot;test_encl.elf&quot; to TEST_FILES (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes).
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes).
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes).
- selftests: xsk: Disable IPv6 on VETH1 (git-fixes).
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes).
- selinux: do not use make's grouped targets feature yet (git-fixes).
- serial: 8250: Reinit port-&gt;pm on port specific driver unbind (git-fixes).
- serial: 8250_bcm7271: balance clk_enable calls (git-fixes).
- serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes).
- serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes).
- serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes).
- serial: Add support for Advantech PCI-1611U card (git-fixes).
- serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes).
- serial: lantiq: add missing interrupt ack (git-fixes).
- serial: qcom-geni: fix enabling deactivated interrupt (git-fixes).
- serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes).
- sfc: Change VF mac via PF as first preference if available (git-fixes).
- sfc: Fix module EEPROM reporting for QSFP modules (git-fixes).
- sfc: Fix use-after-free due to selftest_work (git-fixes).
- sfc: correctly advertise tunneled IPv6 segmentation (git-fixes).
- sfc: disable RXFCS and RXALL features by default (git-fixes).
- sfc: ef10: do not overwrite offload features at NIC reset (git-fixes).
- sfc: fix TX channel offset when using legacy interrupts (git-fixes).
- sfc: fix considering that all channels have TX queues (git-fixes).
- sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes).
- sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes).
- sfc: include vport_id in filter spec hash and equal() (git-fixes).
- smb3: display debug information better for encryption (bsc#1193629).
- smb3: fix problem remounting a share after shutdown (bsc#1193629).
- smb3: improve parallel reads of large files (bsc#1193629).
- smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629).
- smb3: move some common open context structs to smbfs_common (bsc#1193629).
- soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes).
- soundwire: qcom: gracefully handle too many ports in DT (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes).
- spi: qup: Request DMA before enabling clocks (git-fixes).
- spi: spi-imx: fix MX51_ECSPI_* macros when cs &gt; 3 (git-fixes).
- spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes).
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes).
- struct ci_hdrc: hide new member at end (git-fixes).
- supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931)
- supported.conf: mark mana_ib supported
- swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes).
- test_firmware: Use kstrtobool() instead of strtobool() (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes).
- test_firmware: prevent race conditions by a correct implementation of locking (git-fixes).
- thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165).
- thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165).
- thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes).
- tls: Skip tls_append_frag on zero copy size (git-fixes).
- tools/virtio: compile with -pthread (git-fixes).
- tools/virtio: fix the vringh test for virtio ring changes (git-fixes).
- tools/virtio: fix virtio_test execution (git-fixes).
- tools/virtio: initialize spinlocks in vring_test.c (git-fixes).
- tools: bpftool: Remove invalid \' json escape (git-fixes).
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes).
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes).
- tracing/histograms: Allow variables to have some modifiers (git-fixes).
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes).
- tracing: Fix permissions for the buffer_percent file (git-fixes).
- tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350).
- tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes).
- tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes).
- usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes).
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes).
- usb: chipidea: core: fix possible concurrent when switch role (git-fixes).
- usb: dwc3: Align DWC3_EP_* flag macros (git-fixes).
- usb: dwc3: Fix a repeated word checkpatch warning (git-fixes).
- usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes).
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes).
- usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes).
- usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes).
- usb: dwc3: gadget: Delay issuing End Transfer (git-fixes).
- usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes).
- usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes).
- usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes).
- usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes).
- usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes).
- usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes).
- usb: gadget: u_ether: Fix host MAC address case (git-fixes).
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes).
- usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes).
- usb: typec: tcpm: fix multiple times discover svids error (git-fixes).
- usb: typec: ucsi: Fix command cancellation (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes).
- vdpa: fix use-after-free on vp_vdpa_remove (git-fixes).
- vhost/net: Clear the pending messages when the backend is removed (git-fixes).
- virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes).
- virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes).
- virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes).
- virtio_net: split free_unused_bufs() (git-fixes).
- virtio_net: suppress cpu stall when free_unused_bufs (git-fixes).
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes).
- wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes).
- wifi: ath: Silence memcpy run-time false positive warning (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes).
- wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes).
- wifi: iwlwifi: fw: fix DBGI dump (git-fixes).
- wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes).
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes).
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes).
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes).
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes).
- wifi: mac80211: fix min center freq offset tracing (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: mt76: add flexible polling wait-interval support (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes).
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes).
- wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes).
- wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes).
- wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes).
- workqueue: Fix hung time report of worker pools (bsc#1211044).
- workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044).
- workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044).
- workqueue: Warn when a new worker could not be created (bsc#1211044).
- workqueue: Warn when a rescuer could not be created (bsc#1211044).
- x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes).
- x86/MCE/AMD: Use an u64 for bank_map (git-fixes).
- x86/alternative: Make debug-alternative selective (bsc#1206578).
- x86/alternative: Report missing return thunk details (git-fixes).
- x86/alternative: Support relocations in alternatives (bsc#1206578).
- x86/amd: Use IBPB for firmware calls (git-fixes).
- x86/boot: Skip realmode init code when running as Xen PV guest  (git-fixes).
- x86/bugs: Add &quot;unknown&quot; reporting for MMIO Stale Data (git-fixes).
- x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes).
- x86/bugs: Warn when &quot;ibrs&quot; mitigation is selected on Enhanced IBRS parts (git-fixes).
- x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes).
- x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes).
- x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes).
- x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes).
- x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205).
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes).
- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- x86/fpu: Mark init functions __init (bsc#1212448).
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448).
- x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448).
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes).
- x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes).
- x86/init: Initialize signal frame size late (bsc#1212448).
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes).
- x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578).
- x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes).
- x86/microcode/AMD: Fix mixed steppings support (git-fixes).
- x86/microcode/AMD: Track patch allocation size explicitly (git-fixes).
- x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes).
- x86/microcode: Add explicit CPU vendor dependency (git-fixes).
- x86/microcode: Adjust late loading result reporting message (git-fixes).
- x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes).
- x86/microcode: Rip out the OLD_INTERFACE (git-fixes).
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes).
- x86/mm: Use proper mask when setting PUD mapping (git-fixes).
- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- x86/nospec: Unwreck the RSB stuffing (git-fixes).
- x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes).
- x86/pat: Fix x86_has_pat_wp() (git-fixes).
- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes).
- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes).
- x86/signal: Fix the value returned by strict_sas_size() (git-fixes).
- x86/speculation/mmio: Print SMT warning (git-fixes).
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes).
- x86/static_call: Serialize __static_call_fixup() properly (git-fixes).
- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- x86/topology: Fix duplicated core ID within a package (git-fixes).
- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- x86: Fix return value of __setup handlers (git-fixes).
- x86: drop bogus &quot;cc&quot; clobber from __try_cmpxchg_user_asm() (git-fixes).
- xen/netback: do not do grant copy across page boundary (git-fixes).
- xen/netback: use same error messages for same errors (git-fixes).
- xfs: fix rm_offset flag handling in rmap keys (git-fixes).
- xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes).
- xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes).
- xhci: Fix incorrect tracking of free space on transfer rings (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.37.2" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.37.2.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.37.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.37.2" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.37.2.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.37.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2942</id>
    <title>Recommended update for gtk3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690182718"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211952" id="1211952" title="nautilus dumps core in gtk_widget_get_sensitive() after bad password input" type="bugzilla"/>
    </references>
    <description>This update for gtk3 fixes the following issues:

- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
</description>
    <pkglist>
      <collection>
        <package name="gtk3" epoch="0" version="3.24.34" release="150400.3.6.1" arch="src" src="src/gtk3-3.24.34-150400.3.6.1.src.rpm">
          <filename>gtk3-3.24.34-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="gtk3-data" epoch="0" version="3.24.34" release="150400.3.6.1" arch="noarch" src="noarch/gtk3-data-3.24.34-150400.3.6.1.noarch.rpm">
          <filename>gtk3-data-3.24.34-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-schema" epoch="0" version="3.24.34" release="150400.3.6.1" arch="noarch" src="noarch/gtk3-schema-3.24.34-150400.3.6.1.noarch.rpm">
          <filename>gtk3-schema-3.24.34-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.6.1" arch="x86_64" src="x86_64/gtk3-tools-3.24.34-150400.3.6.1.x86_64.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="x86_64" src="x86_64/libgtk-3-0-3.24.34-150400.3.6.1.x86_64.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="x86_64" src="x86_64/typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.x86_64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.6.1" arch="s390x" src="s390x/gtk3-tools-3.24.34-150400.3.6.1.s390x.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="s390x" src="s390x/libgtk-3-0-3.24.34-150400.3.6.1.s390x.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="s390x" src="s390x/typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.s390x.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.34" release="150400.3.6.1" arch="aarch64" src="aarch64/gtk3-tools-3.24.34-150400.3.6.1.aarch64.rpm">
          <filename>gtk3-tools-3.24.34-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="aarch64" src="aarch64/libgtk-3-0-3.24.34-150400.3.6.1.aarch64.rpm">
          <filename>libgtk-3-0-3.24.34-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.34" release="150400.3.6.1" arch="aarch64" src="aarch64/typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.aarch64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.34-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2632</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687774610"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211588" id="1211588" title="SUSEConnect keepalive timer gets disabled after update to suseconnect-ng" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.1.0~git2.f42b4b2a060e:
- Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="src" src="src/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.src.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="x86_64" src="x86_64/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.x86_64.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="s390x" src="s390x/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.s390x.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.1.0~git2.f42b4b2a060e" release="150400.3.13.1" arch="aarch64" src="aarch64/suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.aarch64.rpm">
          <filename>suseconnect-ng-1.1.0~git2.f42b4b2a060e-150400.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2604</id>
    <title>Security update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687420151"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212143" id="1212143" title="VUL-0: EMBARGOED: CVE-2023-20867: open-vm-tools: Authentication Bypass vulnerability in the vgauth module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210695" id="1210695" title="open-vm-tools fails to build against grpc 1.54" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20867" id="CVE-2023-20867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20867" type="cve"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).

Bug fixes:

- Fixed build problem with grpc 1.54 (bsc#1210695).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.2.0" release="150300.29.1" arch="x86_64" src="x86_64/libvmtools0-12.2.0-150300.29.1.x86_64.rpm">
          <filename>libvmtools0-12.2.0-150300.29.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.29.1" arch="src" src="src/open-vm-tools-12.2.0-150300.29.1.src.rpm">
          <filename>open-vm-tools-12.2.0-150300.29.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.29.1" arch="x86_64" src="x86_64/open-vm-tools-12.2.0-150300.29.1.x86_64.rpm">
          <filename>open-vm-tools-12.2.0-150300.29.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2614</id>
    <title>Security update for libX11</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687435394"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212102" id="1212102" title="VUL-0: EMBARGOED: CVE-2023-3138: libX11,xorg-libX11: buffer overwrite in src/InitExt.c XESetEventToWire" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138" id="CVE-2023-3138" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138" type="cve"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- CVE-2023-3138: Fixed buffer overflows in InitExt.c (bsc#1212102).
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.30.1" arch="src" src="src/libX11-1.6.5-150000.3.30.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.30.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.30.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.30.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.30.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.30.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.30.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.30.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.30.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.30.1" arch="s390x" src="s390x/libX11-6-1.6.5-150000.3.30.1.s390x.rpm">
          <filename>libX11-6-1.6.5-150000.3.30.1.s390x.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.30.1" arch="s390x" src="s390x/libX11-xcb1-1.6.5-150000.3.30.1.s390x.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.30.1.s390x.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.30.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.30.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.30.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.30.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.30.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2616</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687445323"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34241" id="CVE-2023-34241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34241" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212230" id="1212230" title="VUL-0: EMBARGOED: CVE-2023-34241: cups: use-after-free bug that impacts the entire cupsd process" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.46.1" arch="src" src="src/cups-2.2.7-150000.3.46.1.src.rpm">
          <filename>cups-2.2.7-150000.3.46.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.46.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.46.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.46.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.46.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.46.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.46.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.46.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.46.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.46.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.46.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.46.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.46.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.46.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.46.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.46.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.46.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.46.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2994</id>
    <title>Recommended update for nfs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690433162"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209859" id="1209859" title="rpc.nfsd man page error for new -S option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200710" id="1200710" title="dracut-initqueue[581]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1157881" id="1157881" title="mount.nfs improve error reporting: &quot;Connection *WHERE*TO* timed out&quot;" type="bugzilla"/>
    </references>
    <description>This update for nfs-utils fixes the following issues:

- SLE15-SP5 and earlier don't use /usr/lib/modprobe.d (bsc#1200710)
- Avoid unhelpful warnings (bsc#1157881)
- Fix rpc.nfsd man pages (bsc#1209859)
- Allow scope to be set in sysconfig: NFSD_SCOPE
</description>
    <pkglist>
      <collection>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.37.1" arch="x86_64" src="x86_64/nfs-client-2.1.1-150100.10.37.1.x86_64.rpm">
          <filename>nfs-client-2.1.1-150100.10.37.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.37.1" arch="x86_64" src="x86_64/nfs-kernel-server-2.1.1-150100.10.37.1.x86_64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.37.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-utils" epoch="0" version="2.1.1" release="150100.10.37.1" arch="src" src="src/nfs-utils-2.1.1-150100.10.37.1.src.rpm">
          <filename>nfs-utils-2.1.1-150100.10.37.1.src.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.37.1" arch="s390x" src="s390x/nfs-client-2.1.1-150100.10.37.1.s390x.rpm">
          <filename>nfs-client-2.1.1-150100.10.37.1.s390x.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.37.1" arch="s390x" src="s390x/nfs-kernel-server-2.1.1-150100.10.37.1.s390x.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.37.1.s390x.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.37.1" arch="aarch64" src="aarch64/nfs-client-2.1.1-150100.10.37.1.aarch64.rpm">
          <filename>nfs-client-2.1.1-150100.10.37.1.aarch64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.37.1" arch="aarch64" src="aarch64/nfs-kernel-server-2.1.1-150100.10.37.1.aarch64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2605</id>
    <title>Security update for bluez</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687420200"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210398" id="1210398" title="VUL-0: CVE-2023-27349: bluez: stack overflow during AVRCP event handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27349" id="CVE-2023-27349" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27349" type="cve"/>
    </references>
    <description>This update for bluez fixes the following issues:

- CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.62" release="150400.4.13.1" arch="src" src="src/bluez-5.62-150400.4.13.1.src.rpm">
          <filename>bluez-5.62-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.13.1" arch="x86_64" src="x86_64/libbluetooth3-5.62-150400.4.13.1.x86_64.rpm">
          <filename>libbluetooth3-5.62-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.13.1" arch="s390x" src="s390x/libbluetooth3-5.62-150400.4.13.1.s390x.rpm">
          <filename>libbluetooth3-5.62-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.13.1" arch="aarch64" src="aarch64/libbluetooth3-5.62-150400.4.13.1.aarch64.rpm">
          <filename>libbluetooth3-5.62-150400.4.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2527</id>
    <title>Recommended update for NetworkManager</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1686935100"/>
    <references/>
    <description>This update for NetworkManager fixes the following issues:

- Create /etc/NetworkManager/conf.d by default, allowing easy override for NetworkManager.conf file with drop-in
- Move default config file to /usr/lib/NetworkManager/NetworkManager.conf, as part of main package
- Ensure /usr/lib/NetworkManager/conf.d is part of the package
</description>
    <pkglist>
      <collection>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.3.1" arch="src" src="src/NetworkManager-1.38.2-150400.3.3.1.src.rpm">
          <filename>NetworkManager-1.38.2-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/NetworkManager-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>NetworkManager-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/NetworkManager-bluetooth-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>NetworkManager-bluetooth-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/NetworkManager-pppoe-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>NetworkManager-pppoe-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/NetworkManager-tui-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>NetworkManager-tui-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/NetworkManager-wwan-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>NetworkManager-wwan-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/libnm0-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>libnm0-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.2" release="150400.3.3.1" arch="x86_64" src="x86_64/typelib-1_0-NM-1_0-1.38.2-150400.3.3.1.x86_64.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/NetworkManager-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>NetworkManager-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/NetworkManager-bluetooth-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>NetworkManager-bluetooth-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/NetworkManager-cloud-setup-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>NetworkManager-cloud-setup-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/NetworkManager-pppoe-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>NetworkManager-pppoe-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/NetworkManager-tui-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>NetworkManager-tui-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/NetworkManager-wwan-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>NetworkManager-wwan-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/libnm0-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>libnm0-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.2" release="150400.3.3.1" arch="s390x" src="s390x/typelib-1_0-NM-1_0-1.38.2-150400.3.3.1.s390x.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.2-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/NetworkManager-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>NetworkManager-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/NetworkManager-bluetooth-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>NetworkManager-bluetooth-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/NetworkManager-cloud-setup-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>NetworkManager-cloud-setup-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/NetworkManager-pppoe-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>NetworkManager-pppoe-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/NetworkManager-tui-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>NetworkManager-tui-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/NetworkManager-wwan-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>NetworkManager-wwan-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/libnm0-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>libnm0-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.38.2" release="150400.3.3.1" arch="aarch64" src="aarch64/typelib-1_0-NM-1_0-1.38.2-150400.3.3.1.aarch64.rpm">
          <filename>typelib-1_0-NM-1_0-1.38.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2851</id>
    <title>Recommended update for rdma-core</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689580896"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212069" id="1212069" title="Duplicate of Bug 1204271 - Spectrum Scale may exhibit a restart of the Spectrum Scale daemon or a failure to mount a filesystem when configured with RDMA (rdma-core)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204271" id="1204271" title="Spectrum Scale may exhibit a restart of the Spectrum Scale daemon or a failure to mount a filesystem when configured with RDMA (rdma-core)" type="bugzilla"/>
    </references>
    <description>This update for rdma-core fixes the following issues:

- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
</description>
    <pkglist>
      <collection>
        <package name="libefa1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libefa1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libefa1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libibverbs" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libibverbs-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libibverbs-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libibverbs1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libibverbs1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libibverbs1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmlx4-1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libmlx4-1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libmlx4-1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmlx5-1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/libmlx5-1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>libmlx5-1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="librdmacm1" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/librdmacm1-38.3-150400.6.3.1.x86_64.rpm">
          <filename>librdmacm1-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="src" src="src/rdma-core-38.3-150400.6.3.1.src.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.src.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="x86_64" src="x86_64/rdma-core-38.3-150400.6.3.1.x86_64.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="libefa1" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/libefa1-38.3-150400.6.3.1.s390x.rpm">
          <filename>libefa1-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libibverbs" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/libibverbs-38.3-150400.6.3.1.s390x.rpm">
          <filename>libibverbs-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libibverbs1" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/libibverbs1-38.3-150400.6.3.1.s390x.rpm">
          <filename>libibverbs1-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libmlx4-1" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/libmlx4-1-38.3-150400.6.3.1.s390x.rpm">
          <filename>libmlx4-1-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libmlx5-1" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/libmlx5-1-38.3-150400.6.3.1.s390x.rpm">
          <filename>libmlx5-1-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="librdmacm1" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/librdmacm1-38.3-150400.6.3.1.s390x.rpm">
          <filename>librdmacm1-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="s390x" src="s390x/rdma-core-38.3-150400.6.3.1.s390x.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libefa1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libefa1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libefa1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libibverbs" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libibverbs-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libibverbs-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libibverbs1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libibverbs1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libibverbs1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libmlx4-1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libmlx4-1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libmlx4-1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="libmlx5-1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/libmlx5-1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>libmlx5-1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="librdmacm1" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/librdmacm1-38.3-150400.6.3.1.aarch64.rpm">
          <filename>librdmacm1-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="38.3" release="150400.6.3.1" arch="aarch64" src="aarch64/rdma-core-38.3-150400.6.3.1.aarch64.rpm">
          <filename>rdma-core-38.3-150400.6.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2550</id>
    <title>Recommended update for autoyast2, libsolv, libyui, libzypp, yast2-pkg-bindings</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687189944"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209565" id="1209565" title="L3: Bad upgrade from 12 SP5 to 15 SP3: rpm database problem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202234" id="1202234" title="Release packages of addon products are not installed by autoyast" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="L3: SUSE Manager reposync has started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212189" id="1212189" title="NVIDIA Repository Fails: Curl error 92 - HTTP/2 stream 5 was not closed cleanly: PROTOCOL_ERROR (err 1)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191112" id="1191112" title="When navigating through YaST module screens the next screen appears, but its content is not loaded" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199020" id="1199020" title="Wrong resolution at Installation / Window background not cleared" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198097" id="1198097" title="Unlocalised Text on the Style Sheet Selections dialog on Yast" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211354" id="1211354" title="YaST (ncurses) closes &quot;User and Group Management&quot; immediately when opened" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210591" id="1210591" title="Loading Icons from Full Paths always Fails" type="bugzilla"/>
    </references>
    <description>
This update for autoyast2, libsolv, libyui, libzypp, yast2-pkg-bindings ships the update stack to
the INSTALLER self-update channel.

yast2-pkg-bindings:

- Added a new option for rebuilding the RPM database (--rebuilddb) (bsc#1209565)

autoyast2:

- Selected products are not installed after resetting the package manager internally (bsc#1202234)

libyui:

- Prevent buffer overflow when drawing very wide labels in ncurses (bsc#1211354)
- Fixed loading icons from an absolute path (bsc#1210591)
- Fix for main window stacking order to avoid unintentional transparency (bsc#1199020, bsc#1191112)
- Force messages from .ui file through our translation mechanism (bsc#1198097)
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.24" release="150400.3.8.1" arch="src" src="src/libsolv-0.7.24-150400.3.8.1.src.rpm">
          <filename>libsolv-0.7.24-150400.3.8.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.8.1" arch="x86_64" src="x86_64/libsolv-tools-0.7.24-150400.3.8.1.x86_64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.4.1" arch="x86_64" src="x86_64/libzck1-1.1.16-150400.3.4.1.x86_64.rpm">
          <filename>libzck1-1.1.16-150400.3.4.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="src" src="src/libzypp-17.31.13-150400.3.32.1.src.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="x86_64" src="x86_64/libzypp-17.31.13-150400.3.32.1.x86_64.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zchunk" epoch="0" version="1.1.16" release="150400.3.4.1" arch="src" src="src/zchunk-1.1.16-150400.3.4.1.src.rpm">
          <filename>zchunk-1.1.16-150400.3.4.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.8.1" arch="s390x" src="s390x/libsolv-tools-0.7.24-150400.3.8.1.s390x.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.8.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.4.1" arch="s390x" src="s390x/libzck1-1.1.16-150400.3.4.1.s390x.rpm">
          <filename>libzck1-1.1.16-150400.3.4.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="s390x" src="s390x/libzypp-17.31.13-150400.3.32.1.s390x.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.24" release="150400.3.8.1" arch="aarch64" src="aarch64/libsolv-tools-0.7.24-150400.3.8.1.aarch64.rpm">
          <filename>libsolv-tools-0.7.24-150400.3.8.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.4.1" arch="aarch64" src="aarch64/libzck1-1.1.16-150400.3.4.1.aarch64.rpm">
          <filename>libzck1-1.1.16-150400.3.4.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.13" release="150400.3.32.1" arch="aarch64" src="aarch64/libzypp-17.31.13-150400.3.32.1.aarch64.rpm">
          <filename>libzypp-17.31.13-150400.3.32.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2847</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689576132"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210004" id="1210004" title="Azure: &quot;aureport&quot; shows &quot;sun_path len too short&quot; after upgrading to SLE 15 SP4 - SFSC 00559155 - ref:_00D1igLOd._5005qM1owu:ref" type="bugzilla"/>
    </references>
    <description>This update for audit fixes the following issues:

- Check for AF_UNIX unnamed sockets (bsc#1210004)
- Enable livepatching on main library on x86_64
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="src" src="src/audit-3.0.6-150400.4.10.1.src.rpm">
          <filename>audit-3.0.6-150400.4.10.1.src.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.10.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.10.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.10.1.src.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/libaudit1-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>libaudit1-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/libauparse0-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>libauparse0-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.10.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="s390x" src="s390x/audit-3.0.6-150400.4.10.1.s390x.rpm">
          <filename>audit-3.0.6-150400.4.10.1.s390x.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.10.1" arch="s390x" src="s390x/audit-audispd-plugins-3.0.6-150400.4.10.1.s390x.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.10.1.s390x.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.10.1" arch="s390x" src="s390x/libaudit1-3.0.6-150400.4.10.1.s390x.rpm">
          <filename>libaudit1-3.0.6-150400.4.10.1.s390x.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.10.1" arch="s390x" src="s390x/libauparse0-3.0.6-150400.4.10.1.s390x.rpm">
          <filename>libauparse0-3.0.6-150400.4.10.1.s390x.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="s390x" src="s390x/python3-audit-3.0.6-150400.4.10.1.s390x.rpm">
          <filename>python3-audit-3.0.6-150400.4.10.1.s390x.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="s390x" src="s390x/system-group-audit-3.0.6-150400.4.10.1.s390x.rpm">
          <filename>system-group-audit-3.0.6-150400.4.10.1.s390x.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/libaudit1-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>libaudit1-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/libauparse0-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>libauparse0-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.10.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.10.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2855</id>
    <title>Recommended update for openldap2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689604580"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212260" id="1212260" title="libldap2 crashes on ldap_sasl_bind_s" type="bugzilla"/>
    </references>
    <description>This update for openldap2 fixes the following issues:

- libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)
</description>
    <pkglist>
      <collection>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="x86_64" src="x86_64/libldap-2_4-2-2.4.46-150200.14.17.1.x86_64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.17.1.x86_64.rpm</filename>
        </package>
        <package name="libldap-data" epoch="0" version="2.4.46" release="150200.14.17.1" arch="noarch" src="noarch/libldap-data-2.4.46-150200.14.17.1.noarch.rpm">
          <filename>libldap-data-2.4.46-150200.14.17.1.noarch.rpm</filename>
        </package>
        <package name="openldap2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="src" src="src/openldap2-2.4.46-150200.14.17.1.src.rpm">
          <filename>openldap2-2.4.46-150200.14.17.1.src.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="s390x" src="s390x/libldap-2_4-2-2.4.46-150200.14.17.1.s390x.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.17.1.s390x.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.17.1" arch="aarch64" src="aarch64/libldap-2_4-2-2.4.46-150200.14.17.1.aarch64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2866</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689671394"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681" id="CVE-2023-32681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211674" id="1211674" title="VUL-0: CVE-2023-32681: python-requests,python36-requests,python3-requests: Unintended leak of Proxy-Authorization header" type="bugzilla"/>
    </references>
    <description>This update for python-requests fixes the following issues:

- CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.24.0" release="150300.3.3.1" arch="src" src="src/python-requests-2.24.0-150300.3.3.1.src.rpm">
          <filename>python-requests-2.24.0-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.24.0" release="150300.3.3.1" arch="noarch" src="noarch/python3-requests-2.24.0-150300.3.3.1.noarch.rpm">
          <filename>python3-requests-2.24.0-150300.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2893</id>
    <title>Recommended update for wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689828265"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206798" id="1206798" title="Deprecate the %usrmerged macro" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206674" id="1206674" title="No network (wicked) after 23-12-2022 updates - bond change in kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211026" id="1211026" title="wicked failing with wpa-enterprise" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203300" id="1203300" title="vlan interfaces don't get IP addresses during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206447" id="1206447" title="wicked-nanny: possible use-after-free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194557" id="1194557" title="/var/run leftovers in wicked and/or netconfig" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-90" id="PED-90" title="https://jira.suse.com/browse/PED-90" type="jira"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Update to version 0.6.73
- Fix arp notify loop and burst sending (boo#1212806)
- Allow verify/notify counter and interval configuration
- Handle ENOBUFS sending errors (bsc#1203300)
- Improve environment variable handling
- Refactor firmware extension definition
- Enable, disable and revert cli commands
- Fix memory leaks, add array/list utils
- Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- Cleanup /var/run leftovers in extension scripts (bsc#1194557)
- Output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (bsc#1206674)
  - Add `wicked firmware` command to improve `ibft`,`nbft`,`redfish`
  firmware extension and interface handling.
- Improve error handling in netif firmware discovery
  extension execution and extension definition overrides in
  the wicked-config.
- Fix use-after-free in debug mode (bsc#1206447)
- Replace transitional `%usrmerged` macro with regular
  version check (bsc#1206798)
- Improve to show `no-carrier` in ifstatus output
- Cleanup inclusions and update uapi header to 6.0
- Link mode nwords cleanup and new advertise mode names
- Enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="src" src="src/wicked-0.6.73-150400.3.8.1.src.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="x86_64" src="x86_64/wicked-0.6.73-150400.3.8.1.x86_64.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.73" release="150400.3.8.1" arch="x86_64" src="x86_64/wicked-service-0.6.73-150400.3.8.1.x86_64.rpm">
          <filename>wicked-service-0.6.73-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="s390x" src="s390x/wicked-0.6.73-150400.3.8.1.s390x.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.73" release="150400.3.8.1" arch="s390x" src="s390x/wicked-service-0.6.73-150400.3.8.1.s390x.rpm">
          <filename>wicked-service-0.6.73-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.73" release="150400.3.8.1" arch="aarch64" src="aarch64/wicked-0.6.73-150400.3.8.1.aarch64.rpm">
          <filename>wicked-0.6.73-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.73" release="150400.3.8.1" arch="aarch64" src="aarch64/wicked-service-0.6.73-150400.3.8.1.aarch64.rpm">
          <filename>wicked-service-0.6.73-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2556</id>
    <title>Recommended update for microos-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687273562"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211356" id="1211356" title="SLEMicro 5.3 kernel panic on reboot after kernel update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205011" id="1205011" title="Product Migration fails for SLE Micro 5.2 to 5.3" type="bugzilla"/>
    </references>
    <description>This update for microos-tools fixes the following issues:

- Update to version 2.18
- Add TMPDIR to tukit binddirs for Salt (bsc#1211356, bsc#1205011)
- 98selinux-microos: Add chroot as dependency
- Fix spelling error in warning
</description>
    <pkglist>
      <collection>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.3.1" arch="src" src="src/microos-tools-2.18-150400.3.3.1.src.rpm">
          <filename>microos-tools-2.18-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.3.1" arch="x86_64" src="x86_64/microos-tools-2.18-150400.3.3.1.x86_64.rpm">
          <filename>microos-tools-2.18-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.3.1" arch="s390x" src="s390x/microos-tools-2.18-150400.3.3.1.s390x.rpm">
          <filename>microos-tools-2.18-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="microos-tools" epoch="0" version="2.18" release="150400.3.3.1" arch="aarch64" src="aarch64/microos-tools-2.18-150400.3.3.1.aarch64.rpm">
          <filename>microos-tools-2.18-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2645</id>
    <title>Recommended update for snapper</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1687850783"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211459" id="1211459" title="[Leap 15.4][btrfs][snapper-cleanup], 'systemctl start snapper-cleanup' causes infinite message  'BTRFS warning (device vda2): qgroup rescan is already in progress' in syslog and causes 'yast2 lan' command hang" type="bugzilla"/>
    </references>
    <description>This update for snapper fixes the following issues:

- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
</description>
    <pkglist>
      <collection>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.6.1" arch="x86_64" src="x86_64/libsnapper5-0.8.16-150300.3.6.1.x86_64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="src" src="src/snapper-0.8.16-150300.3.6.1.src.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="x86_64" src="x86_64/snapper-0.8.16-150300.3.6.1.x86_64.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.6.1" arch="s390x" src="s390x/libsnapper5-0.8.16-150300.3.6.1.s390x.rpm">
          <filename>libsnapper5-0.8.16-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="s390x" src="s390x/snapper-0.8.16-150300.3.6.1.s390x.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libsnapper5" epoch="0" version="0.8.16" release="150300.3.6.1" arch="aarch64" src="aarch64/libsnapper5-0.8.16-150300.3.6.1.aarch64.rpm">
          <filename>libsnapper5-0.8.16-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="snapper" epoch="0" version="0.8.16" release="150300.3.6.1" arch="aarch64" src="aarch64/snapper-0.8.16-150300.3.6.1.aarch64.rpm">
          <filename>snapper-0.8.16-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2868</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689672993"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206346" id="1206346" title="go1.20 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="src" src="src/cni-0.7.1-150100.3.12.1.src.rpm">
          <filename>cni-0.7.1-150100.3.12.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.12.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="s390x" src="s390x/cni-0.7.1-150100.3.12.1.s390x.rpm">
          <filename>cni-0.7.1-150100.3.12.1.s390x.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.12.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.12.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2869</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689673208"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206346" id="1206346" title="go1.20 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.15.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.15.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="s390x" src="s390x/cni-plugins-0.8.6-150100.3.15.1.s390x.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.s390x.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.15.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.15.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2877</id>
    <title>Security update for dbus-1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689752650"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34969" id="CVE-2023-34969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34969" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212126" id="1212126" title="VUL-0: CVE-2023-34969: dbus-1: D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon" type="bugzilla"/>
    </references>
    <description>This update for dbus-1 fixes the following issues:

- CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).
</description>
    <pkglist>
      <collection>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="src" src="src/dbus-1-1.12.2-150400.18.8.1.src.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.src.rpm</filename>
        </package>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="x86_64" src="x86_64/dbus-1-1.12.2-150400.18.8.1.x86_64.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="src" src="src/dbus-1-x11-1.12.2-150400.18.8.1.src.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.src.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="x86_64" src="x86_64/dbus-1-x11-1.12.2-150400.18.8.1.x86_64.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.x86_64.rpm</filename>
        </package>
        <package name="libdbus-1-3" epoch="0" version="1.12.2" release="150400.18.8.1" arch="x86_64" src="x86_64/libdbus-1-3-1.12.2-150400.18.8.1.x86_64.rpm">
          <filename>libdbus-1-3-1.12.2-150400.18.8.1.x86_64.rpm</filename>
        </package>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="s390x" src="s390x/dbus-1-1.12.2-150400.18.8.1.s390x.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.s390x.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="s390x" src="s390x/dbus-1-x11-1.12.2-150400.18.8.1.s390x.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.s390x.rpm</filename>
        </package>
        <package name="libdbus-1-3" epoch="0" version="1.12.2" release="150400.18.8.1" arch="s390x" src="s390x/libdbus-1-3-1.12.2-150400.18.8.1.s390x.rpm">
          <filename>libdbus-1-3-1.12.2-150400.18.8.1.s390x.rpm</filename>
        </package>
        <package name="dbus-1" epoch="0" version="1.12.2" release="150400.18.8.1" arch="aarch64" src="aarch64/dbus-1-1.12.2-150400.18.8.1.aarch64.rpm">
          <filename>dbus-1-1.12.2-150400.18.8.1.aarch64.rpm</filename>
        </package>
        <package name="dbus-1-x11" epoch="0" version="1.12.2" release="150400.18.8.1" arch="aarch64" src="aarch64/dbus-1-x11-1.12.2-150400.18.8.1.aarch64.rpm">
          <filename>dbus-1-x11-1.12.2-150400.18.8.1.aarch64.rpm</filename>
        </package>
        <package name="libdbus-1-3" epoch="0" version="1.12.2" release="150400.18.8.1" arch="aarch64" src="aarch64/libdbus-1-3-1.12.2-150400.18.8.1.aarch64.rpm">
          <filename>libdbus-1-3-1.12.2-150400.18.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2772</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688457753"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212187" id="1212187" title="libzypp started failing with &quot;Curl error 92 Error message: HTTP/2 stream 0 was not closed cleanly&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211261" id="1211261" title="'zypper targetos' produces just an empty output line" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212222" id="1212222" title="libzypp fails to build against libproxy 0.5.x" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

libzypp was updated to version 17.31.14 (22):

- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- build: honor libproxy.pc's includedir (bsc#1212222)

zypper was updated to version 1.14.61:

- targetos: Add an error note if XPath:/product/register/target
  is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="src" src="src/libzypp-17.31.14-150400.3.35.1.src.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="x86_64" src="x86_64/libzypp-17.31.14-150400.3.35.1.x86_64.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="src" src="src/zypper-1.14.61-150400.3.24.1.src.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="x86_64" src="x86_64/zypper-1.14.61-150400.3.24.1.x86_64.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.61" release="150400.3.24.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.61-150400.3.24.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.61-150400.3.24.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="s390x" src="s390x/libzypp-17.31.14-150400.3.35.1.s390x.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="s390x" src="s390x/zypper-1.14.61-150400.3.24.1.s390x.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.14" release="150400.3.35.1" arch="aarch64" src="aarch64/libzypp-17.31.14-150400.3.35.1.aarch64.rpm">
          <filename>libzypp-17.31.14-150400.3.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.61" release="150400.3.24.1" arch="aarch64" src="aarch64/zypper-1.14.61-150400.3.24.1.aarch64.rpm">
          <filename>zypper-1.14.61-150400.3.24.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2827</id>
    <title>Recommended update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689326922"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- Build also for modern python version (jsc#PED-68)
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.19.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.19.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="src" src="src/libxml2-2.9.14-150400.5.19.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.19.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.19.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.19.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.19.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.19.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.19.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.19.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.19.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.19.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="s390x" src="s390x/libxml2-2-2.9.14-150400.5.19.1.s390x.rpm">
          <filename>libxml2-2-2.9.14-150400.5.19.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.19.1" arch="s390x" src="s390x/libxml2-tools-2.9.14-150400.5.19.1.s390x.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.19.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="s390x" src="s390x/python3-libxml2-2.9.14-150400.5.19.1.s390x.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.19.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.19.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.19.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.19.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.19.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.19.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.19.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.19.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2998</id>
    <title>Recommended update for libdb-4_8</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690440050"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1099695" id="1099695" title="Incomplete license tag in libdb-4_8" type="bugzilla"/>
    </references>
    <description>This update for libdb-4_8 fixes the following issues:

- Fix incomplete license tag (bsc#1099695)
</description>
    <pkglist>
      <collection>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.9.1" arch="x86_64" src="x86_64/db48-utils-4.8.30-150000.7.9.1.x86_64.rpm">
          <filename>db48-utils-4.8.30-150000.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="src" src="src/libdb-4_8-4.8.30-150000.7.9.1.src.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.src.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="x86_64" src="x86_64/libdb-4_8-4.8.30-150000.7.9.1.x86_64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.x86_64.rpm</filename>
        </package>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.9.1" arch="s390x" src="s390x/db48-utils-4.8.30-150000.7.9.1.s390x.rpm">
          <filename>db48-utils-4.8.30-150000.7.9.1.s390x.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="s390x" src="s390x/libdb-4_8-4.8.30-150000.7.9.1.s390x.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.s390x.rpm</filename>
        </package>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.9.1" arch="aarch64" src="aarch64/db48-utils-4.8.30-150000.7.9.1.aarch64.rpm">
          <filename>db48-utils-4.8.30-150000.7.9.1.aarch64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.9.1" arch="aarch64" src="aarch64/libdb-4_8-4.8.30-150000.7.9.1.aarch64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2767</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688412218"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212662" id="1212662" title="ldd cannot execute binary file" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.344.g3d5cd8fb
- Continue parsing if ldd prints &quot;cannot execute binary file&quot; (bsc#1212662)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="src" src="src/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.src.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="x86_64" src="x86_64/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="s390x" src="s390x/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.s390x.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="s390x" src="s390x/dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.s390x.rpm">
          <filename>dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.s390x.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="s390x" src="s390x/dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.s390x.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="aarch64" src="aarch64/dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm">
          <filename>dracut-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.344.g3d5cd8fb" release="150400.3.25.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.344.g3d5cd8fb-150400.3.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3468</id>
    <title>Recommended update for python3</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693293993"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This update for python3 fixes the following issue:

- Rename sources in preparation of python3.11 (jsc#PED-68)
</description>
    <pkglist>
      <collection>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.7.64" arch="src" src="src/python3-M2Crypto-0.38.0-150400.7.64.src.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.7.64.src.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.7.64" arch="x86_64" src="x86_64/python3-M2Crypto-0.38.0-150400.7.64.x86_64.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.7.64.x86_64.rpm</filename>
        </package>
        <package name="python3-evtx" epoch="0" version="0.5.3b" release="150400.20.30" arch="noarch" src="noarch/python3-evtx-0.5.3b-150400.20.30.noarch.rpm">
          <filename>python3-evtx-0.5.3b-150400.20.30.noarch.rpm</filename>
        </package>
        <package name="python3-evtx" epoch="0" version="0.5.3b" release="150400.20.30" arch="src" src="src/python3-evtx-0.5.3b-150400.20.30.src.rpm">
          <filename>python3-evtx-0.5.3b-150400.20.30.src.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.10.23" arch="src" src="src/python3-gobject-3.42.2-150400.10.23.src.rpm">
          <filename>python3-gobject-3.42.2-150400.10.23.src.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.10.23" arch="x86_64" src="x86_64/python3-gobject-3.42.2-150400.10.23.x86_64.rpm">
          <filename>python3-gobject-3.42.2-150400.10.23.x86_64.rpm</filename>
        </package>
        <package name="python3-gobject-Gdk" epoch="0" version="3.42.2" release="150400.10.23" arch="x86_64" src="x86_64/python3-gobject-Gdk-3.42.2-150400.10.23.x86_64.rpm">
          <filename>python3-gobject-Gdk-3.42.2-150400.10.23.x86_64.rpm</filename>
        </package>
        <package name="python3-gobject-cairo" epoch="0" version="3.42.2" release="150400.10.23" arch="x86_64" src="x86_64/python3-gobject-cairo-3.42.2-150400.10.23.x86_64.rpm">
          <filename>python3-gobject-cairo-3.42.2-150400.10.23.x86_64.rpm</filename>
        </package>
        <package name="python3-libvirt-python" epoch="0" version="8.0.0" release="150400.5.69" arch="src" src="src/python3-libvirt-python-8.0.0-150400.5.69.src.rpm">
          <filename>python3-libvirt-python-8.0.0-150400.5.69.src.rpm</filename>
        </package>
        <package name="python3-libvirt-python" epoch="0" version="8.0.0" release="150400.5.69" arch="x86_64" src="x86_64/python3-libvirt-python-8.0.0-150400.5.69.x86_64.rpm">
          <filename>python3-libvirt-python-8.0.0-150400.5.69.x86_64.rpm</filename>
        </package>
        <package name="python3-ordered-set" epoch="0" version="4.0.2" release="150400.8.34" arch="noarch" src="noarch/python3-ordered-set-4.0.2-150400.8.34.noarch.rpm">
          <filename>python3-ordered-set-4.0.2-150400.8.34.noarch.rpm</filename>
        </package>
        <package name="python3-ordered-set" epoch="0" version="4.0.2" release="150400.8.34" arch="src" src="src/python3-ordered-set-4.0.2-150400.8.34.src.rpm">
          <filename>python3-ordered-set-4.0.2-150400.8.34.src.rpm</filename>
        </package>
        <package name="python3-pyOpenSSL" epoch="0" version="21.0.0" release="150400.7.62" arch="noarch" src="noarch/python3-pyOpenSSL-21.0.0-150400.7.62.noarch.rpm">
          <filename>python3-pyOpenSSL-21.0.0-150400.7.62.noarch.rpm</filename>
        </package>
        <package name="python3-pyOpenSSL" epoch="0" version="21.0.0" release="150400.7.62" arch="src" src="src/python3-pyOpenSSL-21.0.0-150400.7.62.src.rpm">
          <filename>python3-pyOpenSSL-21.0.0-150400.7.62.src.rpm</filename>
        </package>
        <package name="python3-pycairo" epoch="0" version="1.20.1" release="150400.5.69" arch="src" src="src/python3-pycairo-1.20.1-150400.5.69.src.rpm">
          <filename>python3-pycairo-1.20.1-150400.5.69.src.rpm</filename>
        </package>
        <package name="python3-pycairo" epoch="0" version="1.20.1" release="150400.5.69" arch="x86_64" src="x86_64/python3-pycairo-1.20.1-150400.5.69.x86_64.rpm">
          <filename>python3-pycairo-1.20.1-150400.5.69.x86_64.rpm</filename>
        </package>
        <package name="python3-pyudev" epoch="0" version="0.22.0+git.1642212208.d5630bf" release="150400.5.50" arch="noarch" src="noarch/python3-pyudev-0.22.0+git.1642212208.d5630bf-150400.5.50.noarch.rpm">
          <filename>python3-pyudev-0.22.0+git.1642212208.d5630bf-150400.5.50.noarch.rpm</filename>
        </package>
        <package name="python3-pyudev" epoch="0" version="0.22.0+git.1642212208.d5630bf" release="150400.5.50" arch="src" src="src/python3-pyudev-0.22.0+git.1642212208.d5630bf-150400.5.50.src.rpm">
          <filename>python3-pyudev-0.22.0+git.1642212208.d5630bf-150400.5.50.src.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.7.64" arch="s390x" src="s390x/python3-M2Crypto-0.38.0-150400.7.64.s390x.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.7.64.s390x.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.10.23" arch="s390x" src="s390x/python3-gobject-3.42.2-150400.10.23.s390x.rpm">
          <filename>python3-gobject-3.42.2-150400.10.23.s390x.rpm</filename>
        </package>
        <package name="python3-gobject-Gdk" epoch="0" version="3.42.2" release="150400.10.23" arch="s390x" src="s390x/python3-gobject-Gdk-3.42.2-150400.10.23.s390x.rpm">
          <filename>python3-gobject-Gdk-3.42.2-150400.10.23.s390x.rpm</filename>
        </package>
        <package name="python3-gobject-cairo" epoch="0" version="3.42.2" release="150400.10.23" arch="s390x" src="s390x/python3-gobject-cairo-3.42.2-150400.10.23.s390x.rpm">
          <filename>python3-gobject-cairo-3.42.2-150400.10.23.s390x.rpm</filename>
        </package>
        <package name="python3-libvirt-python" epoch="0" version="8.0.0" release="150400.5.69" arch="s390x" src="s390x/python3-libvirt-python-8.0.0-150400.5.69.s390x.rpm">
          <filename>python3-libvirt-python-8.0.0-150400.5.69.s390x.rpm</filename>
        </package>
        <package name="python3-pycairo" epoch="0" version="1.20.1" release="150400.5.69" arch="s390x" src="s390x/python3-pycairo-1.20.1-150400.5.69.s390x.rpm">
          <filename>python3-pycairo-1.20.1-150400.5.69.s390x.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.7.64" arch="ppc64le" src="ppc64le/python3-M2Crypto-0.38.0-150400.7.64.ppc64le.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.7.64.ppc64le.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.10.23" arch="ppc64le" src="ppc64le/python3-gobject-3.42.2-150400.10.23.ppc64le.rpm">
          <filename>python3-gobject-3.42.2-150400.10.23.ppc64le.rpm</filename>
        </package>
        <package name="python3-gobject-Gdk" epoch="0" version="3.42.2" release="150400.10.23" arch="ppc64le" src="ppc64le/python3-gobject-Gdk-3.42.2-150400.10.23.ppc64le.rpm">
          <filename>python3-gobject-Gdk-3.42.2-150400.10.23.ppc64le.rpm</filename>
        </package>
        <package name="python3-gobject-cairo" epoch="0" version="3.42.2" release="150400.10.23" arch="ppc64le" src="ppc64le/python3-gobject-cairo-3.42.2-150400.10.23.ppc64le.rpm">
          <filename>python3-gobject-cairo-3.42.2-150400.10.23.ppc64le.rpm</filename>
        </package>
        <package name="python3-libvirt-python" epoch="0" version="8.0.0" release="150400.5.69" arch="ppc64le" src="ppc64le/python3-libvirt-python-8.0.0-150400.5.69.ppc64le.rpm">
          <filename>python3-libvirt-python-8.0.0-150400.5.69.ppc64le.rpm</filename>
        </package>
        <package name="python3-pycairo" epoch="0" version="1.20.1" release="150400.5.69" arch="ppc64le" src="ppc64le/python3-pycairo-1.20.1-150400.5.69.ppc64le.rpm">
          <filename>python3-pycairo-1.20.1-150400.5.69.ppc64le.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.7.64" arch="aarch64" src="aarch64/python3-M2Crypto-0.38.0-150400.7.64.aarch64.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.7.64.aarch64.rpm</filename>
        </package>
        <package name="python3-gobject" epoch="0" version="3.42.2" release="150400.10.23" arch="aarch64" src="aarch64/python3-gobject-3.42.2-150400.10.23.aarch64.rpm">
          <filename>python3-gobject-3.42.2-150400.10.23.aarch64.rpm</filename>
        </package>
        <package name="python3-gobject-Gdk" epoch="0" version="3.42.2" release="150400.10.23" arch="aarch64" src="aarch64/python3-gobject-Gdk-3.42.2-150400.10.23.aarch64.rpm">
          <filename>python3-gobject-Gdk-3.42.2-150400.10.23.aarch64.rpm</filename>
        </package>
        <package name="python3-gobject-cairo" epoch="0" version="3.42.2" release="150400.10.23" arch="aarch64" src="aarch64/python3-gobject-cairo-3.42.2-150400.10.23.aarch64.rpm">
          <filename>python3-gobject-cairo-3.42.2-150400.10.23.aarch64.rpm</filename>
        </package>
        <package name="python3-libvirt-python" epoch="0" version="8.0.0" release="150400.5.69" arch="aarch64" src="aarch64/python3-libvirt-python-8.0.0-150400.5.69.aarch64.rpm">
          <filename>python3-libvirt-python-8.0.0-150400.5.69.aarch64.rpm</filename>
        </package>
        <package name="python3-pycairo" epoch="0" version="1.20.1" release="150400.5.69" arch="aarch64" src="aarch64/python3-pycairo-1.20.1-150400.5.69.aarch64.rpm">
          <filename>python3-pycairo-1.20.1-150400.5.69.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2765</id>
    <title>Security update for libcap</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688409230"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211419" id="1211419" title="VUL-0: CVE-2023-2603: libcap: integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211418" id="1211418" title="VUL-0: CVE-2023-2602: libcap: improper memory release in libcap/psx/psx.c:__wrap_pthread_create()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2603" id="CVE-2023-2603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2602" id="CVE-2023-2602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2602" type="cve"/>
    </references>
    <description>This update for libcap fixes the following issues:

- CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).
- CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).
</description>
    <pkglist>
      <collection>
        <package name="libcap" epoch="0" version="2.63" release="150400.3.3.1" arch="src" src="src/libcap-2.63-150400.3.3.1.src.rpm">
          <filename>libcap-2.63-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libcap2" epoch="0" version="2.63" release="150400.3.3.1" arch="x86_64" src="x86_64/libcap2-2.63-150400.3.3.1.x86_64.rpm">
          <filename>libcap2-2.63-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcap2" epoch="0" version="2.63" release="150400.3.3.1" arch="s390x" src="s390x/libcap2-2.63-150400.3.3.1.s390x.rpm">
          <filename>libcap2-2.63-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libcap2" epoch="0" version="2.63" release="150400.3.3.1" arch="aarch64" src="aarch64/libcap2-2.63-150400.3.3.1.aarch64.rpm">
          <filename>libcap2-2.63-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2977</id>
    <title>Recommended update for wayland</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690357048"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2423" id="PED-2423" title="https://jira.suse.com/browse/PED-2423" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194190" id="1194190" title="GraphicsMagick crashes the entire GNOME session" type="bugzilla"/>
    </references>
    <description>This update for wayland fixes the following issues:

- Update to version 1.21 (PED-2423)
- New wl_pointer high-resolution scroll event, new convenience functions, collection of bug fixes
</description>
    <pkglist>
      <collection>
        <package name="libwayland-client0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-client0-1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-client0-1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-cursor0-1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-cursor0-1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-egl1-99~1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-egl1-99~1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libwayland-server0-1.21.0-150400.3.6.1.x86_64.rpm">
          <filename>libwayland-server0-1.21.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="wayland" epoch="0" version="1.21.0" release="150400.3.6.1" arch="src" src="src/wayland-1.21.0-150400.3.6.1.src.rpm">
          <filename>wayland-1.21.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libwayland-client0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="s390x" src="s390x/libwayland-client0-1.21.0-150400.3.6.1.s390x.rpm">
          <filename>libwayland-client0-1.21.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="s390x" src="s390x/libwayland-cursor0-1.21.0-150400.3.6.1.s390x.rpm">
          <filename>libwayland-cursor0-1.21.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.21.0" release="150400.3.6.1" arch="s390x" src="s390x/libwayland-egl1-99~1.21.0-150400.3.6.1.s390x.rpm">
          <filename>libwayland-egl1-99~1.21.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="s390x" src="s390x/libwayland-server0-1.21.0-150400.3.6.1.s390x.rpm">
          <filename>libwayland-server0-1.21.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libwayland-client0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-client0-1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-client0-1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-cursor0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-cursor0-1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-cursor0-1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-egl1" epoch="0" version="99~1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-egl1-99~1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-egl1-99~1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libwayland-server0" epoch="0" version="1.21.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libwayland-server0-1.21.0-150400.3.6.1.aarch64.rpm">
          <filename>libwayland-server0-1.21.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3145</id>
    <title>Security update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690961657"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211741" id="1211741" title="VUL-0: CVE-2023-28370: python-tornado: open redirect vulnerability in StaticFileHandler under certain   configurations." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210994" id="1210994" title="L3: salt gitfs cannot automatically refresh the git cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211591" id="1211591" title="[SLE15SP3][Salt-minion][SUMA] some unexpected traceback error seen &quot;ModuleNotFoundError: No module named 'salt.ext.six'&quot;" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28370" id="CVE-2023-28370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28370" type="cve"/>
    </references>
    <description>This update for salt fixes the following issues:

Security fixes:

- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)

Bug fixes:

- Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.37.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.37.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="src" src="src/salt-3006.0-150400.8.37.2.src.rpm">
          <filename>salt-3006.0-150400.8.37.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="x86_64" src="x86_64/salt-3006.0-150400.8.37.2.x86_64.rpm">
          <filename>salt-3006.0-150400.8.37.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.37.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.37.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.37.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.37.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.37.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.37.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.37.2.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.37.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="s390x" src="s390x/salt-3006.0-150400.8.37.2.s390x.rpm">
          <filename>salt-3006.0-150400.8.37.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.37.2" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.37.2.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.37.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.37.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.37.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.37.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.37.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.37.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.37.2" arch="aarch64" src="aarch64/salt-3006.0-150400.8.37.2.aarch64.rpm">
          <filename>salt-3006.0-150400.8.37.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.37.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.37.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.37.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.37.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.37.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.37.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3144</id>
    <title>Security update for SUSE Manager Client Tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690961451"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-679" id="MSQA-679" title="https://jira.suse.com/browse/MSQA-679" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208612" id="1208612" title="spacecmd from 4.2 client fails with backtrace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212279" id="1212279" title="prometheus-blackbox_exporter 0.19 does not support  icmp ttl option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211741" id="1211741" title="VUL-0: CVE-2023-28370: python-tornado: open redirect vulnerability in StaticFileHandler under certain   configurations." type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3694" id="PED-3694" title="https://jira.suse.com/browse/PED-3694" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4556" id="PED-4556" title="https://jira.suse.com/browse/PED-4556" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28370" id="CVE-2023-28370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28370" type="cve"/>
    </references>
    <description>This update fixes the following issues:

python-tornado:
    
- Security fixes:
  * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)

prometheus-blackbox_exporter:

- Use obscpio for go modules service
- Set version number
- Set build date from SOURCE_DATE_EPOCH
- Update to 0.24.0 (bsc#1212279, jsc#PED-4556)
  * Requires go1.19
- Avoid empty validation script
- Add rc symlink for backwards compatibility

spacecmd:

- Version 4.3.22-1
  * Bypass traditional systems check on older SUMA instances (bsc#1208612)

</description>
    <pkglist>
      <collection>
        <package name="python-tornado" epoch="0" version="4.5.3" release="150000.3.6.1" arch="src" src="src/python-tornado-4.5.3-150000.3.6.1.src.rpm">
          <filename>python-tornado-4.5.3-150000.3.6.1.src.rpm</filename>
        </package>
        <package name="python3-tornado" epoch="0" version="4.5.3" release="150000.3.6.1" arch="x86_64" src="x86_64/python3-tornado-4.5.3-150000.3.6.1.x86_64.rpm">
          <filename>python3-tornado-4.5.3-150000.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-tornado" epoch="0" version="4.5.3" release="150000.3.6.1" arch="s390x" src="s390x/python3-tornado-4.5.3-150000.3.6.1.s390x.rpm">
          <filename>python3-tornado-4.5.3-150000.3.6.1.s390x.rpm</filename>
        </package>
        <package name="python3-tornado" epoch="0" version="4.5.3" release="150000.3.6.1" arch="aarch64" src="aarch64/python3-tornado-4.5.3-150000.3.6.1.aarch64.rpm">
          <filename>python3-tornado-4.5.3-150000.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3330</id>
    <title>Recommended update for python-pyasn1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692169312"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207805" id="1207805" title="L3: Inconsistent bytecode files in the python3-pyasn1-0.4.2-3.2.1.noarch package [ref:_00D1igLOd._5005qKbnQK:ref]" type="bugzilla"/>
    </references>
    <description>This update for python-pyasn1 fixes the following issues:

- To avoid users of this package having to recompile bytecode
  files, change the mtime of any __init__.py. (bsc#1207805)
</description>
    <pkglist>
      <collection>
        <package name="python-pyasn1" epoch="0" version="0.4.2" release="150000.3.5.1" arch="src" src="src/python-pyasn1-0.4.2-150000.3.5.1.src.rpm">
          <filename>python-pyasn1-0.4.2-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python3-pyasn1" epoch="0" version="0.4.2" release="150000.3.5.1" arch="noarch" src="noarch/python3-pyasn1-0.4.2-150000.3.5.1.noarch.rpm">
          <filename>python3-pyasn1-0.4.2-150000.3.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2800</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688967357"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212623" id="1212623" title="openssl s_client does not honor ocsp revocation status" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- Check the OCSP RESPONSE in openssl s_client command and terminate
  connection if a revoked certificate is found. [bsc#1212623]
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.45.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.45.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.45.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.45.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.45.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.45.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.45.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.45.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.45.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.45.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.45.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2788</id>
    <title>Recommended update for mozilla-nspr, mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688637148"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202118" id="1202118" title="Add Requires: libsoftokn3 to MozillaFirefox.spec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185116" id="1185116" title="merge back hmac files (was: upgrade of libopenssl1_1 and libopenssl1_1-hmac fails with FIPS selftest failure error)" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nspr was updated to version 4.35

* fixes for building with clang
* use the number of online processors for the
  PR_GetNumberOfProcessors() API on some platforms
* fix build on mips+musl libc
* Add support for the LoongArch 64-bit architecture

mozilla-nss was update to NSS 3.90:

* clang-format lib/freebl/stubs.c
* Add a constant time select function
* Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
* output early build errors by default
* Update the technical constraints for KamuSM
* Add BJCA Global Root CA1 and CA2 root certificates
* Enable default UBSan Checks
* Add explicit handling of zero length records
* Tidy up DTLS ACK Error Handling Path
* Refactor zero length record tests
* Fix compiler warning via correct assert
* run linux tests on nss-t/t-linux-xlarge-gcp
* In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
* Fix reading raw negative numbers
* Repairing unreachable code in clang built with gyp
* Integrate Vale Curve25519
* Removing unused flags for Hacl*
* Adding a better error message
* Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
* Fall back to the softokn when writing certificate trust
* FIPS-104-3 requires we restart post programmatically
* cmd/ecperf: fix dangling pointer warning on gcc 13
* Update ACVP dockerfile for compatibility with debian package changes
* Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
* Removed deprecated sprintf function and replaced with snprintf
* fix rst warnings in nss doc
* Fix incorrect pygment style
* Change GYP directive to apply across platforms
* Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag

- Merge the libfreebl3-hmac and libsoftokn3-hmac packages into the respective libraries. (bsc#1185116)

update to NSS 3.89.1

* Update the technical constraints for KamuSM.
* Add BJCA Global Root CA1 and CA2 root certificates.

update to NSS 3.89

* revert freebl/softoken RSA_MIN_MODULUS_BITS increase
* PR_STATIC_ASSERT is cursed
* Need to add policy control to keys lengths for signatures
* Fix unreachable code warning in fuzz builds
* Fix various compiler warnings in NSS
* Enable various compiler warnings for clang builds
* set PORT error after sftk_HMACCmp failure
* Need to add policy control to keys lengths for signatures
* remove data length assertion in sec_PKCS7Decrypt
* Make high tag number assertion failure an error
* CKM_SHA384_KEY_DERIVATION correction maximum key length from 284 to 384
* Tolerate certificate_authorities xtn in ClientHello
* Fix build failure on Windows
* migrate Win 2012 tasks to Azure
* fix title length in doc
* Add interop tests for HRR and PSK to GREASE suite
* Add presence/absence tests for TLS GREASE
* Correct addition of GREASE value to ALPN xtn
* CH extension permutation
* TLS GREASE (RFC8701)
* improve handling of unknown PKCS#12 safe bag types
* use a different treeherder symbol for each docker image build task
* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag
* build failure while implicitly casting SECStatus to PRUInt32

update to NSS 3.88.1

* improve handling of unknown PKCS#12 safe bag types

update to NSS 3.88

* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag.
* build failure while implicitly casting SECStatus to PRUInt32
* Add check for ClientHello SID max length
* Added EarlyData ALPN test support to BoGo shim
* ECH client - Discard resumption TLS &lt; 1.3 Session(IDs|Tickets) if ECH configs are setup
* On HRR skip PSK incompatible with negotiated ciphersuites hash algorithm
* ECH client: Send ech_required alert on server negotiating TLS 1.2. Fixed misleading Gtest, enabled corresponding BoGo test
* Added Bogo ECH rejection test support
* Added ECH 0Rtt support to BoGo shim
* RSA OAEP Wycheproof JSON
* RSA decrypt Wycheproof JSON
* ECDSA Wycheproof JSON
* ECDH Wycheproof JSON
* PKCS#1v1.5 wycheproof json
* Use X25519 wycheproof json
* Move scripts to python3
* Properly link FuzzingEngine for oss-fuzz.
* Extending RSA-PSS bltest test coverage (Adding SHA-256 and SHA-384)
* NSS needs to move off of DSA for integrity checks
* Add initial testing with ACVP vector sets using acvp-rust
* Don't clone libFuzzer, rely on clang instead

update to NSS 3.87

* NULL password encoding incorrect
* Fix rng stub signature for fuzzing builds
* Updating the compiler parsing for build
* Modification of supported compilers
* tstclnt crashes when accessing gnutls server without a user cert in the database.
* Add configuration option to enable source-based coverage sanitizer
* Update ECCKiila generated files.
* Add support for the LoongArch 64-bit architecture
* add checks for zero-length RSA modulus to avoid memory errors and failed assertions later
* Additional zero-length RSA modulus checks

update to NSS 3.86

* conscious language removal in NSS
* Set nssckbi version number to 2.60
* Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
* Remove Staat der Nederlanden EV Root CA from NSS
* Remove EC-ACC root cert from NSS
* Remove SwissSign Platinum CA - G2 from NSS
* Remove Network Solutions Certificate Authority
* compress docker image artifact with zstd
* Migrate nss from AWS to GCP
* Enable static builds in the CI
* Removing SAW docker from the NSS build system
* Initialising variables in the rsa blinding code
* Implementation of the double-signing of the message for ECDSA
* Adding exponent blinding for RSA.

update to NSS 3.85

* Modification of the primes.c and dhe-params.c in order to have better looking tables
* Update zlib in NSS to 1.2.13
* Skip building modutil and shlibsign when building in Firefox
* Mark _nss_version_c unused on clang-cl
* bmo#1795668 - Remove redundant variable definitions in lowhashtest
* Add note about python executable to build instructions.

update to NSS 3.84
* Bump minimum NSPR version to 4.35
* Add a flag to disable building libnssckbi.

update to NSS 3.83

* Remove set-but-unused variables from SEC_PKCS12DecoderValidateBags
* Set nssckbi version number to 2.58
* Add two SECOM root certificates to NSS
* Add two DigitalSign root certificates to NSS
* Remove Camerfirma Global Chambersign Root from NSS
* Added bug reference and description to disabled UnsolicitedServerNameAck bogo ECH test
* Removed skipping of ECH on equality of private and public server name
* Added comment and bug reference to ECHRandomHRRExtension bogo test
* Added Bogo shim client HRR test support. Fixed overwriting of CHInner.random on HRR
* Added check for server only sending ECH extension with retry configs
  in EncryptedExtensions and if not accepting ECH. Changed config setting
  behavior to skip configs with unsupported mandatory extensions instead
  of failing
* Added ECH client support to BoGo shim. Changed CHInner creation to
  skip TLS 1.2 only extensions to comply with BoGo
* Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs
* Update BoGo tests to recent BoringSSL version
* Bump minimum NSPR version to 4.34.1

update to NSS 3.82

* check for null template in sec_asn1{d,e}_push_state
* QuickDER: Forbid NULL tags with non-zero length
* Initialize local variables in TlsConnectTestBase::ConnectAndCheckCipherSuite
* Cast the result of GetProcAddress
* pk11wrap: Tighten certificate lookup based on PKCS #11 URI.

update to NSS 3.81

* Enable aarch64 hardware crypto support on OpenBSD
* make NSS_SecureMemcmp 0/1 valued
* Add no_application_protocol alert handler and test client error code is set
* Gracefully handle null nickname in CERT_GetCertNicknameWithValidity
* required for Firefox 104

- raised NSPR requirement to 4.34.1

- changing some Requires from (pre) to generic as (pre) is not sufficient (bsc#1202118)

update to NSS 3.80

* Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
* Add support for asynchronous client auth hooks.
* nss-policy-check: make unknown keyword check optional.
* GatherBuffer: Reduced plaintext buffer allocations
	  by allocating it on initialization. Replaced
	  redundant code with assert. Debug builds: Added
	  buffer freeing/allocation for each record.
* Mark 3.79 as an ESR release.
* Bump nssckbi version number for June.
* Remove Hellenic Academic 2011 Root.
* Add E-Tugra Roots.
* Add Certainly Roots.
* Add DigitCert Roots.
* Protect SFTKSlot needLogin with slotLock.
* Compare signature and signatureAlgorithm fields in legacy certificate verifier.
* Uninitialized value in cert_VerifyCertChainOld.
* Unchecked return code in sec_DecodeSigAlg.
* Uninitialized value in cert_ComputeCertType.
* Avoid data race on primary password change.
* Replace ppc64 dcbzl intrinisic.
* Allow LDFLAGS override in makefile builds.
</description>
    <pkglist>
      <collection>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="src" src="src/mozilla-nspr-4.35-150000.3.29.1.src.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.src.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="x86_64" src="x86_64/mozilla-nspr-4.35-150000.3.29.1.x86_64.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="s390x" src="s390x/mozilla-nspr-4.35-150000.3.29.1.s390x.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.35" release="150000.3.29.1" arch="aarch64" src="aarch64/mozilla-nspr-4.35-150000.3.29.1.aarch64.rpm">
          <filename>mozilla-nspr-4.35-150000.3.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2820</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689240087"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152472" id="1152472" title="[TRACKERBUG] Backported kernel graphics patches for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1152489" id="1152489" title="[TRACKERBUG] git-fixes pile for SLE15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1160435" id="1160435" title="5.5 kernel-docs package build failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187829" id="1187829" title="L3 Question:  .rela.debug_info - size larger than .debug_info?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205758" id="1205758" title="VUL-0: CVE-2022-45885: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/media/dvb-core/dvb_frontend.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208410" id="1208410" title="[NetApp SLES15 SP5 Bug] multipathd hang seen on SAN-booted host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208600" id="1208600" title="VUL-0: CVE-2023-1077: kernel: type confusion in pick_next_rt_entity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209039" id="1209039" title="VUL-0: CVE-2023-1249: kernel: missing mmap_lock in fill_files_note that could possibly lead to a use after free in the coredump code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209367" id="1209367" title="PSP_CI: P10 Up-to 8% degradation using Unixbench 16 copy filecopy on SLES15SP4 SS1 compared to SLES15SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211299" id="1211299" title="LTP nfs08.sh (cache invalidation for directories) fails on NFS &gt;= v4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211346" id="1211346" title="Partner-L3: NULL pointer dereference in lpfc_dev_loss_tmo_callbk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211387" id="1211387" title="VUL-0: kernel: Use after free bug in imsttfb_probe due to lack of error-handling of init_imstt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211410" id="1211410" title="Weird &quot;vmalloc error&quot; kernel stack trace when lsof is executed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211449" id="1211449" title="VUL-1: kernel: Use after free bug in r592_remov due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211796" id="1211796" title="kernel modules not usrmerged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211852" id="1211852" title="Update Broadcom Emulex lpfc driver to 14.2.0.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212051" id="1212051" title="VUL-0: CVE-2023-3111: kernel: Use after free in prepare_to_relocate in fs/btrfs/relocation.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212129" id="1212129" title="VUL-0: CVE-2023-3141: kernel-source,kernel-source-azure,kernel-source-rt: kernel: Use after free bug in r592_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212154" id="1212154" title="VUL-0: CVE-2023-3161: kernel: fbcon: shift-out-of-bounds in fbcon_set_font()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212155" id="1212155" title="VUL-0: CVE-2023-21102: kernel: bypass of shadow stack protection due to a logic error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212158" id="1212158" title="kernel-docs missing top level chapter numbers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212265" id="1212265" title="VUL-0: CVE-2023-3212: kernel: NULL pointer dereference in gfs2_evict_inode() in fs/gfs2/super.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212350" id="1212350" title="SLE-15SP4 KOTD: Kernel warning during boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212448" id="1212448" title="Backport of cleanup patches" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212494" id="1212494" title="VUL-0: CVE-2023-35823: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212495" id="1212495" title="VUL-0: CVE-2023-35829: kernel-source-azure,kernel-source,kernel-source-rt: use after free in rkvdec_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212504" id="1212504" title="VUL-0: CVE-2023-35788: kernel: out-of-bounds write in net/sched/cls_flower.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212513" id="1212513" title="VUL-0: CVE-2023-35828: kernel: use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212540" id="1212540" title="ceph: fix use-after-free bug for inodes when flushing capsnaps" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212561" id="1212561" title="cgroup: always put cset in cgroup_css_set_put_fork" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212563" id="1212563" title="cgroup: fix missing cpus_read_{lock,unlock}() in  cgroup_transfer_tasks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212564" id="1212564" title="bpf: Fix UAF in task local storage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212592" id="1212592" title="s390/dasd: Use correct lock while counting channel queue length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212603" id="1212603" title="ISST: SLES15SP5: ritzlp57: LPM failed with HSCLA2CF and HSCL365C and LPAR crashed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212605" id="1212605" title="VUL-0: CVE-2023-3357: kernel-source,kernel-source-azure,kernel-source-rt: NULL Pointer Dereference in drivers/hid/amd-sfh-hid/amd_sfh_client.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212606" id="1212606" title="VUL-0: CVE-2023-3358: kernel-source-azure,kernel-source-rt,kernel-source: NULL Pointer Dereference in drivers/hid/intel-ish-hid/ishtp/dma-if.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212619" id="1212619" title="s390/pkey: zeroize key blobs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212701" id="1212701" title="9d2ccf00bddc powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212741" id="1212741" title="Missing crossreferences when building kernel-docs with python2 on SLE15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212835" id="1212835" title="make modules_install fails with kmod-30-4.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212838" id="1212838" title="VUL-0: CVE-2023-3389: kernel: use-after-free in io_uring subsystem can lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212842" id="1212842" title="VUL-0: CVE-2023-3090: kernel: heap out-of-bounds vulnerability in the ipvlan network driver could lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212861" id="1212861" title="signal/s390: Use force_sigsegv in default_trap_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212869" id="1212869" title="Regression: dom0: Bad FPU state detected at restore_fpregs_from_fpstate+0x42/0xa0, reinitializing FPU registers." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212892" id="1212892" title="s390/gmap: voluntarily schedule during key setting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" id="CVE-2023-3389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" id="CVE-2023-3090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" id="CVE-2023-3111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" id="CVE-2023-3212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" id="CVE-2023-3358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" id="CVE-2023-3357" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" id="CVE-2023-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" id="CVE-2023-1249" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1249" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35829" id="CVE-2023-35829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" id="CVE-2023-35788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" id="CVE-2023-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35823" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" id="CVE-2023-3161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" id="CVE-2023-21102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" id="CVE-2023-3141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" id="CVE-2023-1077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1077" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3931" id="PED-3931" title="https://jira.suse.com/browse/PED-3931" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-19253" id="SLE-19253" title="https://jira.suse.com/browse/SLE-19253" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605).
- CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
- CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495).
- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
- CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).

The following non-security bugs were fixed:

- Drop dvb-core fix patch due to a bug (bsc#1205758).
- Enable kernel modules bttv bt878 and snd-bt878 (jsc#PED-3931).
- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- Fix usrmerge error (boo#1211796).
- Generalize kernel-doc build requirements.
- Get module prefix from kmod (bsc#1212835).
- Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes).
- Revert &quot;mtd: rawnand: arasan: Prevent an unsupported configuration&quot; (git-fixes).
- Revert &quot;net: phy: dp83867: perform soft reset and retain established link&quot; (git-fixes).
- Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
- Update the Mellanox/Nvidia mlx5_core driver (jsc#SLE-19253).
- acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes).
- affs: initialize fsdata in affs_truncate() (git-fixes).
- alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes).
- alsa: hda/realtek: Add &quot;Intel Reference board&quot; and &quot;NUC 13&quot; SSID in the ALC256 (git-fixes).
- alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes).
- alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes).
- alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes).
- alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes).
- alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes).
- alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes).
- alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes).
- alsa: oss: avoid missing-prototype warnings (git-fixes).
- alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes).
- alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes).
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes).
- arm64: Add missing Set/Way CMO encodings (git-fixes).
- arm64: Always load shadow stack pointer directly from the task struct (git-fixes)
- arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes)
- arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes)
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes)
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes).
- arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes)
- arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes).
- arm: dts: vexpress: add missing cache properties (git-fixes).
- asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes).
- asoc: dwc: limit the number of overrun messages (git-fixes).
- asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes).
- asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes).
- asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes).
- asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes).
- asoc: mediatek: mt8173: Fix irq error path (git-fixes).
- asoc: nau8824: Add quirk to active-high jack-detect (git-fixes).
- asoc: simple-card: Add missing of_node_put() in case of error (git-fixes).
- asoc: soc-pcm: test if a BE can be prepared (git-fixes).
- asoc: ssm2602: Add workaround for playback distortions (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work (git-fixes).
- binfmt_elf: Take the mmap lock when walking the VMA list (bsc#1209039 CVE-2023-1249).
- bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes).
- bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes).
- bluetooth: hci_qca: fix debugfs registration (git-fixes).
- bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes).
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes).
- bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
- bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes).
- bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes)
- bpf, arm64: Clear prog-&gt;jited_len along prog-&gt;jited (git-fixes)
- bpf, arm64: Feed byte-offset into bpf line info (git-fixes)
- bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes)
- bpf: Add extra path pointer check to d_path helper (git-fixes).
- bpf: Fix UAF in task local storage (bsc#1212564).
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (bsc#1212051 CVE-2023-3111).
- bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes).
- bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes).
- can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes).
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes).
- can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes).
- can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes).
- can: length: fix bitstuffing count (git-fixes).
- can: length: fix description of the RRS field (git-fixes).
- can: length: make header self contained (git-fixes).
- ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540).
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563).
- cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561).
- cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563).
- clk: Fix memory leak in devm_clk_notifier_register() (git-fixes).
- clk: cdce925: check return value of kasprintf() (git-fixes).
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes).
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes).
- clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes).
- clk: keystone: sci-clk: check return value of kasprintf() (git-fixes).
- clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes).
- clk: si5341: check return value of {devm_}kasprintf() (git-fixes).
- clk: si5341: free unused memory on probe failure (git-fixes).
- clk: si5341: return error if one synth clock registration fails (git-fixes).
- clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes).
- clk: ti: clkctrl: check return value of kasprintf() (git-fixes).
- clk: vc5: check memory returned by kasprintf() (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes).
- crypto: marvell/cesa - Fix type mismatch warning (git-fixes).
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes).
- dmaengine: pl330: rename _start to prevent build error (git-fixes).
- drivers: meson: secure-pwrc: always enable DMA domain (git-fixes).
- drm/amd/display: Add logging for display MALL refresh setting (git-fixes).
- drm/amd/display: Add minimal pipe split transition state (git-fixes).
- drm/amd/display: Add wrapper to call planes and stream update (git-fixes).
- drm/amd/display: Explicitly specify update type per plane info change (git-fixes).
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes).
- drm/amd/display: Use dc_update_planes_and_stream (git-fixes).
- drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- drm/amd/display: fix the system hang while disable PSR (git-fixes).
- drm/amd/pm: Fix power context allocation in SMU13 (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes).
- drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes).
- drm/amdgpu: release gpu full access after &quot;amdgpu_device_ip_late_init&quot; (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes).
- drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes).
- drm/ast: Fix ARM compatibility (git-fixes).
- drm/bridge: tc358768: always enable HS video mode (git-fixes).
- drm/bridge: tc358768: fix PLL parameters computation (git-fixes).
- drm/bridge: tc358768: fix PLL target frequency (git-fixes).
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes).
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes).
- drm/exynos: vidi: fix a wrong error return (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes).
- drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes).
- drm/i915/selftests: Add some missing error propagation (git-fixes).
- drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes).
- drm/i915/selftests: Stop using kthread_stop() (git-fixes).
- drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes).
- drm/i915: Use 18 fast wake AUX sync len (git-fixes).
- drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes).
- drm/msm/dp: Free resources after unregistering them (git-fixes).
- drm/msm/dpu: correct MERGE_3D length (git-fixes).
- drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes).
- drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes).
- drm/msm: Be more shouty if per-process pgtables are not working (git-fixes).
- drm/msm: Set max segment size earlier (git-fixes).
- drm/nouveau/dp: check for NULL nv_connector-&gt;native_mode (git-fixes).
- drm/nouveau: add nv_encoder pointer check for NULL (git-fixes).
- drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes).
- drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes).
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes).
- drm/radeon: fix possible division-by-zero errors (git-fixes).
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes).
- drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes).
- drm/vram-helper: fix function names in vram helper doc (git-fixes).
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes).
- dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes).
- eeprom: at24: also select REGMAP (git-fixes).
- elf: correct note name comment (git-fixes).
- ext4: unconditionally enable the i_version counter (bsc#1211299).
- extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes).
- extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472) Backporting changes: 	* replace refcount_read() with atomic_read()
- fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489)
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes).
- fs/jfs: fix shift exponent db_agl2size negative (git-fixes).
- fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes).
- fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes).
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes).
- fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes).
- gfs2: Do not deref jdesc in evict (bsc#1212265 CVE-2023-3212).
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes).
- hfs/hfsplus: use WARN_ON for sanity check (git-fixes).
- hfs: Fix OOB Write in hfs_asc2mac (git-fixes).
- hfs: fix OOB Read in __hfs_brec_find (git-fixes).
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes).
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes).
- hid: amd_sfh: Add missing check for dma_alloc_coherent (bsc#1212605 CVE-2023-3357).
- hid: google: add jewel USB id (git-fixes).
- hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes).
- hid: wacom: Add error check to wacom_parse_and_register() (git-fixes).
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes).
- hwrng: imx-rngc - fix the timeout for init and self check (git-fixes).
- hwrng: st - keep clock enabled while hwrng is registered (git-fixes).
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes).
- iavf: remove mask from iavf_irq_enable_queues() (git-fixes).
- ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- ib/isert: Fix dead lock in ib_isert (git-fixes)
- ib/isert: Fix incorrect release of isert connection (git-fixes)
- ib/isert: Fix possible list corruption in CMA handler (git-fixes)
- ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes)
- ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes)
- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604).
- ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes).
- ice: Do not double unplug aux on peer initiated reset (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: Fix XDP memory leak when NIC is brought up and down (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom() (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes).
- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253).
- igb: fix bit_shift to be in [1..8] range (git-fixes).
- igb: fix nvm.ops.read() error handling (git-fixes).
- igc: Clean the TX buffer and TX descriptor ring (git-fixes).
- igc: Fix possible system crash when loading module (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes).
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448).
- init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448).
- init: Provide arch_cpu_finalize_init() (bsc#1212448).
- init: Remove check_bugs() leftovers (bsc#1212448).
- input: adxl34x - do not hardcode interrupt trigger type (git-fixes).
- input: drv260x - fix typo in register value define (git-fixes).
- input: drv260x - remove unused .reg_defaults (git-fixes).
- input: drv260x - sleep between polling GO bit (git-fixes).
- input: fix open count when closing inhibited device (git-fixes).
- input: psmouse - fix OOB access in Elantech protocol (git-fixes).
- input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes).
- input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes).
- integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes).
- io_uring: hold uring mutex around poll removal (bsc#1212838 CVE-2023-3389).
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb (bsc#1212842 CVE-2023-3090).
- irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes).
- jfs: Fix fortify moan in symlink (git-fixes).
- kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi
- kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base.
- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- kprobe: reverse kp-&gt;flags when arm_kprobe failed (git-fixes).
- kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes).
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes).
- kprobes: Forbid probing on trampoline and BPF code areas (git-fixes).
- kprobes: Prohibit probes in gate area (git-fixes).
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes).
- kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes).
- kvm: arm64: Do not hypercall before EL2 init (git-fixes)
- kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes)
- kvm: arm64: Save PSTATE early on exit (git-fixes)
- kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes)
- lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852).
- lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852).
- lpfc: Clean up SLI-4 CQE status handling (bsc#1211852).
- lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852).
- lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852).
- lpfc: Enhance congestion statistics collection (bsc#1211852).
- lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346).
- lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852).
- lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852).
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes).
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes).
- media: cec: core: do not set last_initiator if tx in progress (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes).
- memory: brcmstb_dpfe: fix testing array offset after use (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes).
- misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes).
- misc: pci_endpoint_test: Re-init completion for every test (git-fixes).
- mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253).
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes).
- mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410).
- mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
- mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes).
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes).
- net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253).
- net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253).
- net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253).
- net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253).
- net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253).
- net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253).
- net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253).
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253).
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253).
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253).
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253).
- net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253).
- net/mlx5: Do not use already freed action pointer (jsc#SLE-19253).
- net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253).
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253).
- net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253).
- net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253).
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253).
- net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253).
- net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253).
- net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253).
- net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253).
- net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253).
- net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253).
- net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253).
- net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253).
- net/mlx5: Fix steering rules cleanup (jsc#SLE-19253).
- net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253).
- net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253).
- net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253).
- net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253).
- net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253).
- net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253).
- net/mlx5: SF, Drain health before removing device (jsc#SLE-19253).
- net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253).
- net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253).
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253).
- net/mlx5: add IFC bits for bypassing port select flow table (git-fixes)
- net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253).
- net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253).
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- net/mlx5: fs, fail conflicting actions (jsc#SLE-19253).
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253).
- net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253).
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253).
- net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253).
- net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253).
- net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253).
- net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253).
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253).
- net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253).
- net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253).
- net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253).
- net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253).
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253).
- net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253).
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253).
- net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253).
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253).
- net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253).
- net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253).
- net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253).
- net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253).
- net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253).
- net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253).
- net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253).
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253).
- net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253).
- net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253).
- net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253).
- net/net_failover: fix txq exceeding warning (git-fixes).
- net/sched: fix initialization order when updating chain 0 head (git-fixes).
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes).
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes).
- net/sched: tcindex: Do not use perfect hashing (bsc#1210335 CVE-2023-1829).
- net: ena: Account for the number of processed bytes in XDP (git-fixes).
- net: ena: Do not register memory info on XDP exchange (git-fixes).
- net: ena: Fix rx_copybreak value update (git-fixes).
- net: ena: Fix toeplitz initial hash value (git-fixes).
- net: ena: Set default value for RX interrupt moderation (git-fixes).
- net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes).
- net: ena: Use bitmask to indicate packet redirection (git-fixes).
- net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes).
- net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes).
- net: hns3: fix reset delay time to avoid configuration timeout (git-fixes).
- net: hns3: fix sending pfc frames after reset issue (git-fixes).
- net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes).
- net: mlx5: eliminate anonymous module_init &amp; module_exit (jsc#SLE-19253).
- net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes).
- nfp: only report pause frame configuration for physical device (git-fixes).
- nilfs2: fix buffer corruption due to concurrent device reads (git-fixes).
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes).
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes).
- nouveau: fix client work fence deletion race (git-fixes).
- nvme-core: fix dev_pm_qos memleak (git-fixes).
- nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes).
- nvme-core: fix memory leak in dhchap_secret_store (git-fixes).
- nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes).
- nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes).
- ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes).
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes).
- ocfs2: fix non-auto defrag path not working issue (git-fixes).
- octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes).
- octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes).
- octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes).
- octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes).
- pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes).
- pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes).
- pci: Release resource invalidated by coalescing (git-fixes).
- pci: cadence: Fix Gen2 Link Retraining process (git-fixes).
- pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes).
- pci: ftpci100: Release the clock resources (git-fixes).
- pci: pciehp: Cancel bringup sequence if card is not present (git-fixes).
- pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes).
- pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes).
- pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes).
- pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes).
- pci: rockchip: Set address alignment for endpoint mode (git-fixes).
- pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes).
- pci: rockchip: Write PCI Device ID to correct register (git-fixes).
- pci: vmd: Reset VMD config register between soft reboots (git-fixes).
- pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes).
- pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes).
- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes).
- platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes).
- platform/x86: think-lmi: Correct NVME password handling (git-fixes).
- platform/x86: think-lmi: Correct System password interface (git-fixes).
- platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes).
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes).
- pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes).
- power: supply: Fix logic checking if system is running from battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: ab8500: Fix external_power_changed race (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race (git-fixes).
- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869).
- powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729).
- powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701).
- powerpc/purgatory: remove PGO flags (bsc#1194869).
- powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869).
- powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662).
- powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662).
- pstore/ram: Add check for kstrdup (git-fixes).
- qed/qede: Fix scheduling while atomic (git-fixes).
- radeon: avoid double free in ci_dpm_init() (git-fixes).
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes).
- rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- rdma/bnxt_re: Remove unnecessary checks (git-fixes)
- rdma/bnxt_re: Return directly without goto jumps (git-fixes)
- rdma/bnxt_re: Use unique names while registering interrupts (git-fixes)
- rdma/bnxt_re: wraparound mbox producer index (git-fixes)
- rdma/cma: Always set static rate to 0 for RoCE (git-fixes)
- rdma/hns: Fix hns_roce_table_get return value (git-fixes)
- rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes)
- rdma/mlx5: Fix affinity assignment (git-fixes)
- rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes)
- rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253).
- rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes)
- rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes)
- rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes)
- rdma/rtrs: Fix the last iu-&gt;buf leak in err path (git-fixes)
- rdma/rxe: Fix packet length checks (git-fixes)
- rdma/rxe: Fix ref count error in check_rkey() (git-fixes)
- rdma/rxe: Fix rxe_cq_post (git-fixes)
- rdma/rxe: Fix the error &quot;trying to register non-static key in rxe_cleanup_task&quot; (git-fixes)
- rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes)
- rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- rdma/rxe: Remove the unused variable obj (git-fixes)
- rdma/rxe: Removed unused name from rxe_task struct (git-fixes)
- rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes)
- rdma/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- regmap: Account for register length when chunking (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- regulator: Fix error checking for debugfs_create_dir (git-fixes).
- regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes).
- regulator: core: Streamline debugfs operations (git-fixes).
- regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes).
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- reiserfs: Add missing calls to reiserfs_security_free() (git-fixes).
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes).
- revert &quot;squashfs: harden sanity check in squashfs_read_xattr_id_table&quot; (git-fixes).
- rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE.
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes).
- s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592).
- s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892).
- s390/pkey: zeroize key blobs (git-fixes bsc#1212619).
- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes).
- scsi: stex: Fix gcc 13 warnings (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes).
- serial: atmel: do not enable IRQs prematurely (git-fixes).
- serial: lantiq: add missing interrupt ack (git-fixes).
- sfc: disable RXFCS and RXALL features by default (git-fixes).
- signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861).
- soc/fsl/qe: fix usb.c build errors (git-fixes).
- soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes).
- soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes).
- spi: dw: Round of n_bytes to power of 2 (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes).
- spi: lpspi: disable lpspi module irq in DMA mode (git-fixes).
- spi: qup: Request DMA before enabling clocks (git-fixes).
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes).
- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes).
- staging: octeon: delete my name from TODO contact (git-fixes).
- sunrpc: Clean up svc_deferred_class trace events (git-fixes).
- supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931)
- test_firmware: Use kstrtobool() instead of strtobool() (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes).
- test_firmware: prevent race conditions by a correct implementation of locking (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes).
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes).
- thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes).
- tls: Skip tls_append_frag on zero copy size (git-fixes).
- tools: bpftool: Remove invalid \' json escape (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- tracing/histograms: Allow variables to have some modifiers (git-fixes).
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes).
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes).
- tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350).
- tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes).
- tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes).
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: fix use-after-free on core driver unbind (git-fixes).
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes).
- usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes).
- usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes).
- usb: gadget: udc: fix NULL dereference in remove() (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes).
- usb: serial: option: add Quectel EM061KGL series (git-fixes).
- usb: typec: ucsi: Fix command cancellation (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
- vdpa/mlx5: Directly assign memory key (jsc#SLE-19253).
- vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253).
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253).
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253).
- vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes).
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: convert msecs to jiffies where needed (git-fixes).
- wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes).
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes).
- wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: cfg80211: rewrite merging of inherited elements (git-fixes).
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes).
- wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes).
- wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes).
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes).
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes).
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes).
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes).
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes).
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes).
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (git-fixes).
- x86/build: Avoid relocation information in final vmlinux (bsc#1187829).
- x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
- x86/fpu: Mark init functions __init (bsc#1212448).
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448).
- x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448).
- x86/init: Initialize signal frame size late (bsc#1212448).
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes).
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes).
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes).
- x86/microcode: Print previous version of microcode after reload (git-fixes).
- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- x86/mm: Initialize text poking earlier (bsc#1212448).
- x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- x86/xen: fix secondary processor fpu initialization (bsc#1212869).
- xfs: fix rm_offset flag handling in rmap keys (git-fixes).
- xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.69.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.69.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.69.1.150400.24.31.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.69.1.150400.24.31.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.69.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.69.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.69.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.69.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.69.1.150400.24.31.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.69.1.150400.24.31.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2882</id>
    <title>Security update for perl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689760327"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210999" id="1210999" title="VUL-0: CVE-2023-31484: perl: Perl's HTTP:Tiny has insecure TLS cert default, affecting CPAN.pm" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484" id="CVE-2023-31484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31484" type="cve"/>
    </references>
    <description>This update for perl fixes the following issues:


  - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).
</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="src" src="src/perl-5.26.1-150300.17.14.1.src.rpm">
          <filename>perl-5.26.1-150300.17.14.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="x86_64" src="x86_64/perl-5.26.1-150300.17.14.1.x86_64.rpm">
          <filename>perl-5.26.1-150300.17.14.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.14.1" arch="x86_64" src="x86_64/perl-base-5.26.1-150300.17.14.1.x86_64.rpm">
          <filename>perl-base-5.26.1-150300.17.14.1.x86_64.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="s390x" src="s390x/perl-5.26.1-150300.17.14.1.s390x.rpm">
          <filename>perl-5.26.1-150300.17.14.1.s390x.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.14.1" arch="s390x" src="s390x/perl-base-5.26.1-150300.17.14.1.s390x.rpm">
          <filename>perl-base-5.26.1-150300.17.14.1.s390x.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.14.1" arch="aarch64" src="aarch64/perl-5.26.1-150300.17.14.1.aarch64.rpm">
          <filename>perl-5.26.1-150300.17.14.1.aarch64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.14.1" arch="aarch64" src="aarch64/perl-base-5.26.1-150300.17.14.1.aarch64.rpm">
          <filename>perl-base-5.26.1-150300.17.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3169</id>
    <title>Recommended update for multipath-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691042487"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212440" id="1212440" title="no path re-add or path reinstated for the multipath maps" type="bugzilla"/>
    </references>
    <description>This update for multipath-tools fixes the following issues:

- libmultipath: Fix `dev_loss_tmo` even if not set in configuration (bsc#1212440)
</description>
    <pkglist>
      <collection>
        <package name="kpartx" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="x86_64" src="x86_64/kpartx-0.9.0+119+suse.308c007-150400.4.16.1.x86_64.rpm">
          <filename>kpartx-0.9.0+119+suse.308c007-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="x86_64" src="x86_64/libmpath0-0.9.0+119+suse.308c007-150400.4.16.1.x86_64.rpm">
          <filename>libmpath0-0.9.0+119+suse.308c007-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="src" src="src/multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.src.rpm">
          <filename>multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="x86_64" src="x86_64/multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.x86_64.rpm">
          <filename>multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="s390x" src="s390x/kpartx-0.9.0+119+suse.308c007-150400.4.16.1.s390x.rpm">
          <filename>kpartx-0.9.0+119+suse.308c007-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="s390x" src="s390x/libmpath0-0.9.0+119+suse.308c007-150400.4.16.1.s390x.rpm">
          <filename>libmpath0-0.9.0+119+suse.308c007-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="s390x" src="s390x/multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.s390x.rpm">
          <filename>multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="aarch64" src="aarch64/kpartx-0.9.0+119+suse.308c007-150400.4.16.1.aarch64.rpm">
          <filename>kpartx-0.9.0+119+suse.308c007-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="aarch64" src="aarch64/libmpath0-0.9.0+119+suse.308c007-150400.4.16.1.aarch64.rpm">
          <filename>libmpath0-0.9.0+119+suse.308c007-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+119+suse.308c007" release="150400.4.16.1" arch="aarch64" src="aarch64/multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.aarch64.rpm">
          <filename>multipath-tools-0.9.0+119+suse.308c007-150400.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3170</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691042596"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210799" id="1210799" title="L3: After moving SLES 15 SP3 system to another host in Azure, Boot fails in grub while booting to Grub 2.02 instead of 2.04" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201399" id="1201399" title="update-bootloader does not update the EFI grub.cfg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208003" id="1208003" title="Support EFI 32/64 bit mixed mode (Was: installation images do not support 32-bit EFI)" type="bugzilla"/>
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- Use signed grub EFI binary when updating grub in default EFI location (bsc#1210799)                                                                                                                                                                           
- UEFI: update also default location, if it is controlled by SUSE (bsc#1210799, bsc#1201399)                                                                                                                                                                    
- Use `fw_platform_size` to distinguish between 32 bit and 64 bit UEFI platforms (bsc#1208003)                                                                                                                                                                  
- Add basic support for systemd-boot  
</description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="0.944" release="150400.3.6.1" arch="src" src="src/perl-Bootloader-0.944-150400.3.6.1.src.rpm">
          <filename>perl-Bootloader-0.944-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.944" release="150400.3.6.1" arch="x86_64" src="x86_64/perl-Bootloader-0.944-150400.3.6.1.x86_64.rpm">
          <filename>perl-Bootloader-0.944-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.944" release="150400.3.6.1" arch="s390x" src="s390x/perl-Bootloader-0.944-150400.3.6.1.s390x.rpm">
          <filename>perl-Bootloader-0.944-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.944" release="150400.3.6.1" arch="aarch64" src="aarch64/perl-Bootloader-0.944-150400.3.6.1.aarch64.rpm">
          <filename>perl-Bootloader-0.944-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2803</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1688998285"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187829" id="1187829" title="L3 Question:  .rela.debug_info - size larger than .debug_info?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212051" id="1212051" title="VUL-0: CVE-2023-3111: kernel: Use after free in prepare_to_relocate in fs/btrfs/relocation.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212265" id="1212265" title="VUL-0: CVE-2023-3212: kernel: NULL pointer dereference in gfs2_evict_inode() in fs/gfs2/super.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212603" id="1212603" title="ISST: SLES15SP5: ritzlp57: LPM failed with HSCLA2CF and HSCL365C and LPAR crashed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212605" id="1212605" title="VUL-0: CVE-2023-3357: kernel-source,kernel-source-azure,kernel-source-rt: NULL Pointer Dereference in drivers/hid/amd-sfh-hid/amd_sfh_client.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212606" id="1212606" title="VUL-0: CVE-2023-3358: kernel-source-azure,kernel-source-rt,kernel-source: NULL Pointer Dereference in drivers/hid/intel-ish-hid/ishtp/dma-if.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212619" id="1212619" title="s390/pkey: zeroize key blobs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212701" id="1212701" title="9d2ccf00bddc powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212741" id="1212741" title="Missing crossreferences when building kernel-docs with python2 on SLE15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212835" id="1212835" title="make modules_install fails with kmod-30-4.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212838" id="1212838" title="VUL-0: CVE-2023-3389: kernel: use-after-free in io_uring subsystem can lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212842" id="1212842" title="VUL-0: CVE-2023-3090: kernel: heap out-of-bounds vulnerability in the ipvlan network driver could lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212861" id="1212861" title="signal/s390: Use force_sigsegv in default_trap_handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212869" id="1212869" title="Regression: dom0: Bad FPU state detected at restore_fpregs_from_fpstate+0x42/0xa0, reinitializing FPU registers." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212892" id="1212892" title="s390/gmap: voluntarily schedule during key setting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" id="CVE-2023-3389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" id="CVE-2023-3090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" id="CVE-2023-3111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3111" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" id="CVE-2023-3212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" id="CVE-2023-3358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" id="CVE-2023-3357" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3357" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-19253" id="SLE-19253" title="https://jira.suse.com/browse/SLE-19253" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605).

The following non-security bugs were fixed:

- Get module prefix from kmod (bsc#1212835).
- Revert &quot;mtd: rawnand: arasan: Prevent an unsupported configuration&quot; (git-fixes).
- Revert &quot;net: phy: dp83867: perform soft reset and retain established link&quot; (git-fixes).
- alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes).
- alsa: hda/realtek: Add &quot;Intel Reference board&quot; and &quot;NUC 13&quot; SSID in the ALC256 (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes).
- alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes).
- alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes).
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes).
- arm64: Add missing Set/Way CMO encodings (git-fixes).
- arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes)
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes)
- arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes).
- asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes).
- asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes).
- asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes).
- asoc: mediatek: mt8173: Fix irq error path (git-fixes).
- asoc: nau8824: Add quirk to active-high jack-detect (git-fixes).
- asoc: simple-card: Add missing of_node_put() in case of error (git-fixes).
- bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes).
- bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes).
- can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes).
- can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes).
- can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes).
- can: length: fix bitstuffing count (git-fixes).
- can: length: fix description of the RRS field (git-fixes).
- can: length: make header self contained (git-fixes).
- clk: Fix memory leak in devm_clk_notifier_register() (git-fixes).
- clk: cdce925: check return value of kasprintf() (git-fixes).
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes).
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes).
- clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes).
- clk: keystone: sci-clk: check return value of kasprintf() (git-fixes).
- clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes).
- clk: si5341: check return value of {devm_}kasprintf() (git-fixes).
- clk: si5341: free unused memory on probe failure (git-fixes).
- clk: si5341: return error if one synth clock registration fails (git-fixes).
- clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes).
- clk: ti: clkctrl: check return value of kasprintf() (git-fixes).
- clk: vc5: check memory returned by kasprintf() (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes).
- crypto: marvell/cesa - Fix type mismatch warning (git-fixes).
- crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes).
- drivers: meson: secure-pwrc: always enable DMA domain (git-fixes).
- drm/amd/display: Add logging for display MALL refresh setting (git-fixes).
- drm/amd/display: Add minimal pipe split transition state (git-fixes).
- drm/amd/display: Add wrapper to call planes and stream update (git-fixes).
- drm/amd/display: Explicitly specify update type per plane info change (git-fixes).
- drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes).
- drm/amd/display: Use dc_update_planes_and_stream (git-fixes).
- drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes).
- drm/amd/display: fix the system hang while disable PSR (git-fixes).
- drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes).
- drm/bridge: tc358768: always enable HS video mode (git-fixes).
- drm/bridge: tc358768: fix PLL parameters computation (git-fixes).
- drm/bridge: tc358768: fix PLL target frequency (git-fixes).
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes).
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes).
- drm/exynos: vidi: fix a wrong error return (git-fixes).
- drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes).
- drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes).
- drm/msm/dp: Free resources after unregistering them (git-fixes).
- drm/msm/dpu: correct MERGE_3D length (git-fixes).
- drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes).
- drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes).
- drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes).
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes).
- drm/radeon: fix possible division-by-zero errors (git-fixes).
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes).
- drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes).
- drm/vram-helper: fix function names in vram helper doc (git-fixes).
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes).
- elf: correct note name comment (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes).
- extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes).
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes).
- hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes).
- hid: wacom: Add error check to wacom_parse_and_register() (git-fixes).
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes).
- hwrng: imx-rngc - fix the timeout for init and self check (git-fixes).
- hwrng: st - keep clock enabled while hwrng is registered (git-fixes).
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes).
- ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- ib/isert: Fix dead lock in ib_isert (git-fixes)
- ib/isert: Fix incorrect release of isert connection (git-fixes)
- ib/isert: Fix possible list corruption in CMA handler (git-fixes)
- ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes)
- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604).
- ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes).
- ice: Do not double unplug aux on peer initiated reset (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: Fix XDP memory leak when NIC is brought up and down (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom() (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes).
- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253).
- iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes).
- input: adxl34x - do not hardcode interrupt trigger type (git-fixes).
- input: drv260x - fix typo in register value define (git-fixes).
- input: drv260x - remove unused .reg_defaults (git-fixes).
- input: drv260x - sleep between polling GO bit (git-fixes).
- input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes).
- integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes).
- irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes).
- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes).
- media: cec: core: do not set last_initiator if tx in progress (git-fixes).
- memory: brcmstb_dpfe: fix testing array offset after use (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes).
- misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes).
- misc: pci_endpoint_test: Re-init completion for every test (git-fixes).
- mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes).
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes).
- net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253).
- net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253).
- net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253).
- net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253).
- net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253).
- net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253).
- net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253).
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253).
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253).
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253).
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253).
- net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253).
- net/mlx5: Do not use already freed action pointer (jsc#SLE-19253).
- net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253).
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253).
- net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253).
- net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253).
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253).
- net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253).
- net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253).
- net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253).
- net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253).
- net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253).
- net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253).
- net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253).
- net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253).
- net/mlx5: Fix steering rules cleanup (jsc#SLE-19253).
- net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253).
- net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253).
- net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253).
- net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253).
- net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253).
- net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253).
- net/mlx5: SF, Drain health before removing device (jsc#SLE-19253).
- net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253).
- net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253).
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253).
- net/mlx5: add IFC bits for bypassing port select flow table (git-fixes)
- net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253).
- net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253).
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- net/mlx5: fs, fail conflicting actions (jsc#SLE-19253).
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253).
- net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253).
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253).
- net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253).
- net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253).
- net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253).
- net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253).
- net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253).
- net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253).
- net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253).
- net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253).
- net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253).
- net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253).
- net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253).
- net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253).
- net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253).
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253).
- net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253).
- net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253).
- net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253).
- net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253).
- net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253).
- net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253).
- net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
- net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253).
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253).
- net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253).
- net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253).
- net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253).
- net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253).
- net: mlx5: eliminate anonymous module_init &amp; module_exit (jsc#SLE-19253).
- nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes).
- nilfs2: fix buffer corruption due to concurrent device reads (git-fixes).
- nvme-core: fix dev_pm_qos memleak (git-fixes).
- nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes).
- nvme-core: fix memory leak in dhchap_secret_store (git-fixes).
- nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes).
- nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes).
- ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes).
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes).
- ocfs2: fix non-auto defrag path not working issue (git-fixes).
- pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes).
- pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes).
- pci: Release resource invalidated by coalescing (git-fixes).
- pci: cadence: Fix Gen2 Link Retraining process (git-fixes).
- pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes).
- pci: ftpci100: Release the clock resources (git-fixes).
- pci: pciehp: Cancel bringup sequence if card is not present (git-fixes).
- pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes).
- pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes).
- pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes).
- pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes).
- pci: rockchip: Set address alignment for endpoint mode (git-fixes).
- pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes).
- pci: rockchip: Write PCI Device ID to correct register (git-fixes).
- pci: vmd: Reset VMD config register between soft reboots (git-fixes).
- pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes).
- pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes).
- pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes).
- platform/x86: think-lmi: Correct NVME password handling (git-fixes).
- platform/x86: think-lmi: Correct System password interface (git-fixes).
- platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes).
- platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes).
- pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes).
- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701).
- powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869).
- pstore/ram: Add check for kstrdup (git-fixes).
- radeon: avoid double free in ci_dpm_init() (git-fixes).
- rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- rdma/bnxt_re: Remove unnecessary checks (git-fixes)
- rdma/bnxt_re: Return directly without goto jumps (git-fixes)
- rdma/bnxt_re: Use unique names while registering interrupts (git-fixes)
- rdma/bnxt_re: wraparound mbox producer index (git-fixes)
- rdma/cma: Always set static rate to 0 for RoCE (git-fixes)
- rdma/hns: Fix hns_roce_table_get return value (git-fixes)
- rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes)
- rdma/mlx5: Fix affinity assignment (git-fixes)
- rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes)
- rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253).
- rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes)
- rdma/rtrs: Fix the last iu-&gt;buf leak in err path (git-fixes)
- rdma/rxe: Fix packet length checks (git-fixes)
- rdma/rxe: Fix ref count error in check_rkey() (git-fixes)
- rdma/rxe: Fix rxe_cq_post (git-fixes)
- rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes)
- rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- rdma/rxe: Remove the unused variable obj (git-fixes)
- rdma/rxe: Removed unused name from rxe_task struct (git-fixes)
- rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes)
- rdma/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes).
- regulator: core: Streamline debugfs operations (git-fixes).
- regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes).
- rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE.
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes).
- s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892).
- s390/pkey: zeroize key blobs (git-fixes bsc#1212619).
- serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes).
- serial: atmel: do not enable IRQs prematurely (git-fixes).
- signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861).
- soc/fsl/qe: fix usb.c build errors (git-fixes).
- soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes).
- soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes).
- spi: dw: Round of n_bytes to power of 2 (git-fixes).
- spi: lpspi: disable lpspi module irq in DMA mode (git-fixes).
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes).
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes).
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes).
- usb: gadget: udc: fix NULL dereference in remove() (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835). 
- vdpa/mlx5: Directly assign memory key (jsc#SLE-19253).
- vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253).
- vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253).
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253).
- vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes).
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: convert msecs to jiffies where needed (git-fixes).
- wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes).
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes).
- wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes).
- wifi: cfg80211: rewrite merging of inherited elements (git-fixes).
- wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes).
- wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes).
- wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes).
- wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes).
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes).
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes).
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes).
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes).
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes).
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (git-fixes).
- x86/build: Avoid relocation information in final vmlinux (bsc#1187829).
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes).
- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- x86/xen: fix secondary processor fpu initialization (bsc#1212869).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.40.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.40.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.40.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.40.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.40.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2814</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689192500"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202118" id="1202118" title="Add Requires: libsoftokn3 to MozillaFirefox.spec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185116" id="1185116" title="merge back hmac files (was: upgrade of libopenssl1_1 and libopenssl1_1-hmac fails with FIPS selftest failure error)" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

mozilla-nss was updated to NSS 3.90:

* Add a constant time select function
* Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
* output early build errors by default
* Update the technical constraints for KamuSM
* Add BJCA Global Root CA1 and CA2 root certificates
* Enable default UBSan Checks
* Add explicit handling of zero length records
* Tidy up DTLS ACK Error Handling Path
* Refactor zero length record tests
* Fix compiler warning via correct assert
* run linux tests on nss-t/t-linux-xlarge-gcp
* In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
* Fix reading raw negative numbers
* Repairing unreachable code in clang built with gyp
* Integrate Vale Curve25519
* Removing unused flags for Hacl*
* Adding a better error message
* Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
* Fall back to the softokn when writing certificate trust
* FIPS-104-3 requires we restart post programmatically
* cmd/ecperf: fix dangling pointer warning on gcc 13
* Update ACVP dockerfile for compatibility with debian package changes
* Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
* Removed deprecated sprintf function and replaced with snprintf
* fix rst warnings in nss doc
* Fix incorrect pygment style
* Change GYP directive to apply across platforms
* Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag

- Merge the libfreebl3-hmac and libsoftokn3-hmac packages into the respective libraries. (bsc#1185116)

update to NSS 3.89.1

* Update the technical constraints for KamuSM.
* Add BJCA Global Root CA1 and CA2 root certificates.

update to NSS 3.89

* revert freebl/softoken RSA_MIN_MODULUS_BITS increase
* PR_STATIC_ASSERT is cursed
* Need to add policy control to keys lengths for signatures
* Fix unreachable code warning in fuzz builds
* Fix various compiler warnings in NSS
* Enable various compiler warnings for clang builds
* set PORT error after sftk_HMACCmp failure
* Need to add policy control to keys lengths for signatures
* remove data length assertion in sec_PKCS7Decrypt
* Make high tag number assertion failure an error
* CKM_SHA384_KEY_DERIVATION correction maximum key length from 284 to 384
* Tolerate certificate_authorities xtn in ClientHello
* Fix build failure on Windows
* migrate Win 2012 tasks to Azure
* fix title length in doc
* Add interop tests for HRR and PSK to GREASE suite
* Add presence/absence tests for TLS GREASE
* Correct addition of GREASE value to ALPN xtn
* CH extension permutation
* TLS GREASE (RFC8701)
* improve handling of unknown PKCS#12 safe bag types
* use a different treeherder symbol for each docker image build task
* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag
* build failure while implicitly casting SECStatus to PRUInt32

update to NSS 3.88.1

* improve handling of unknown PKCS#12 safe bag types

update to NSS 3.88

* remove nested table in rst doc
* Export NSS_CMSSignerInfo_GetDigestAlgTag.
* build failure while implicitly casting SECStatus to PRUInt32
* Add check for ClientHello SID max length
* Added EarlyData ALPN test support to BoGo shim
* ECH client - Discard resumption TLS &lt; 1.3 Session(IDs|Tickets) if ECH configs are setup
* On HRR skip PSK incompatible with negotiated ciphersuites hash algorithm
* ECH client: Send ech_required alert on server negotiating TLS 1.2. Fixed misleading Gtest, enabled corresponding BoGo test
* Added Bogo ECH rejection test support
* Added ECH 0Rtt support to BoGo shim
* RSA OAEP Wycheproof JSON
* RSA decrypt Wycheproof JSON
* ECDSA Wycheproof JSON
* ECDH Wycheproof JSON
* PKCS#1v1.5 wycheproof json
* Use X25519 wycheproof json
* Move scripts to python3
* Properly link FuzzingEngine for oss-fuzz.
* Extending RSA-PSS bltest test coverage (Adding SHA-256 and SHA-384)
* NSS needs to move off of DSA for integrity checks
* Add initial testing with ACVP vector sets using acvp-rust
* Don't clone libFuzzer, rely on clang instead

update to NSS 3.87

* NULL password encoding incorrect
* Fix rng stub signature for fuzzing builds
* Updating the compiler parsing for build
* Modification of supported compilers
* tstclnt crashes when accessing gnutls server without a user cert in the database.
* Add configuration option to enable source-based coverage sanitizer
* Update ECCKiila generated files.
* Add support for the LoongArch 64-bit architecture
* add checks for zero-length RSA modulus to avoid memory errors and failed assertions later
* Additional zero-length RSA modulus checks

update to NSS 3.86

* conscious language removal in NSS
* Set nssckbi version number to 2.60
* Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
* Remove Staat der Nederlanden EV Root CA from NSS
* Remove EC-ACC root cert from NSS
* Remove SwissSign Platinum CA - G2 from NSS
* Remove Network Solutions Certificate Authority
* compress docker image artifact with zstd
* Migrate nss from AWS to GCP
* Enable static builds in the CI
* Removing SAW docker from the NSS build system
* Initialising variables in the rsa blinding code
* Implementation of the double-signing of the message for ECDSA
* Adding exponent blinding for RSA.

update to NSS 3.85

* Modification of the primes.c and dhe-params.c in order to have better looking tables
* Update zlib in NSS to 1.2.13
* Skip building modutil and shlibsign when building in Firefox
* Use __STDC_VERSION__ rather than __STDC__ as a guard
* Remove redundant variable definitions in lowhashtest
* Add note about python executable to build instructions.

update to NSS 3.84

* Bump minimum NSPR version to 4.35
* Add a flag to disable building libnssckbi.

update to NSS 3.83

* Remove set-but-unused variables from SEC_PKCS12DecoderValidateBags
* Set nssckbi version number to 2.58
* Add two SECOM root certificates to NSS
* Add two DigitalSign root certificates to NSS
* Remove Camerfirma Global Chambersign Root from NSS
* Added bug reference and description to disabled UnsolicitedServerNameAck bogo ECH test
* Removed skipping of ECH on equality of private and public server name
* Added comment and bug reference to ECHRandomHRRExtension bogo test
* Added Bogo shim client HRR test support. Fixed overwriting of CHInner.random on HRR
* Added check for server only sending ECH extension
	with retry configs in EncryptedExtensions and if not
	accepting ECH. Changed config setting behavior to
	skip configs with unsupported mandatory extensions
	instead of failing
* Added ECH client support to BoGo shim. Changed
	CHInner creation to skip TLS 1.2 only extensions to
	comply with BoGo
* Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs
* Update BoGo tests to recent BoringSSL version
* Bump minimum NSPR version to 4.34.1

update to NSS 3.82

* check for null template in sec_asn1{d,e}_push_state
* QuickDER: Forbid NULL tags with non-zero length
* Initialize local variables in TlsConnectTestBase::ConnectAndCheckCipherSuite
* Cast the result of GetProcAddress
* pk11wrap: Tighten certificate lookup based on PKCS #11 URI.

update to NSS 3.81

* Enable aarch64 hardware crypto support on OpenBSD
* make NSS_SecureMemcmp 0/1 valued
* Add no_application_protocol alert handler and test client error code is set
* Gracefully handle null nickname in CERT_GetCertNicknameWithValidity
* required for Firefox 104

- raised NSPR requirement to 4.34.1

- changing some Requires from (pre) to generic as (pre) is not sufficient (bsc#1202118)

update to NSS 3.80

* Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
* Add support for asynchronous client auth hooks.
* nss-policy-check: make unknown keyword check optional.
* GatherBuffer: Reduced plaintext buffer allocations
	by allocating it on initialization. Replaced
	redundant code with assert. Debug builds: Added
	buffer freeing/allocation for each record.
* Mark 3.79 as an ESR release.
* Bump nssckbi version number for June.
* Remove Hellenic Academic 2011 Root.
* Add E-Tugra Roots.
* Add Certainly Roots.
* Add DigitCert Roots.
* Protect SFTKSlot needLogin with slotLock.
* Compare signature and signatureAlgorithm fields in legacy certificate verifier.
* Uninitialized value in cert_VerifyCertChainOld.
* Unchecked return code in sec_DecodeSigAlg.
* Uninitialized value in cert_ComputeCertType.
* Avoid data race on primary password change.
* Replace ppc64 dcbzl intrinisic.
* Allow LDFLAGS override in makefile builds.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/libfreebl3-3.90-150400.3.32.1.x86_64.rpm">
          <filename>libfreebl3-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/libsoftokn3-3.90-150400.3.32.1.x86_64.rpm">
          <filename>libsoftokn3-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="src" src="src/mozilla-nss-3.90-150400.3.32.1.src.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/mozilla-nss-3.90-150400.3.32.1.x86_64.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.90-150400.3.32.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90" release="150400.3.32.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.90-150400.3.32.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.90-150400.3.32.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90" release="150400.3.32.1" arch="s390x" src="s390x/libfreebl3-3.90-150400.3.32.1.s390x.rpm">
          <filename>libfreebl3-3.90-150400.3.32.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90" release="150400.3.32.1" arch="s390x" src="s390x/libsoftokn3-3.90-150400.3.32.1.s390x.rpm">
          <filename>libsoftokn3-3.90-150400.3.32.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="s390x" src="s390x/mozilla-nss-3.90-150400.3.32.1.s390x.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90" release="150400.3.32.1" arch="s390x" src="s390x/mozilla-nss-certs-3.90-150400.3.32.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.90-150400.3.32.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90" release="150400.3.32.1" arch="s390x" src="s390x/mozilla-nss-tools-3.90-150400.3.32.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.90-150400.3.32.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/libfreebl3-3.90-150400.3.32.1.aarch64.rpm">
          <filename>libfreebl3-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/libsoftokn3-3.90-150400.3.32.1.aarch64.rpm">
          <filename>libsoftokn3-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/mozilla-nss-3.90-150400.3.32.1.aarch64.rpm">
          <filename>mozilla-nss-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.90-150400.3.32.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90" release="150400.3.32.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.90-150400.3.32.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.90-150400.3.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3118</id>
    <title>Recommended update for hwinfo</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690948696"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212756" id="1212756" title="AutoYaST fails to configure samba-client and freezes" type="bugzilla"/>
    </references>
    <description>This update for hwinfo fixes the following issues:

- Avoid linking problems with libsamba (bsc#1212756)
- Update to version 21.85
</description>
    <pkglist>
      <collection>
        <package name="hwinfo" epoch="0" version="21.85" release="150400.3.12.1" arch="src" src="src/hwinfo-21.85-150400.3.12.1.src.rpm">
          <filename>hwinfo-21.85-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.85" release="150400.3.12.1" arch="x86_64" src="x86_64/hwinfo-21.85-150400.3.12.1.x86_64.rpm">
          <filename>hwinfo-21.85-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.85" release="150400.3.12.1" arch="s390x" src="s390x/hwinfo-21.85-150400.3.12.1.s390x.rpm">
          <filename>hwinfo-21.85-150400.3.12.1.s390x.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.85" release="150400.3.12.1" arch="aarch64" src="aarch64/hwinfo-21.85-150400.3.12.1.aarch64.rpm">
          <filename>hwinfo-21.85-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3301</id>
    <title>Security update for libyajl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691990755"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33460" id="CVE-2023-33460" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33460" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212928" id="1212928" title="VUL-0: CVE-2023-33460: libyajl: There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash." type="bugzilla"/>
    </references>
    <description>This update for libyajl fixes the following issues:

  - CVE-2023-33460: Fixed memory leak which could cause out-of-memory in server (bsc#1212928).
</description>
    <pkglist>
      <collection>
        <package name="libyajl" epoch="0" version="2.1.0" release="150000.4.6.1" arch="src" src="src/libyajl-2.1.0-150000.4.6.1.src.rpm">
          <filename>libyajl-2.1.0-150000.4.6.1.src.rpm</filename>
        </package>
        <package name="libyajl2" epoch="0" version="2.1.0" release="150000.4.6.1" arch="x86_64" src="x86_64/libyajl2-2.1.0-150000.4.6.1.x86_64.rpm">
          <filename>libyajl2-2.1.0-150000.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="libyajl2" epoch="0" version="2.1.0" release="150000.4.6.1" arch="s390x" src="s390x/libyajl2-2.1.0-150000.4.6.1.s390x.rpm">
          <filename>libyajl2-2.1.0-150000.4.6.1.s390x.rpm</filename>
        </package>
        <package name="libyajl2" epoch="0" version="2.1.0" release="150000.4.6.1" arch="aarch64" src="aarch64/libyajl2-2.1.0-150000.4.6.1.aarch64.rpm">
          <filename>libyajl2-2.1.0-150000.4.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3369</id>
    <title>Security update for python-configobj</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692695866"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26112" id="CVE-2023-26112" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26112" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210070" id="1210070" title="VUL-0: CVE-2023-26112: python-configobj: python-configobj: Regular expression denial of service exists in ./src/configobj/validate.py" type="bugzilla"/>
    </references>
    <description>This update for python-configobj fixes the following issues:
  
- CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py (bsc#1210070).
</description>
    <pkglist>
      <collection>
        <package name="python-configobj" epoch="0" version="5.0.6" release="150000.3.3.1" arch="src" src="src/python-configobj-5.0.6-150000.3.3.1.src.rpm">
          <filename>python-configobj-5.0.6-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-configobj" epoch="0" version="5.0.6" release="150000.3.3.1" arch="noarch" src="noarch/python3-configobj-5.0.6-150000.3.3.1.noarch.rpm">
          <filename>python3-configobj-5.0.6-150000.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-81</id>
    <title>Recommended update for ceph</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704961279"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201088" id="1201088" title="GCC 13: ceph package fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210153" id="1210153" title="SES 7.1: upgrades with 3 or more mgr daemons can get stuck in endless loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211090" id="1211090" title="ALP Workbench: ceph fails to build on s390x" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210314" id="1210314" title="Cephadm stuck on update — ref:_00D1igLOd._5005qOFSEf:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210719" id="1210719" title="L3: Podman by default adds &quot;host.containers.internal&quot; in the hosts file, resulting in iSCSI GWs using this fqdn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209621" id="1209621" title="L3: NFS-Ganesha wit haproxy does not fail over if the active node disappears — ref:_00D1igLOd._5005qNwUep:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210944" id="1210944" title="Ceph Build failure against Python 3.10/Python 3.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210784" id="1210784" title="L3: Dashboard SSO error: AttributeError: 'str' object has no attribute 'decode'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208820" id="1208820" title="emulate_legacy_capacity must be disabled for RBD_FEATURE_OBJECT_MAP images" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199880" id="1199880" title="ceph -s warns &quot;no active mgr&quot;, but ceph-mgr processes are running — ref:_00D1igLOd._5005q5mxs6:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210243" id="1210243" title="SES 7.1: regression in ceph-volume activate" type="bugzilla"/>
    </references>
    <description>This update for ceph fixes the following issues:

- Fix FTBFS on gcc 13 (bsc#1201088)
- Fix FTBFS on s390x (bsc#1211090)
- ceph-volume: Fix regression in activate (bsc#1210243, bsc#1210314)
- cephadm: Fix NFS haproxy failover if active node disappears (bsc#1209621)
- cephadm: Mount host /etc/hosts for daemon containers in podman deployments (bsc#1210719)
- cmake: Patch boost source to support python 3.11 (bsc#1210944)
- mgr: Don't dump global config holding gil (bsc#1199880)
- mgr/cephadm: Fix handling of mgr upgrades with 3 or more mgrs (bsc#1210153)
- mgr/dashboard: allow to pass controls on iscsi disk create (bsc#1208820)
- mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode' (bsc#1210784)
</description>
    <pkglist>
      <collection>
        <package name="ceph" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="src" src="src/ceph-16.2.13.66+g54799ee0666-150400.3.9.2.src.rpm">
          <filename>ceph-16.2.13.66+g54799ee0666-150400.3.9.2.src.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="x86_64" src="x86_64/librados2-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm">
          <filename>librados2-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="x86_64" src="x86_64/librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm">
          <filename>librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.x86_64.rpm</filename>
        </package>
        <package name="librados2" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="aarch64" src="aarch64/librados2-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm">
          <filename>librados2-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm</filename>
        </package>
        <package name="librbd1" epoch="0" version="16.2.13.66+g54799ee0666" release="150400.3.9.2" arch="aarch64" src="aarch64/librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm">
          <filename>librbd1-16.2.13.66+g54799ee0666-150400.3.9.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2891</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689794099"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213237" id="1213237" title="VUL-0: EMBARGOED: CVE-2023-32001: curl: fopen race condition" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32001" id="CVE-2023-32001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32001" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-32001: Fixed TOCTOU race condition (bsc#1213237).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="src" src="src/curl-8.0.1-150400.5.26.1.src.rpm">
          <filename>curl-8.0.1-150400.5.26.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.26.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.26.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.26.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.26.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.26.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.26.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.26.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.26.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.26.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.26.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.26.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.26.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.26.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.26.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.26.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3148</id>
    <title>Recommended update for firewalld</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690962648"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212974" id="1212974" title="Firewalld does not accept IPv4 network mask in full form" type="bugzilla"/>
    </references>
    <description>This update for firewalld fixes the following issues:

- Firewalld does not accept IPv4 network mask in full form (bsc#1212974)
</description>
    <pkglist>
      <collection>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.12.1" arch="noarch" src="noarch/firewalld-0.9.3-150400.8.12.1.noarch.rpm">
          <filename>firewalld-0.9.3-150400.8.12.1.noarch.rpm</filename>
        </package>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.12.1" arch="src" src="src/firewalld-0.9.3-150400.8.12.1.src.rpm">
          <filename>firewalld-0.9.3-150400.8.12.1.src.rpm</filename>
        </package>
        <package name="python3-firewall" epoch="0" version="0.9.3" release="150400.8.12.1" arch="noarch" src="noarch/python3-firewall-0.9.3-150400.8.12.1.noarch.rpm">
          <filename>python3-firewall-0.9.3-150400.8.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3286</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691742797"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194900" id="1194900" title="util-linux: libblkid: reopen floppy without O_NONBLOCK" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194038" id="1194038" title="utils-linux rpmbuild %checks fail when @ in the directory path" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- Fix blkid for floppy drives (bsc#1194900)
- Fix rpmbuild %checks fail when @ in the directory path (bsc#1194038)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.20.1" arch="src" src="src/util-linux-2.37.2-150400.8.20.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.20.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.20.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.20.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.20.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.20.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.20.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.20.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/libblkid1-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>libblkid1-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/libfdisk1-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>libfdisk1-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/libmount1-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>libmount1-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/libsmartcols1-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/libuuid1-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>libuuid1-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/util-linux-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>util-linux-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.20.1" arch="s390x" src="s390x/util-linux-systemd-2.37.2-150400.8.20.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.20.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.20.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.20.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2989</id>
    <title>Security update for conmon</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690382058"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209307" id="1209307" title="VUL-0: conmon: build against EOL go1.18" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208737" id="1208737" title="RT image - podman -  toolbox unable to start - internal libpod error" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

  conmon was updated to version 2.1.7:

  - Bumped go version to 1.19 (bsc#1209307).

  Bugfixes:

  - Fixed leaking symbolic links in the opt_socket_path directory.
  - Fixed cgroup oom issues (bsc#1208737).
  - Fixed OOM watcher for cgroupv2 `oom_kill` events.


</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="src" src="src/conmon-2.1.7-150400.3.11.1.src.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="x86_64" src="x86_64/conmon-2.1.7-150400.3.11.1.x86_64.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="s390x" src="s390x/conmon-2.1.7-150400.3.11.1.s390x.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.11.1" arch="aarch64" src="aarch64/conmon-2.1.7-150400.3.11.1.aarch64.rpm">
          <filename>conmon-2.1.7-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2930</id>
    <title>Security update for samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689927025"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2127" id="CVE-2022-2127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34967" id="CVE-2023-34967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34967" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34966" id="CVE-2023-34966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34968" id="CVE-2023-34968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34968" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213174" id="1213174" title="VUL-0: EMBARGOED: CVE-2022-2127: samba: Out-Of-Bounds read in winbind AUTH_CRAP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213173" id="1213173" title="VUL-0: EMBARGOED: CVE-2023-34966: samba: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213172" id="1213172" title="VUL-0: EMBARGOED: CVE-2023-34967: samba: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213171" id="1213171" title="VUL-0: EMBARGOED: CVE-2023-34968: samba: Spotlight server-side Share Path Disclosure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213384" id="1213384" title="Jul-2023 update of windows 10/11 breaks trust relationship" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

  - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174).
  - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173).
  - CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172).
  - CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171).


  Bugfixes:

  - Fixed trust relationship failure (bsc#1213384).
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="src" src="src/samba-4.15.13+git.663.9c654e06cdb-150400.3.28.1.src.rpm">
          <filename>samba-4.15.13+git.663.9c654e06cdb-150400.3.28.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="x86_64" src="x86_64/samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm">
          <filename>samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="x86_64" src="x86_64/samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm">
          <filename>samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="s390x" src="s390x/samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.s390x.rpm">
          <filename>samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.s390x.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="s390x" src="s390x/samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.s390x.rpm">
          <filename>samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="aarch64" src="aarch64/samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm">
          <filename>samba-client-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.663.9c654e06cdb" release="150400.3.28.1" arch="aarch64" src="aarch64/samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm">
          <filename>samba-libs-4.15.13+git.663.9c654e06cdb-150400.3.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3217</id>
    <title>Recommended update for cryptsetup</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691419894"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211079" id="1211079" title="cryptsetup luksFormat fails on host with limited memory" type="bugzilla"/>
    </references>
    <description>This update for cryptsetup fixes the following issues:

- Handle system with low memory and no swap space (bsc#1211079)
</description>
    <pkglist>
      <collection>
        <package name="cryptsetup" epoch="0" version="2.4.3" release="150400.3.3.1" arch="src" src="src/cryptsetup-2.4.3-150400.3.3.1.src.rpm">
          <filename>cryptsetup-2.4.3-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="cryptsetup" epoch="0" version="2.4.3" release="150400.3.3.1" arch="x86_64" src="x86_64/cryptsetup-2.4.3-150400.3.3.1.x86_64.rpm">
          <filename>cryptsetup-2.4.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcryptsetup12" epoch="0" version="2.4.3" release="150400.3.3.1" arch="x86_64" src="x86_64/libcryptsetup12-2.4.3-150400.3.3.1.x86_64.rpm">
          <filename>libcryptsetup12-2.4.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcryptsetup12-hmac" epoch="0" version="2.4.3" release="150400.3.3.1" arch="x86_64" src="x86_64/libcryptsetup12-hmac-2.4.3-150400.3.3.1.x86_64.rpm">
          <filename>libcryptsetup12-hmac-2.4.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cryptsetup" epoch="0" version="2.4.3" release="150400.3.3.1" arch="s390x" src="s390x/cryptsetup-2.4.3-150400.3.3.1.s390x.rpm">
          <filename>cryptsetup-2.4.3-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libcryptsetup12" epoch="0" version="2.4.3" release="150400.3.3.1" arch="s390x" src="s390x/libcryptsetup12-2.4.3-150400.3.3.1.s390x.rpm">
          <filename>libcryptsetup12-2.4.3-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libcryptsetup12-hmac" epoch="0" version="2.4.3" release="150400.3.3.1" arch="s390x" src="s390x/libcryptsetup12-hmac-2.4.3-150400.3.3.1.s390x.rpm">
          <filename>libcryptsetup12-hmac-2.4.3-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="cryptsetup" epoch="0" version="2.4.3" release="150400.3.3.1" arch="aarch64" src="aarch64/cryptsetup-2.4.3-150400.3.3.1.aarch64.rpm">
          <filename>cryptsetup-2.4.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcryptsetup12" epoch="0" version="2.4.3" release="150400.3.3.1" arch="aarch64" src="aarch64/libcryptsetup12-2.4.3-150400.3.3.1.aarch64.rpm">
          <filename>libcryptsetup12-2.4.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcryptsetup12-hmac" epoch="0" version="2.4.3" release="150400.3.3.1" arch="aarch64" src="aarch64/libcryptsetup12-hmac-2.4.3-150400.3.3.1.aarch64.rpm">
          <filename>libcryptsetup12-hmac-2.4.3-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2922</id>
    <title>Recommended update for libfido2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1689870862"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-4521" id="PED-4521" title="https://jira.suse.com/browse/PED-4521" type="jira"/>
    </references>
    <description>This update for libfido2 fixes the following issues:

- Use openssl 1.1 still on SUSE Linux Enterprise 15 to avoid pulling unneeded
  openssl-3 dependency. (jsc#PED-4521)
</description>
    <pkglist>
      <collection>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.6.1" arch="x86_64" src="x86_64/libfido2-1-1.13.0-150400.5.6.1.x86_64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="libfido2" epoch="0" version="1.13.0" release="150400.5.6.1" arch="src" src="src/libfido2-1.13.0-150400.5.6.1.src.rpm">
          <filename>libfido2-1.13.0-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="libfido2-udev" epoch="0" version="1.13.0" release="150400.5.6.1" arch="noarch" src="noarch/libfido2-udev-1.13.0-150400.5.6.1.noarch.rpm">
          <filename>libfido2-udev-1.13.0-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.6.1" arch="s390x" src="s390x/libfido2-1-1.13.0-150400.5.6.1.s390x.rpm">
          <filename>libfido2-1-1.13.0-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="libfido2-1" epoch="0" version="1.13.0" release="150400.5.6.1" arch="aarch64" src="aarch64/libfido2-1-1.13.0-150400.5.6.1.aarch64.rpm">
          <filename>libfido2-1-1.13.0-150400.5.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3282</id>
    <title>Recommended update for blog</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691742441"/>
    <references/>
    <description>This update for blog fixes the following issues:

- Fix big endian cast problems to be able to read commands and ansers as well as passphrases
</description>
    <pkglist>
      <collection>
        <package name="blog" epoch="0" version="2.26" release="150300.4.6.1" arch="src" src="src/blog-2.26-150300.4.6.1.src.rpm">
          <filename>blog-2.26-150300.4.6.1.src.rpm</filename>
        </package>
        <package name="blog" epoch="0" version="2.26" release="150300.4.6.1" arch="x86_64" src="x86_64/blog-2.26-150300.4.6.1.x86_64.rpm">
          <filename>blog-2.26-150300.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="libblogger2" epoch="0" version="2.26" release="150300.4.6.1" arch="x86_64" src="x86_64/libblogger2-2.26-150300.4.6.1.x86_64.rpm">
          <filename>libblogger2-2.26-150300.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="blog" epoch="0" version="2.26" release="150300.4.6.1" arch="s390x" src="s390x/blog-2.26-150300.4.6.1.s390x.rpm">
          <filename>blog-2.26-150300.4.6.1.s390x.rpm</filename>
        </package>
        <package name="libblogger2" epoch="0" version="2.26" release="150300.4.6.1" arch="s390x" src="s390x/libblogger2-2.26-150300.4.6.1.s390x.rpm">
          <filename>libblogger2-2.26-150300.4.6.1.s390x.rpm</filename>
        </package>
        <package name="blog" epoch="0" version="2.26" release="150300.4.6.1" arch="aarch64" src="aarch64/blog-2.26-150300.4.6.1.aarch64.rpm">
          <filename>blog-2.26-150300.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="libblogger2" epoch="0" version="2.26" release="150300.4.6.1" arch="aarch64" src="aarch64/libblogger2-2.26-150300.4.6.1.aarch64.rpm">
          <filename>libblogger2-2.26-150300.4.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2962</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690270516"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213487" id="1213487" title="VUL-0: CVE-2023-3446: openssl-1_1,openssl1,openssl-3,openssl-1_0_0: Excessive time spent checking DH keys and parameters" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446" id="CVE-2023-3446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.48.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.48.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.48.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.48.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.48.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.48.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.48.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.48.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.48.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.48.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.48.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3387</id>
    <title>Recommended update for raspberrypi-firmware-dt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692786465"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212791" id="1212791" title="spidev device driver not auto binding to devices" type="bugzilla"/>
    </references>
    <description>This update for raspberrypi-firmware-dt fixes the following issues:

- Use compatible string which is supported by spidev module (bsc#1212791)
</description>
    <pkglist>
      <collection>
        <package name="raspberrypi-firmware-dt" epoch="0" version="2021.11.19" release="150400.5.3.1" arch="noarch" src="noarch/raspberrypi-firmware-dt-2021.11.19-150400.5.3.1.noarch.rpm">
          <filename>raspberrypi-firmware-dt-2021.11.19-150400.5.3.1.noarch.rpm</filename>
        </package>
        <package name="raspberrypi-firmware-dt" epoch="0" version="2021.11.19" release="150400.5.3.1" arch="src" src="src/raspberrypi-firmware-dt-2021.11.19-150400.5.3.1.src.rpm">
          <filename>raspberrypi-firmware-dt-2021.11.19-150400.5.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2945</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690184329"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408" id="CVE-2023-38408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186673" id="1186673" title="CC: openssh is not always clearing keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213004" id="1213004" title="SSH session keys not deleted after session ends" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213008" id="1213008" title="CC: openssh is not always clearing keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209536" id="1209536" title="SLES15 SP5 S202302-1 - openssh missing or bad close() calls causes openssl-ibmca engine not directing work to accelerator cards (regression)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213504" id="1213504" title="CVE-2023-38408: openssh: Remote Code Execution in OpenSSH's forwarded ssh-agent" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2023-38408: Fixed a condition where specific libaries loaded via
  ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code
  execution via a forwarded agent socket if those libraries were present on the
  victim's system and if the agent was forwarded to an attacker-controlled
  system. [bsc#1213504, CVE-2023-38408]

- Close the right filedescriptor and also close fdh in read_hmac to avoid file
  descriptor leaks. [bsc#1209536]

- Attempts to mitigate instances of secrets lingering in memory after a session
  exits. [bsc#1186673, bsc#1213004, bsc#1213008]
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="src" src="src/openssh-8.4p1-150300.3.22.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.22.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.22.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.22.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.22.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.22.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.22.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.22.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.22.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.22.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.22.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.22.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.22.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.22.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.22.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.22.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.22.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.22.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3327</id>
    <title>Security update for pcre2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692168548"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213514" id="1213514" title="VUL-0: CVE-2022-41409: pcre,pcre2: Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41409" id="CVE-2022-41409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41409" type="cve"/>
    </references>
    <description>This update for pcre2 fixes the following issues:

  - CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input (bsc#1213514).
</description>
    <pkglist>
      <collection>
        <package name="libpcre2-8-0" epoch="0" version="10.39" release="150400.4.9.1" arch="x86_64" src="x86_64/libpcre2-8-0-10.39-150400.4.9.1.x86_64.rpm">
          <filename>libpcre2-8-0-10.39-150400.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="pcre2" epoch="0" version="10.39" release="150400.4.9.1" arch="src" src="src/pcre2-10.39-150400.4.9.1.src.rpm">
          <filename>pcre2-10.39-150400.4.9.1.src.rpm</filename>
        </package>
        <package name="libpcre2-8-0" epoch="0" version="10.39" release="150400.4.9.1" arch="s390x" src="s390x/libpcre2-8-0-10.39-150400.4.9.1.s390x.rpm">
          <filename>libpcre2-8-0-10.39-150400.4.9.1.s390x.rpm</filename>
        </package>
        <package name="libpcre2-8-0" epoch="0" version="10.39" release="150400.4.9.1" arch="aarch64" src="aarch64/libpcre2-8-0-10.39-150400.4.9.1.aarch64.rpm">
          <filename>libpcre2-8-0-10.39-150400.4.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3057</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690821062"/>
    <references/>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

This update rebuilds the kubevirt stack with the current GO release.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.19.1" arch="src" src="src/kubevirt-0.54.0-150400.3.19.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.19.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.19.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.19.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.19.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.19.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3010</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690875428"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

This update rebuilds containerized-data-importer against the current GO security release.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.16.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.16.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.16.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.16.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.16.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3021</id>
    <title>Security update for librsvg</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690573469"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213502" id="1213502" title="VUL-0: CVE-2023-38633: librsvg: directory traversal in URI decoder" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38633" id="CVE-2023-38633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38633" type="cve"/>
    </references>
    <description>This update for librsvg fixes the following issues:

librsvg was updated to version 2.52.10:
 
- CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502).
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf-loader-rsvg" epoch="0" version="2.52.10" release="150400.3.6.1" arch="x86_64" src="x86_64/gdk-pixbuf-loader-rsvg-2.52.10-150400.3.6.1.x86_64.rpm">
          <filename>gdk-pixbuf-loader-rsvg-2.52.10-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="librsvg-2-2" epoch="0" version="2.52.10" release="150400.3.6.1" arch="x86_64" src="x86_64/librsvg-2-2-2.52.10-150400.3.6.1.x86_64.rpm">
          <filename>librsvg-2-2-2.52.10-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="librsvg" epoch="0" version="2.52.10" release="150400.3.6.1" arch="src" src="src/librsvg-2.52.10-150400.3.6.1.src.rpm">
          <filename>librsvg-2.52.10-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-loader-rsvg" epoch="0" version="2.52.10" release="150400.3.6.1" arch="s390x" src="s390x/gdk-pixbuf-loader-rsvg-2.52.10-150400.3.6.1.s390x.rpm">
          <filename>gdk-pixbuf-loader-rsvg-2.52.10-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="librsvg-2-2" epoch="0" version="2.52.10" release="150400.3.6.1" arch="s390x" src="s390x/librsvg-2-2-2.52.10-150400.3.6.1.s390x.rpm">
          <filename>librsvg-2-2-2.52.10-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="gdk-pixbuf-loader-rsvg" epoch="0" version="2.52.10" release="150400.3.6.1" arch="aarch64" src="aarch64/gdk-pixbuf-loader-rsvg-2.52.10-150400.3.6.1.aarch64.rpm">
          <filename>gdk-pixbuf-loader-rsvg-2.52.10-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="librsvg-2-2" epoch="0" version="2.52.10" release="150400.3.6.1" arch="aarch64" src="aarch64/librsvg-2-2-2.52.10-150400.3.6.1.aarch64.rpm">
          <filename>librsvg-2-2-2.52.10-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3536</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693918948"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213120" id="1213120" title="[trackerbug] docker 24.0.3-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213500" id="1213500" title="[trackerbug] docker 24.0.4-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213229" id="1213229" title="VUL-0: CVE-2023-29406: go1.19,go1.20: net/http: insufficient sanitization of Host header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212368" id="1212368" title="[trackerbug] docker 24.0.2-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214107" id="1214107" title="VUL-0: CVE-2023-28840: golang-github-docker-libnetwork,docker: Encrypted overlay network may be unauthenticated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214109" id="1214109" title="VUL-0: CVE-2023-28842: docker,golang-github-docker-libnetwork: Encrypted overlay network with a single endpoint is unauthenticated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214108" id="1214108" title="VUL-0: CVE-2023-28841: docker,golang-github-docker-libnetwork: Encrypted overlay network traffic may be unencrypted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210797" id="1210797" title="Partner-L3: Growing docker mountpoint entries causes data unavailabillity" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841" id="CVE-2023-28841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842" id="CVE-2023-28842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840" id="CVE-2023-28840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840" type="cve"/>
    </references>
    <description>This update for docker fixes the following issues:

- Update to Docker 24.0.5-ce.

  See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt; bsc#1213229 

- Update to Docker 24.0.4-ce.

  See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500

- Update to Docker 24.0.3-ce.

  See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120

- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.

- Add docker-rootless-extras subpackage (https://docs.docker.com/engine/security/rootless)

- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368

  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797

- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.

- was rebuilt against current GO compiler.

</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="24.0.5_ce" release="150000.185.1" arch="src" src="src/docker-24.0.5_ce-150000.185.1.src.rpm">
          <filename>docker-24.0.5_ce-150000.185.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.5_ce" release="150000.185.1" arch="x86_64" src="x86_64/docker-24.0.5_ce-150000.185.1.x86_64.rpm">
          <filename>docker-24.0.5_ce-150000.185.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.5_ce" release="150000.185.1" arch="s390x" src="s390x/docker-24.0.5_ce-150000.185.1.s390x.rpm">
          <filename>docker-24.0.5_ce-150000.185.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.5_ce" release="150000.185.1" arch="aarch64" src="aarch64/docker-24.0.5_ce-150000.185.1.aarch64.rpm">
          <filename>docker-24.0.5_ce-150000.185.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3171</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691044508"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1150305" id="1150305" title="SLES 15 SP1 - [SCM/PMEM/vPMEM][kernel-4.12.14-197.7-default] LPAR crashes when creating multiple namespaces with multiple regions (HMS)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207894" id="1207894" title="Mellanox OFED 5.8 LTS triggers SLES 15 SP4 crash not long after loading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208788" id="1208788" title="K8S container crashes after kernel update from 4.12.14-122.144 to 4.12.14-122.147" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210565" id="1210565" title="Partner-L3: SLES 15 SP5, NVMe natively multipathing, iostat have no value on pseudo device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210584" id="1210584" title="VUL-0: kernel: buffer overflow in mtd_ubi build.c:::io_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210853" id="1210853" title="[NDA] [RFE] SLES15 launch issue on new instance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211243" id="1211243" title="HPE/OEM Nvidia/Mellanox mlx5_core driver panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211811" id="1211811" title="XFS  Internal error ltbno + ltlen &gt; bno at line 1940 of file ../fs/xfs/libxfs/xfs_alloc.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211867" id="1211867" title="VUL-0: CVE-2023-2985: kernel-source-azure,kernel-source,kernel-source-rt: hfs: use-after-free issue in hfsplus_release_folio in fs/hfsplus/super.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212301" id="1212301" title="[Azure][MANA][VLANTagging] Support for VLAN Tagging for MANA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212846" id="1212846" title="VUL-0: CVE-2023-3390: kernel-source-azure,kernel-source-rt,kernel-source: use-after-free in the netfilter subsystem in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212905" id="1212905" title="L3: Docker crash after upgrading to 4.12.14-122.150" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213010" id="1213010" title="[PATCH] ext4: fail ext4_iget if special inode unallocated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213011" id="1213011" title="[PATCH] ext4: move where set the MAY_INLINE_DATA flag is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213012" id="1213012" title="[PATCH] ext4: fix WARNING in ext4_update_inline_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213013" id="1213013" title="[PATCH] ext4: zero i_disksize when initializing the bootloader inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213014" id="1213014" title="[PATCH] jdb2: Don't refuse invalidation of already invalidated  buffers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213015" id="1213015" title="[PATCH] ext4: fix i_disksize exceeding i_size problem in paritally  written case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213016" id="1213016" title="[PATCH] ext4: avoid deadlock in fs reclaim with page writeback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213017" id="1213017" title="[PATCH] ext4: improve error recovery code paths in __ext4_remount()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213018" id="1213018" title="[PATCH] ext4: bail out of ext4_xattr_ibody_get() fails for any reason" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213019" id="1213019" title="[PATCH] ext4: only update i_reserved_data_blocks on successful block  allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213020" id="1213020" title="[PATCH] ext4: Fix reusing stale buffer heads from last failed  mounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213021" id="1213021" title="[PATCH] ext4: fix to check return value of freeze_bdev() in  ext4_shutdown()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213024" id="1213024" title="[PATCH] writeback: fix call of incorrect macro" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213025" id="1213025" title="[PATCH] inotify: Avoid reporting event with invalid wd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213032" id="1213032" title="[PATCH] udf: Avoid double brelse() in udf_rename()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213034" id="1213034" title="[PATCH] udf: Fix preallocation discarding at indirect extent boundary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213035" id="1213035" title="[PATCH] udf: Do not bother looking for prealloc extents if  i_lenExtents matches i_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213036" id="1213036" title="[PATCH] udf: Discard preallocation before extending file with a hole" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213037" id="1213037" title="[PATCH] udf: Fix extending file within last block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213038" id="1213038" title="[PATCH] udf: Define EFSCORRUPTED error code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213039" id="1213039" title="[PATCH] udf: Truncate added extents on failed expansion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213040" id="1213040" title="[PATCH] udf: Do not bother merging very long extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213041" id="1213041" title="[PATCH] udf: Do not update file length for failed writes to inline  files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213059" id="1213059" title="VUL-0: CVE-2023-35001: kernel: nf_tables nft_byteorder_eval OOB read/write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213061" id="1213061" title="VUL-0: CVE-2023-31248: kernel: nf_tables UAF when using nft_chain_lookup_byid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213087" id="1213087" title="[PATCH] ext4: refactor ext4_free_blocks() to pull out  ext4_mb_clear_bb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213088" id="1213088" title="[PATCH] ext4: add ext4_sb_block_valid() refactored out of  ext4_inode_block_valid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213089" id="1213089" title="[PATCH] ext4: add strict range checks while freeing blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213090" id="1213090" title="[PATCH] ext4: block range must be validated before use in  ext4_mb_clear_bb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213092" id="1213092" title="[PATCH] ext4: use ext4_fc_tl_mem in fast-commit replay path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213093" id="1213093" title="[PATCH] ext4: refuse to create ea block when umounted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213094" id="1213094" title="[PATCH] ext4: update s_journal_inum if it changes after journal  replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213095" id="1213095" title="[PATCH] jbd2: fix data missing when reusing bh which is ready to be  checkpointed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213096" id="1213096" title="[PATCH] ext4: fix task hung in ext4_xattr_delete_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213098" id="1213098" title="[PATCH] ext4: fix use-after-free read in ext4_find_extent for  bigalloc + inline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213099" id="1213099" title="[PATCH] ext4: fix WARNING in mb_find_extent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213100" id="1213100" title="[PATCH] ext4: fix lockdep warning when enabling MMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213102" id="1213102" title="[PATCH] ext4: fix data races when using cached status extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213103" id="1213103" title="[PATCH] ext4: check iomap type only if ext4_iomap_begin() does not  fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213104" id="1213104" title="[PATCH] ext4: improve error handling from ext4_dirhash()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213105" id="1213105" title="[PATCH] ext4: fix deadlock when converting an inline directory in  nojournal mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213106" id="1213106" title="[PATCH] ext4: add EA_INODE checking to ext4_iget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213107" id="1213107" title="[PATCH] ext4: set lockdep subclass for the ea_inode in  ext4_xattr_inode_cache_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213108" id="1213108" title="[PATCH] ext4: disallow ea_inodes with extended attributes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213109" id="1213109" title="[PATCH] ext4: add lockdep annotations for i_data_sem for ea_inode's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213110" id="1213110" title="[PATCH] ext4: turn quotas off if mount failed after enabling quotas" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213111" id="1213111" title="[PATCH] ext4: fix bug_on in __es_tree_search caused by bad quota  inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213112" id="1213112" title="[PATCH] udf: Fix error handling in udf_new_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213113" id="1213113" title="[PATCH] udf: Preserve link count of system files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213114" id="1213114" title="[PATCH] udf: Detect system inodes linked into directory hierarchy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213134" id="1213134" title="Sles15sp5 - drmgr command is failing [hvcs/PowerVS]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213245" id="1213245" title="VUL-0: CVE-2023-3117: kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213247" id="1213247" title="s390: discard .interp section" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213252" id="1213252" title="s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213258" id="1213258" title="s390/ap: fix status returned by ap_qact()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213259" id="1213259" title="s390/ap: fix status returned by ap_aqic()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213263" id="1213263" title="s390/debug: add _ASM_S390_ prefix to header guard" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213264" id="1213264" title="s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt;  2.36" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213286" id="1213286" title="VUL-0: CVE-2023-20593: kernel,kernel-firmware: AMD CPU: &quot;ZenBleed&quot;: VZEROUPPER does not clear upper bits under certain conditions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213523" id="1213523" title="fuse: revalidate: don't invalidate if interrupted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213524" id="1213524" title="fuse: ioctl: translate ENOSYS in outarg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213543" id="1213543" title="VUL-0: CVE-2023-3812: kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213705" id="1213705" title="Kernel update 29917 breaks k3s on 15-SP4 and 15-SP5" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2985" id="CVE-2023-2985" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2985" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" id="CVE-2023-3117" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3390" id="CVE-2023-3390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3812" id="CVE-2023-3812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31248" id="CVE-2023-31248" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31248" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" id="CVE-2023-20593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001" id="CVE-2023-35001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-20593: Fixed a ZenBleed issue in &quot;Zen 2&quot; CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).


The following non-security bugs were fixed:

- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).
- ALSA: fireface: make read-only const array for model names static (git-fixes).
- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760 (git-fixes).
- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).
- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).
- ALSA: hda/realtek: Whitespace fix (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: oxfw: make read-only const array models static (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes).
- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).
- ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes).
- ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes).
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes).
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).
- ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes).
- ASoC: tegra: Fix ADX byte map (git-fixes).
- ASoC: tegra: Fix AMX byte map (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical (git-fixes).
- Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758)
- Fix documentation of panic_on_warn (git-fixes).
- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).
- RDMA/rxe: Fix access checks in rxe_check_bind_mw (git-fixes)
- Revert &quot;arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)
- Revert &quot;drm/amd/display: edp do not add non-edid timings&quot; (git-fixes).
- USB: dwc2: Fix some error handling paths (git-fixes).
- USB: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes).
- USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes).
- USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes).
- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
- Update config and supported.conf files due to renaming.
- apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).
- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)
- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)
- arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)
- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)
- can: bcm: Fix UAF in bcm_proc_show() (git-fixes).
- cifs: add a warning when the in-flight count goes negative (bsc#1193629).
- cifs: address unused variable warning (bsc#1193629).
- cifs: do all necessary checks for credits within or before locking (bsc#1193629).
- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).
- cifs: fix max_credits implementation (bsc#1193629).
- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).
- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).
- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).
- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).
- cifs: fix status checks in cifs_tree_connect (bsc#1193629).
- cifs: log session id when a matching ses is not found (bsc#1193629).
- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).
- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).
- cifs: print all credit counters in DebugData (bsc#1193629).
- cifs: print client_guid in DebugData (bsc#1193629).
- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).
- cifs: print nosharesock value while dumping mount options (bsc#1193629).
- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes).
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes).
- codel: fix kernel-doc notation warnings (git-fixes).
- crypto: kpp - Add helper to set reqsize (git-fixes).
- crypto: qat - Use helper to set reqsize (git-fixes).
- devlink: fix kernel-doc notation warnings (git-fixes).
- docs: networking: Update codeaurora references for rmnet (git-fixes).
- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop (git-fixes).
- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes).
- drm/atomic: Allow vblank-enabled + self-refresh &quot;disable&quot; (git-fixes).
- drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/client: Fix memory leak in drm_client_target_cloned (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes).
- drm/i915: Fix one wrong caching mode enum usage (git-fixes).
- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes).
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes).
- drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes).
- drm/ttm: Do not leak a resource on swapout move error (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in &quot;compatible&quot; conditional schema (git-fixes).
- ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020).
- ext4: add EA_INODE checking to ext4_iget() (bsc#1213106).
- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).
- ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).
- ext4: add strict range checks while freeing blocks (bsc#1213089).
- ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).
- ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).
- ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).
- ext4: disallow ea_inodes with extended attributes (bsc#1213108).
- ext4: fail ext4_iget if special inode unallocated (bsc#1213010).
- ext4: fix WARNING in ext4_update_inline_data (bsc#1213012).
- ext4: fix WARNING in mb_find_extent (bsc#1213099).
- ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).
- ext4: fix data races when using cached status extents (bsc#1213102).
- ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).
- ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).
- ext4: fix lockdep warning when enabling MMP (bsc#1213100).
- ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).
- ext4: improve error handling from ext4_dirhash() (bsc#1213104).
- ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).
- ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011).
- ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).
- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).
- ext4: refuse to create ea block when umounted (bsc#1213093).
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).
- ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).
- ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).
- ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).
- ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).
- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hwmon: (adm1275) Allow setting sample averaging (git-fixes).
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes).
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).
- i2c: xiic: Do not try to handle more interrupt events after error (git-fixes).
- inotify: Avoid reporting event with invalid wd (bsc#1213025).
- jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).
- jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014).
- kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).
- kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers
- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes).
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes).
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: i2c: Correct format propagation for st-mipid02 (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes).
- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes).
- net: mana: Add support for vlan tagging (bsc#1212301).
- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).
- ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes).
- ntb: ntb_tool: Add check for devm_kcalloc (git-fixes).
- ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).
- nvme-multipath: support io stats on the mpath device (bsc#1210565).
- nvme: introduce nvme_start_request (bsc#1210565).
- ocfs2: Switch to security_inode_init_security() (git-fixes).
- ocfs2: check new file size on fallocate call (git-fixes).
- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).
- opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).
- phy: Revert &quot;phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB&quot; (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).
- pie: fix kernel-doc notation warning (git-fixes).
- pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes).
- pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes).
- pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes).
- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869).
- powerpc/64s: Fix VAS mm use after free (bsc#1194869).
- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).
- powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869).
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).
- powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869).
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).
- powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).
- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).
- powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).
- powerpc/prom_init: Fix kernel config grep (bsc#1194869).
- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).
- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).
- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).
- powerpc: define get_cycles macro for arch-override (bsc#1194869).
- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes).
- rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*.
- rsi: remove kernel-doc comment marker (git-fixes).
- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).
- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).
- s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263).
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).
- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &amp;lt; 2.36 (git-fixes bsc#1213264).
- s390: discard .interp section (git-fixes bsc#1213247).
- sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)
- sched: Fix DEBUG &amp;&amp; !SCHEDSTATS warn (git-fixes)
- security: keys: Modify mismatched function name (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).
- selftests: tc: add 'ct' action kconfig dep (git-fixes).
- selftests: tc: add ConnTrack procfs kconfig (git-fixes).
- selftests: tc: set timeout to 15 minutes (git-fixes).
- signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).
- signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869).
- smb3: do not reserve too many oplock credits (bsc#1193629).
- smb3: missing null check in SMB2_change_notify (bsc#1193629).
- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).
- smb: client: fix missed ses refcounting (git-fixes).
- smb: client: fix parsing of source mount option (bsc#1193629).
- smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).
- smb: client: fix warning in CIFSFindFirst() (bsc#1193629).
- smb: client: fix warning in CIFSFindNext() (bsc#1193629).
- smb: client: fix warning in cifs_match_super() (bsc#1193629).
- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).
- smb: client: fix warning in generic_ip_connect() (bsc#1193629).
- smb: client: improve DFS mount check (bsc#1193629).
- smb: client: remove redundant pointer 'server' (bsc#1193629).
- smb: delete an unnecessary statement (bsc#1193629).
- smb: move client and server files to common directory fs/smb (bsc#1193629).
- smb: remove obsolete comment (bsc#1193629).
- soundwire: qcom: fix storing port config out-of-bounds (git-fixes).
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).
- spi: bcm63xx: fix max prepend length (git-fixes).
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &amp;lt;= alloc, size (bsc#1210584).
- udf: Avoid double brelse() in udf_rename() (bsc#1213032).
- udf: Define EFSCORRUPTED error code (bsc#1213038).
- udf: Detect system inodes linked into directory hierarchy (bsc#1213114).
- udf: Discard preallocation before extending file with a hole (bsc#1213036).
- udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035).
- udf: Do not bother merging very long extents (bsc#1213040).
- udf: Do not update file length for failed writes to inline files (bsc#1213041).
- udf: Fix error handling in udf_new_inode() (bsc#1213112).
- udf: Fix extending file within last block (bsc#1213037).
- udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034).
- udf: Preserve link count of system files (bsc#1213113).
- udf: Truncate added extents on failed expansion (bsc#1213039).
- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).
- wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes).
- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- writeback: fix call of incorrect macro (bsc#1213024).
- x86: Fix .brk attribute in linker script (git-fixes).
- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
- xfs: CIL work is serialised, not pipelined (bsc#1211811).
- xfs: XLOG_STATE_IOERROR must die (bsc#1211811).
- xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811).
- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).
- xfs: clean up the rtbitmap fsmap backend (git-fixes).
- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).
- xfs: do not reverse order of items in bulk AIL insertion (git-fixes).
- xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).
- xfs: drop async cache flushes from CIL commits (bsc#1211811).
- xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).
- xfs: fix getfsmap reporting past the last rt extent (git-fixes).
- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).
- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).
- xfs: fix logdev fsmap query result filtering (git-fixes).
- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).
- xfs: fix uninitialized variable access (git-fixes).
- xfs: make fsmap backend function key parameters const (git-fixes).
- xfs: make the record pointer passed to query_range functions const (git-fixes).
- xfs: move the CIL workqueue to the CIL (bsc#1211811).
- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).
- xfs: order CIL checkpoint start records (bsc#1211811).
- xfs: pass a CIL context to xlog_write() (bsc#1211811).
- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).
- xfs: rework xlog_state_do_callback() (bsc#1211811).
- xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).
- xfs: separate out log shutdown callback processing (bsc#1211811).
- xfs: wait iclog complete before tearing down AIL (bsc#1211811).
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.74.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.74.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.74.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.74.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.74.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.74.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.74.1.150400.24.33.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.74.1.150400.24.33.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.74.1.150400.24.33.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.74.1.150400.24.33.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.74.1.150400.24.33.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.74.1.150400.24.33.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.74.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.74.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.74.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.74.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.74.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.74.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.74.1.150400.24.33.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.74.1.150400.24.33.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.74.1.150400.24.33.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3022</id>
    <title>Security update for kernel-firmware</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690573525"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" id="CVE-2023-20593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213286" id="1213286" title="VUL-0: CVE-2023-20593: kernel,kernel-firmware: AMD CPU: &quot;ZenBleed&quot;: VZEROUPPER does not clear upper bits under certain conditions" type="bugzilla"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

  - CVE-2023-20593: Fixed AMD ucode for ZenBleed vulnerability (bsc#1213286).
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20220509" release="150400.4.19.1" arch="src" src="src/kernel-firmware-20220509-150400.4.19.1.src.rpm">
          <filename>kernel-firmware-20220509-150400.4.19.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-all-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-all-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-atheros-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-brcm-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-i915-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-i915-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-intel-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-intel-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-marvell-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-media-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-media-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-network-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-network-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-nfp-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-platform-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-platform-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-prestera-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-qcom-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-radeon-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-realtek-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-serial-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-serial-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-sound-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-sound-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-ti-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-ti-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20220509-150400.4.19.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20220509" release="150400.4.19.1" arch="noarch" src="noarch/ucode-amd-20220509-150400.4.19.1.noarch.rpm">
          <filename>ucode-amd-20220509-150400.4.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3397</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692809118"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213517" id="1213517" title="ssh misbehaves when OPENSSL_s390xcap is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213853" id="1213853" title="VUL-0: CVE-2023-3817: openssl: Excessive time spent checking DH q parameter value" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" id="CVE-2023-3817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
- Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot handle zero size. (bsc#1213517)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.53.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.53.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.53.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.53.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.53.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.53.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.53.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.53.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.53.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.53.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.53.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.53.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.53.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.53.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.53.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.53.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.53.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.53.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.53.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.53.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.53.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.53.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.53.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.53.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.53.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.53.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.53.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3003</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1690459684"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213593" id="1213593" title="Adjust SELinux rpm macros for SUSE paths" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Use /var/adm/update-scripts in macros.selinux-policy (bsc#1213593) 
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.9.1" arch="noarch" src="noarch/selinux-policy-20230511+git3.b78f5aff-150400.4.9.1.noarch.rpm">
          <filename>selinux-policy-20230511+git3.b78f5aff-150400.4.9.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.9.1" arch="src" src="src/selinux-policy-20230511+git3.b78f5aff-150400.4.9.1.src.rpm">
          <filename>selinux-policy-20230511+git3.b78f5aff-150400.4.9.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.9.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git3.b78f5aff-150400.4.9.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git3.b78f5aff-150400.4.9.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.9.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git3.b78f5aff-150400.4.9.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git3.b78f5aff-150400.4.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3275</id>
    <title>Recommended update for apparmor</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691742015"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213472" id="1213472" title="pam_apparmor documentation refers to README, but package does not have it" type="bugzilla"/>
    </references>
    <description>This update for apparmor fixes the following issues:

- Add pam_apparmor README (bsc#1213472)
</description>
    <pkglist>
      <collection>
        <package name="apparmor" epoch="0" version="3.0.4" release="150400.5.6.1" arch="src" src="src/apparmor-3.0.4-150400.5.6.1.src.rpm">
          <filename>apparmor-3.0.4-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150400.5.6.1" arch="x86_64" src="x86_64/apparmor-parser-3.0.4-150400.5.6.1.x86_64.rpm">
          <filename>apparmor-parser-3.0.4-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="libapparmor" epoch="0" version="3.0.4" release="150400.5.6.1" arch="src" src="src/libapparmor-3.0.4-150400.5.6.1.src.rpm">
          <filename>libapparmor-3.0.4-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150400.5.6.1" arch="x86_64" src="x86_64/libapparmor1-3.0.4-150400.5.6.1.x86_64.rpm">
          <filename>libapparmor1-3.0.4-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150400.5.6.1" arch="x86_64" src="x86_64/pam_apparmor-3.0.4-150400.5.6.1.x86_64.rpm">
          <filename>pam_apparmor-3.0.4-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150400.5.6.1" arch="s390x" src="s390x/apparmor-parser-3.0.4-150400.5.6.1.s390x.rpm">
          <filename>apparmor-parser-3.0.4-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150400.5.6.1" arch="s390x" src="s390x/libapparmor1-3.0.4-150400.5.6.1.s390x.rpm">
          <filename>libapparmor1-3.0.4-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150400.5.6.1" arch="s390x" src="s390x/pam_apparmor-3.0.4-150400.5.6.1.s390x.rpm">
          <filename>pam_apparmor-3.0.4-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150400.5.6.1" arch="aarch64" src="aarch64/apparmor-parser-3.0.4-150400.5.6.1.aarch64.rpm">
          <filename>apparmor-parser-3.0.4-150400.5.6.1.aarch64.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150400.5.6.1" arch="aarch64" src="aarch64/libapparmor1-3.0.4-150400.5.6.1.aarch64.rpm">
          <filename>libapparmor1-3.0.4-150400.5.6.1.aarch64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150400.5.6.1" arch="aarch64" src="aarch64/pam_apparmor-3.0.4-150400.5.6.1.aarch64.rpm">
          <filename>pam_apparmor-3.0.4-150400.5.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3214</id>
    <title>Recommended update for sssd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691419807"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213283" id="1213283" title="SSSD enters failed state after heavy load in the system" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- Fix sssd entering failed state under heavy load (bsc#1213283)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.14.1" arch="src" src="src/sssd-2.5.2-150400.4.14.1.src.rpm">
          <filename>sssd-2.5.2-150400.4.14.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/sssd-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>sssd-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.14.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150400.4.14.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.14.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/sssd-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>sssd-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/sssd-common-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.14.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150400.4.14.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.14.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/sssd-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>sssd-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.14.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150400.4.14.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3814</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695831391"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211829" id="1211829" title="Partner-L3: Backport of glibc bug: p_align on PT_LOAD segment in DSO isn't honored" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212819" id="1212819" title="Partner-L3: getnameinfo OS syscall behavior change in SLES 15 SP4 Vs. SLES 15 SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212910" id="1212910" title="&quot;Limited connectivity&quot; alert on both, wireless and wired connections" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-4908" id="PED-4908" title="https://jira.suse.com/browse/PED-4908" type="jira"/>
    </references>
    <description>This update for glibc fixes the following issues:

- nscd: Fix netlink cache invalidation if epoll is used (bsc#1212910, BZ #29415)
- Restore lookup of IPv4 mapped addresses in files database (bsc#1212819, BZ #25457)
- elf: Remove excessive p_align check on PT_LOAD segments (bsc#1211829, BZ #28688)
- elf: Properly align PT_LOAD segments (bsc#1211829, BZ #28676)
- ld.so: Always use MAP_COPY to map the first segment (BZ #30452)
- add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)

</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.58.1" arch="src" src="src/glibc-2.31-150300.58.1.src.rpm">
          <filename>glibc-2.31-150300.58.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.58.1" arch="x86_64" src="x86_64/glibc-2.31-150300.58.1.x86_64.rpm">
          <filename>glibc-2.31-150300.58.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.58.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.58.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.58.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.58.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.58.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.58.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.58.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.58.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.58.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.58.1" arch="s390x" src="s390x/glibc-2.31-150300.58.1.s390x.rpm">
          <filename>glibc-2.31-150300.58.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.58.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.58.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.58.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.58.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.58.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.58.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.58.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.58.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.58.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.58.1" arch="aarch64" src="aarch64/glibc-2.31-150300.58.1.aarch64.rpm">
          <filename>glibc-2.31-150300.58.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.58.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.58.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.58.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.58.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.58.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.58.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.58.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.58.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.58.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3288</id>
    <title>Recommended update for python-apipkg</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691749880"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213582" id="1213582" title="Missing dependencies for python3-py-1.10.0-150000.5.9.2.noarch.rpm" type="bugzilla"/>
    </references>
    <description>
This update for python-apipkg provides python3-apipkg to SUSE Linux Enterprise Micro 5.2. 
</description>
    <pkglist>
      <collection>
        <package name="python-apipkg" epoch="0" version="1.4" release="150000.3.6.1" arch="src" src="src/python-apipkg-1.4-150000.3.6.1.src.rpm">
          <filename>python-apipkg-1.4-150000.3.6.1.src.rpm</filename>
        </package>
        <package name="python3-apipkg" epoch="0" version="1.4" release="150000.3.6.1" arch="noarch" src="noarch/python3-apipkg-1.4-150000.3.6.1.noarch.rpm">
          <filename>python3-apipkg-1.4-150000.3.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3199</id>
    <title>Recommended update for libnvme, nvme-cli</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691142731"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212598" id="1212598" title="nvme list -v does not list namespaces in it's output under namespaces column" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213618" id="1213618" title="host not receiving AEN from persistent discovery control after config change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213644" id="1213644" title="nvme id-uuid json output always misses out on first UUID entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213527" id="1213527" title="Failed to open /dev/nvme-fabrics: Too many open files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1124564" id="1124564" title="Include udev rule to enable NVMe multipath 'round-robin' load balancing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213686" id="1213686" title="Suspected fd leak seen with nvme-stas" type="bugzilla"/>
    </references>
    <description>This update for libnvme, nvme-cli fixes the following issues:

- Update to version 1.0+48.g64a3e9:
- Add getter for subsystem iopolicy (bsc#1124564)
- Avoid warning in 'list-subsys' (bsc#1212598)
- Update Get Log Page code (bsc#1213618)
- Fix counter while looping through uuid_list (bsc#1213644)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0+48.g707b7a" release="150400.3.24.1" arch="src" src="src/libnvme-1.0+48.g707b7a-150400.3.24.1.src.rpm">
          <filename>libnvme-1.0+48.g707b7a-150400.3.24.1.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+48.g707b7a" release="150400.3.24.1" arch="x86_64" src="x86_64/libnvme1-1.0+48.g707b7a-150400.3.24.1.x86_64.rpm">
          <filename>libnvme1-1.0+48.g707b7a-150400.3.24.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+47.ga43da6" release="150400.3.21.1" arch="src" src="src/nvme-cli-2.0+47.ga43da6-150400.3.21.1.src.rpm">
          <filename>nvme-cli-2.0+47.ga43da6-150400.3.21.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+47.ga43da6" release="150400.3.21.1" arch="x86_64" src="x86_64/nvme-cli-2.0+47.ga43da6-150400.3.21.1.x86_64.rpm">
          <filename>nvme-cli-2.0+47.ga43da6-150400.3.21.1.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+48.g707b7a" release="150400.3.24.1" arch="s390x" src="s390x/libnvme1-1.0+48.g707b7a-150400.3.24.1.s390x.rpm">
          <filename>libnvme1-1.0+48.g707b7a-150400.3.24.1.s390x.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+47.ga43da6" release="150400.3.21.1" arch="s390x" src="s390x/nvme-cli-2.0+47.ga43da6-150400.3.21.1.s390x.rpm">
          <filename>nvme-cli-2.0+47.ga43da6-150400.3.21.1.s390x.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0+48.g707b7a" release="150400.3.24.1" arch="aarch64" src="aarch64/libnvme1-1.0+48.g707b7a-150400.3.24.1.aarch64.rpm">
          <filename>libnvme1-1.0+48.g707b7a-150400.3.24.1.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+47.ga43da6" release="150400.3.21.1" arch="aarch64" src="aarch64/nvme-cli-2.0+47.ga43da6-150400.3.21.1.aarch64.rpm">
          <filename>nvme-cli-2.0+47.ga43da6-150400.3.21.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3611</id>
    <title>Recommended update for sysuser-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1694762941"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205161" id="1205161" title="brltty: cannot create directory: /run/brltty: Permission denied" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213240" id="1213240" title="PTF request for brltty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207778" id="1207778" title="systemd complains: Failed to resolve group 'brltty'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195391" id="1195391" title="identify and declare bash dependencies explicitly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214140" id="1214140" title="system-group-hardware fails to install" type="bugzilla"/>
    </references>
    <description>This update for sysuser-tools fixes the following issues:

- Update to version 3.2
- Always create a system group of the same name as the system user (bsc#1205161, bsc#1207778, bsc#1213240)
- Add &quot;quilt setup&quot; friendly hint to %sysusers_requires usage
- Use append so if a pre file already exists it isn't overridden
- Invoke bash for bash scripts (bsc#1195391) 
- Remove all systemd requires not supported on SLE15 (bsc#1214140)
</description>
    <pkglist>
      <collection>
        <package name="brltty" epoch="0" version="6.4" release="150400.4.3.3" arch="src" src="src/brltty-6.4-150400.4.3.3.src.rpm">
          <filename>brltty-6.4-150400.4.3.3.src.rpm</filename>
        </package>
        <package name="system-user-brltty" epoch="0" version="6.4" release="150400.4.3.3" arch="noarch" src="noarch/system-user-brltty-6.4-150400.4.3.3.noarch.rpm">
          <filename>system-user-brltty-6.4-150400.4.3.3.noarch.rpm</filename>
        </package>
        <package name="sysuser-shadow" epoch="0" version="3.2" release="150400.3.5.3" arch="noarch" src="noarch/sysuser-shadow-3.2-150400.3.5.3.noarch.rpm">
          <filename>sysuser-shadow-3.2-150400.3.5.3.noarch.rpm</filename>
        </package>
        <package name="sysuser-tools" epoch="0" version="3.2" release="150400.3.5.3" arch="src" src="src/sysuser-tools-3.2-150400.3.5.3.src.rpm">
          <filename>sysuser-tools-3.2-150400.3.5.3.src.rpm</filename>
        </package>
        <package name="pulseaudio" epoch="0" version="15.0" release="150400.4.2.2" arch="src" src="src/pulseaudio-15.0-150400.4.2.2.src.rpm">
          <filename>pulseaudio-15.0-150400.4.2.2.src.rpm</filename>
        </package>
        <package name="system-user-pulse" epoch="0" version="15.0" release="150400.4.2.2" arch="noarch" src="noarch/system-user-pulse-15.0-150400.4.2.2.noarch.rpm">
          <filename>system-user-pulse-15.0-150400.4.2.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3514</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693576276"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158763" id="1158763" title="libzypp: /var/lib/YaST2/cookies is world readable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213231" id="1213231" title="ZYPPER_EXIT_ZYPP_LOCKED returns 7. even though $ZYPP_LOCK_TIMEOUT =1 is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210740" id="1210740" title="SUSE Repository Errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213557" id="1213557" title="&quot;zypper dup --no-allow-vendor-change --force-resolution&quot; does not prevent the packages to be dup'ed from foreign repos" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213673" id="1213673" title="OES containers channel sync failed" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Fix occasional isue with downloading very small files (bsc#1213673)
- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Fix OES synchronization issues when cookie file has mode 0600 (bsc#1158763)
- Don't cleanup orphaned dirs if read-only mode was promised (bsc#1210740)
- Revised explanation of --force-resolution in man page (bsc#1213557)
- Print summary hint if policies were violated due to --force-resolution (bsc#1213557)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.20" release="150400.3.40.1" arch="src" src="src/libzypp-17.31.20-150400.3.40.1.src.rpm">
          <filename>libzypp-17.31.20-150400.3.40.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.20" release="150400.3.40.1" arch="x86_64" src="x86_64/libzypp-17.31.20-150400.3.40.1.x86_64.rpm">
          <filename>libzypp-17.31.20-150400.3.40.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.63" release="150400.3.29.1" arch="src" src="src/zypper-1.14.63-150400.3.29.1.src.rpm">
          <filename>zypper-1.14.63-150400.3.29.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.63" release="150400.3.29.1" arch="x86_64" src="x86_64/zypper-1.14.63-150400.3.29.1.x86_64.rpm">
          <filename>zypper-1.14.63-150400.3.29.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.63" release="150400.3.29.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.63-150400.3.29.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.63-150400.3.29.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.20" release="150400.3.40.1" arch="s390x" src="s390x/libzypp-17.31.20-150400.3.40.1.s390x.rpm">
          <filename>libzypp-17.31.20-150400.3.40.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.63" release="150400.3.29.1" arch="s390x" src="s390x/zypper-1.14.63-150400.3.29.1.s390x.rpm">
          <filename>zypper-1.14.63-150400.3.29.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.20" release="150400.3.40.1" arch="aarch64" src="aarch64/libzypp-17.31.20-150400.3.40.1.aarch64.rpm">
          <filename>libzypp-17.31.20-150400.3.40.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.63" release="150400.3.29.1" arch="aarch64" src="aarch64/zypper-1.14.63-150400.3.29.1.aarch64.rpm">
          <filename>zypper-1.14.63-150400.3.29.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3451</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693217766"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208194" id="1208194" title="Mount path 'xyz' too long to fit into unit name, ignoring mount point" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186606" id="1186606" title="`systemctl hibernate` triggers hibernation even if the wake-up is not configured" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211576" id="1211576" title="Server hangs on shutdown: &quot;Failed to unmount /usr: Device or resource busy&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209741" id="1209741" title="pam session keyring creating during KDE GUI login not available to cifscreds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210702" id="1210702" title="Update keyboard layouts 'korean' and 'arabic'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194609" id="1194609" title="Console fallback for non-Latin keyboard layouts needed in kbd.rpm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213575" id="1213575" title="Fail to reboot when using Intel VROC raid and xfs filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212434" id="1212434" title="Reboot hangs when trying to stop md partitions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213185" id="1213185" title="Problem involving systemd and udev after SUSE-RU-2023:2240-1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213873" id="1213873" title="Mounting 100+ disks in fstab with udisks2 results in recovery prompt at boot" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- Fix reboot and shutdown issues by getting only active MD arrays (bsc#1211576, bsc#1212434, bsc#1213575)
- Decrease devlink priority for iso disks (bsc#1213185)
- Do not ignore mount point paths longer than 255 characters (bsc#1208194)
- Refuse hibernation if there's no possible way to resume (bsc#1186606)
- Update 'korean' and 'arabic' keyboard layouts (bsc#1210702)
- Drop some entries no longer needed by YaST (bsc#1194609)
- The &quot;systemd --user&quot; instances get their own session keyring instead of the user default one (bsc#1209741)
- Dynamically allocate receive buffer to handle large amount of mounts (bsc#1213873)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/libsystemd0-249.16-150400.8.33.1.x86_64.rpm">
          <filename>libsystemd0-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/libudev1-249.16-150400.8.33.1.x86_64.rpm">
          <filename>libudev1-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.33.1" arch="src" src="src/systemd-249.16-150400.8.33.1.src.rpm">
          <filename>systemd-249.16-150400.8.33.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/systemd-249.16-150400.8.33.1.x86_64.rpm">
          <filename>systemd-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/systemd-container-249.16-150400.8.33.1.x86_64.rpm">
          <filename>systemd-container-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.16-150400.8.33.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.16-150400.8.33.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.33.1" arch="x86_64" src="x86_64/udev-249.16-150400.8.33.1.x86_64.rpm">
          <filename>udev-249.16-150400.8.33.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/libsystemd0-249.16-150400.8.33.1.s390x.rpm">
          <filename>libsystemd0-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/libudev1-249.16-150400.8.33.1.s390x.rpm">
          <filename>libudev1-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/systemd-249.16-150400.8.33.1.s390x.rpm">
          <filename>systemd-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/systemd-container-249.16-150400.8.33.1.s390x.rpm">
          <filename>systemd-container-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/systemd-journal-remote-249.16-150400.8.33.1.s390x.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/systemd-sysvinit-249.16-150400.8.33.1.s390x.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.33.1" arch="s390x" src="s390x/udev-249.16-150400.8.33.1.s390x.rpm">
          <filename>udev-249.16-150400.8.33.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/libsystemd0-249.16-150400.8.33.1.aarch64.rpm">
          <filename>libsystemd0-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/libudev1-249.16-150400.8.33.1.aarch64.rpm">
          <filename>libudev1-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/systemd-249.16-150400.8.33.1.aarch64.rpm">
          <filename>systemd-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/systemd-container-249.16-150400.8.33.1.aarch64.rpm">
          <filename>systemd-container-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.16-150400.8.33.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.16-150400.8.33.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.33.1" arch="aarch64" src="aarch64/udev-249.16-150400.8.33.1.aarch64.rpm">
          <filename>udev-249.16-150400.8.33.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3470</id>
    <title>Recommended update for parted</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693299213"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193412" id="1193412" title="parted/aarch64 Assertion (0) at ui.c:358 in function sa_sigsegv_handler() failed." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182142" id="1182142" title="update parted man pages to latest release" type="bugzilla"/>
    </references>
    <description>This update for parted fixes the following issues:

- fix null pointer dereference (bsc#1193412)
- update mkpart options in manpage (bsc#1182142)
</description>
    <pkglist>
      <collection>
        <package name="libparted0" epoch="0" version="3.2" release="150300.21.3.1" arch="x86_64" src="x86_64/libparted0-3.2-150300.21.3.1.x86_64.rpm">
          <filename>libparted0-3.2-150300.21.3.1.x86_64.rpm</filename>
        </package>
        <package name="parted" epoch="0" version="3.2" release="150300.21.3.1" arch="src" src="src/parted-3.2-150300.21.3.1.src.rpm">
          <filename>parted-3.2-150300.21.3.1.src.rpm</filename>
        </package>
        <package name="parted" epoch="0" version="3.2" release="150300.21.3.1" arch="x86_64" src="x86_64/parted-3.2-150300.21.3.1.x86_64.rpm">
          <filename>parted-3.2-150300.21.3.1.x86_64.rpm</filename>
        </package>
        <package name="libparted0" epoch="0" version="3.2" release="150300.21.3.1" arch="s390x" src="s390x/libparted0-3.2-150300.21.3.1.s390x.rpm">
          <filename>libparted0-3.2-150300.21.3.1.s390x.rpm</filename>
        </package>
        <package name="parted" epoch="0" version="3.2" release="150300.21.3.1" arch="s390x" src="s390x/parted-3.2-150300.21.3.1.s390x.rpm">
          <filename>parted-3.2-150300.21.3.1.s390x.rpm</filename>
        </package>
        <package name="libparted0" epoch="0" version="3.2" release="150300.21.3.1" arch="aarch64" src="aarch64/libparted0-3.2-150300.21.3.1.aarch64.rpm">
          <filename>libparted0-3.2-150300.21.3.1.aarch64.rpm</filename>
        </package>
        <package name="parted" epoch="0" version="3.2" release="150300.21.3.1" arch="aarch64" src="aarch64/parted-3.2-150300.21.3.1.aarch64.rpm">
          <filename>parted-3.2-150300.21.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3270</id>
    <title>Recommended update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691688934"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211461" id="1211461" title="vim &quot;eats&quot; first character from prompt in xterm" type="bugzilla"/>
    </references>
    <description>This update for vim fixes the following issues:

- Calling vim on xterm leads to missing first character of the command prompt (bsc#1211461)
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1572" release="150000.5.49.1" arch="src" src="src/vim-9.0.1572-150000.5.49.1.src.rpm">
          <filename>vim-9.0.1572-150000.5.49.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1572" release="150000.5.49.1" arch="noarch" src="noarch/vim-data-common-9.0.1572-150000.5.49.1.noarch.rpm">
          <filename>vim-data-common-9.0.1572-150000.5.49.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.49.1" arch="x86_64" src="x86_64/vim-small-9.0.1572-150000.5.49.1.x86_64.rpm">
          <filename>vim-small-9.0.1572-150000.5.49.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.49.1" arch="s390x" src="s390x/vim-small-9.0.1572-150000.5.49.1.s390x.rpm">
          <filename>vim-small-9.0.1572-150000.5.49.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1572" release="150000.5.49.1" arch="aarch64" src="aarch64/vim-small-9.0.1572-150000.5.49.1.aarch64.rpm">
          <filename>vim-small-9.0.1572-150000.5.49.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3261</id>
    <title>Recommended update for netcontrol</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691676167"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213349" id="1213349" title="Scripts hang when running virsh iface-list on SLES 15 SP5 ARM system." type="bugzilla"/>
    </references>
    <description>This update for netcontrol fixes the following issues:

- Fix EOF handling in xml-reader to avoid `virsh iface-*` commands 
  hang on aarch64 (bsc#1213349)
</description>
    <pkglist>
      <collection>
        <package name="libnetcontrol0" epoch="0" version="0.3.2" release="150200.10.8.1" arch="x86_64" src="x86_64/libnetcontrol0-0.3.2-150200.10.8.1.x86_64.rpm">
          <filename>libnetcontrol0-0.3.2-150200.10.8.1.x86_64.rpm</filename>
        </package>
        <package name="netcontrol" epoch="0" version="0.3.2" release="150200.10.8.1" arch="src" src="src/netcontrol-0.3.2-150200.10.8.1.src.rpm">
          <filename>netcontrol-0.3.2-150200.10.8.1.src.rpm</filename>
        </package>
        <package name="libnetcontrol0" epoch="0" version="0.3.2" release="150200.10.8.1" arch="s390x" src="s390x/libnetcontrol0-0.3.2-150200.10.8.1.s390x.rpm">
          <filename>libnetcontrol0-0.3.2-150200.10.8.1.s390x.rpm</filename>
        </package>
        <package name="libnetcontrol0" epoch="0" version="0.3.2" release="150200.10.8.1" arch="aarch64" src="aarch64/libnetcontrol0-0.3.2-150200.10.8.1.aarch64.rpm">
          <filename>libnetcontrol0-0.3.2-150200.10.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3244</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692809201"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213853" id="1213853" title="VUL-0: CVE-2023-3817: openssl: Excessive time spent checking DH q parameter value" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" id="CVE-2023-3817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" type="cve"/>
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.34.1" arch="x86_64" src="x86_64/libopenssl3-3.0.8-150400.4.34.1.x86_64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.34.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.0.8" release="150400.4.34.1" arch="src" src="src/openssl-3-3.0.8-150400.4.34.1.src.rpm">
          <filename>openssl-3-3.0.8-150400.4.34.1.src.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.34.1" arch="s390x" src="s390x/libopenssl3-3.0.8-150400.4.34.1.s390x.rpm">
          <filename>libopenssl3-3.0.8-150400.4.34.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.34.1" arch="ppc64le" src="ppc64le/libopenssl3-3.0.8-150400.4.34.1.ppc64le.rpm">
          <filename>libopenssl3-3.0.8-150400.4.34.1.ppc64le.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.34.1" arch="aarch64" src="aarch64/libopenssl3-3.0.8-150400.4.34.1.aarch64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3221</id>
    <title>Security update for gstreamer-plugins-base</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691437432"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213128" id="1213128" title="VUL-0: CVE-2023-37327: gstreamer-plugins-good,gstreamer-plugins-base,gstreamer-0_10-plugins-good: GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213131" id="1213131" title="VUL-0: CVE-2023-37328: gstreamer-0_10-plugins-bad,gstreamer-plugins-bad: GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37327" id="CVE-2023-37327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37328" id="CVE-2023-37328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37328" type="cve"/>
    </references>
    <description>This update for gstreamer-plugins-base fixes the following issues:

- CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128). 
- CVE-2023-37328: Fixed Heap-based Buffer Overflow in GStreamer PGS (bsc#1213131).
</description>
    <pkglist>
      <collection>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.3.1" arch="src" src="src/gstreamer-plugins-base-1.20.1-150400.3.3.1.src.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstallocators-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstallocators-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstapp-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstapp-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstaudio-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstaudio-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstgl-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstgl-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstriff-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstriff-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgsttag-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgsttag-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="x86_64" src="x86_64/libgstvideo-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm">
          <filename>libgstvideo-1_0-0-1.20.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/gstreamer-plugins-base-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstallocators-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstallocators-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstapp-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstapp-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstaudio-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstaudio-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstgl-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstgl-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstpbutils-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstpbutils-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstriff-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstriff-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgsttag-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgsttag-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="s390x" src="s390x/libgstvideo-1_0-0-1.20.1-150400.3.3.1.s390x.rpm">
          <filename>libgstvideo-1_0-0-1.20.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/gstreamer-plugins-base-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstallocators-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstallocators-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstapp-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstapp-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstaudio-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstaudio-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstgl-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstgl-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstpbutils-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstpbutils-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstriff-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstriff-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgsttag-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgsttag-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.20.1" release="150400.3.3.1" arch="aarch64" src="aarch64/libgstvideo-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm">
          <filename>libgstvideo-1_0-0-1.20.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3238</id>
    <title>Security update for bluez</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691511501"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192760" id="1192760" title="VUL-1: CVE-2021-41229: bluez: memory leak in the SDP protocol handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41229" id="CVE-2021-41229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41229" type="cve"/>
    </references>
    <description>This update for bluez fixes the following issues:

- CVE-2021-41229: Fix leaking buffers stored in cstates cache. (bsc#1192760)
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.62" release="150400.4.16.1" arch="src" src="src/bluez-5.62-150400.4.16.1.src.rpm">
          <filename>bluez-5.62-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.16.1" arch="x86_64" src="x86_64/libbluetooth3-5.62-150400.4.16.1.x86_64.rpm">
          <filename>libbluetooth3-5.62-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.16.1" arch="s390x" src="s390x/libbluetooth3-5.62-150400.4.16.1.s390x.rpm">
          <filename>libbluetooth3-5.62-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.16.1" arch="aarch64" src="aarch64/libbluetooth3-5.62-150400.4.16.1.aarch64.rpm">
          <filename>libbluetooth3-5.62-150400.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3234</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1691511345"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213001" id="1213001" title="VUL-0: CVE-2023-3255: qemu,kvm: VNC: infinite loop in inflate_buffer() leads to denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213414" id="1213414" title="VUL-0: CVE-2023-3301: qemu: vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212968" id="1212968" title="VUL-0: CVE-2023-2861: qemu,kvm: 9pfs: improper access control on special files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3301" id="CVE-2023-3301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3301" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2861" id="CVE-2023-2861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2861" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3255" id="CVE-2023-3255" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3255" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968).
- CVE-2023-3301: Fixed NULL pointer dereference in vhost_vdpa_get_vhost_net() (bsc#1213414).
- CVE-2023-3255: Fixed infinite loop in inflate_buffer() leads to denial of service (bsc#1213001). 
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="src" src="src/qemu-6.2.0-150400.37.20.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.20.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.20.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.20.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.20.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.20.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.20.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.20.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.20.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.20.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.20.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.20.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.20.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.20.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.20.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.20.1" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.20.1.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.20.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.20.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.20.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3313</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692027382"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206418" id="1206418" title="VUL-0: EMBARGOED: CVE-2022-40982: transient execution attack &quot;Gather Data Sampling&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207129" id="1207129" title="A few problems in Microsoft Modern Wireless headset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210627" id="1210627" title="VUL-0: CVE-2023-2166: kernel: NULL pointer dereference in can_rcv_filter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210780" id="1210780" title="VUL-0: CVE-2023-31083: kernel: drivers/bluetooth/hci_ldisc.c race condition in hci_uart_tty_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211131" id="1211131" title="VUL-0: CVE-2023-2156: kernel-source-rt,kernel-source,kernel-source-azure: Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211738" id="1211738" title="VUL-0: CVE-2023-0459: kernel-source-azure,kernel-source-rt,kernel-source: Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the &quot;access_ok&quot; check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212502" id="1212502" title="VUL-0: CVE-2023-3268: kernel: out-of-bounds access in relay_file_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212604" id="1212604" title="BUG: kernel NULL pointer dereference with mthca_poll_cq (infiniband NIC)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212901" id="1212901" title="[MSFT][MANA] Fix doorbell access for receive queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213167" id="1213167" title="VUL-0: CVE-2023-3567: kernel-source,kernel-source-rt,kernel-source-azure: use after free in vcs_read() in the vc_screen driver due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213272" id="1213272" title="VUL-0: CVE-2023-21400: kernel: In multiple functions of io_uring.c possible kernel memory corruption due to improper locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213287" id="1213287" title="VUL-0: EMBARGOED: CVE-2023-20569: AMD CPU: &quot;Inception&quot; issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213304" id="1213304" title="Displays Crash After Logging Into System" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213585" id="1213585" title="VUL-0: CVE-2023-3611: kernel-source-rt,kernel-source,kernel-source-azure: out-of-bounds read/write due to an unbounded overhead value in interface size table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213586" id="1213586" title="VUL-0: CVE-2023-3609: kernel: use-after-free in net/sched: cls_u32 can lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213588" id="1213588" title="VUL-0: CVE-2023-3776: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free vulnerability the cls_fw component" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213620" id="1213620" title="kernel oops:  Unable to handle kernel paging request at virtual address 0000000000001ea0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213653" id="1213653" title="L3: bfq RIP: bfqq_request_over_limit+732" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213713" id="1213713" title="s390/qeth: Fix vipa deletion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213715" id="1213715" title="s390/vmem: fix empty page tables cleanup under KASAN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213747" id="1213747" title="qla2xxx: update driver to 10.02.08.500-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213756" id="1213756" title="Update Broadcom Emulex lpfc driver to 14.2.0.14" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213777" id="1213777" title="Desktop crash after showing X server screen for 2 seconds under 5.14.21-150400.24.69" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213810" id="1213810" title="s390/dasd: fix hanging device after quiesce/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213812" id="1213812" title="VUL-0: CVE-2023-4004: kernel: netfilter: nft_set_pipapo: improper element removal in function nft_pipapo_remove when insert an element without a NFT_SET_EXT_KEY_END that can lead to use-af" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213842" id="1213842" title="CVE-L3: SLE11-SP4-RT: kernel-rt - CVE-2023-1077, CVE-2023-1118, CVE-2023-1989, CVE-2023-2162, CVE-2023-2176, CVE-2023-31436, CVE-2023-3159, CVE-2023-3338, CVE-2023-3567" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213856" id="1213856" title="ceph: don't let check_caps skip sending responses for revoke msgs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213857" id="1213857" title="libceph: harden msgr2.1 frame segment length checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213863" id="1213863" title="s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213867" id="1213867" title="KVM: s390: pv: fix index value of replaced ASCE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213870" id="1213870" title="s390/bpf: Add expoline to tail calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213871" id="1213871" title="s390/ipl: add missing intersection check to ipl_report handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268" id="CVE-2023-3268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2166" id="CVE-2023-2166" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2166" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459" id="CVE-2023-0459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004" id="CVE-2023-4004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" id="CVE-2023-2156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" id="CVE-2023-20569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21400" id="CVE-2023-21400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776" id="CVE-2023-3776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567" id="CVE-2023-3567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31083" id="CVE-2023-31083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3609" id="CVE-2023-3609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3611" id="CVE-2023-3611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" id="CVE-2022-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-40982: Fixed transient execution attack called &quot;Gather Data Sampling&quot; (bsc#1206418).
- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
- CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
- CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
- CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).
- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).
- CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

- afs: Fix access after dec in put functions (git-fixes).
- afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
- afs: Fix dynamic root getattr (git-fixes).
- afs: Fix fileserver probe RTT handling (git-fixes).
- afs: Fix infinite loop found by xfstest generic/676 (git-fixes).
- afs: Fix lost servers_outstanding count (git-fixes).
- afs: Fix server-&gt;active leak in afs_put_server (git-fixes).
- afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes).
- afs: Fix updating of i_size with dv jump from server (git-fixes).
- afs: Fix vlserver probe RTT handling (git-fixes).
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes).
- afs: Use refcount_t rather than atomic_t (git-fixes).
- afs: Use the operation issue time instead of the reply time for callbacks (git-fixes).
- afs: adjust ack interpretation to try and cope with nat (git-fixes).
- alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).
- alsa: hda/realtek: support asus g713pv laptop (git-fixes).
- alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes).
- alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129).
- alsa: usb-audio: update for native dsd support quirks (git-fixes).
- asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes).
- asoc: codecs: es8316: fix dmic config (git-fixes).
- asoc: da7219: check for failure reading aad irq events (git-fixes).
- asoc: da7219: flush pending aad irq when suspending (git-fixes).
- asoc: fsl_sai: disable bit clock with transmitter (git-fixes).
- asoc: fsl_spdif: silence output on stop (git-fixes).
- asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes).
- asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes).
- asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes).
- asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes).
- ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).
- block, bfq: Fix division by zero error on zero wsum (bsc#1213653).
- block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).
- can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes).
- ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).
- coda: Avoid partial allocation of sig_inputArgs (git-fixes).
- dlm: fix missing lkb refcount handling (git-fixes).
- dlm: fix plock invalid read (git-fixes).
- documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes).
- drm/amd/display: Disable MPC split by default on special asic (git-fixes).
- drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes).
- drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes).
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes).
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes).
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes).
- drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes).
- file: always lock position for FMODE_ATOMIC_POS (bsc#1213759).
- fs: dlm: add midcomms init/start functions (git-fixes).
- fs: dlm: do not set stop rx flag after node reset (git-fixes).
- fs: dlm: filter user dlm messages for kernel locks (git-fixes).
- fs: dlm: fix log of lowcomms vs midcomms (git-fixes).
- fs: dlm: fix race between test_bit() and queue_work() (git-fixes).
- fs: dlm: fix race in lowcomms (git-fixes).
- fs: dlm: handle -EBUSY first in lock arg validation (git-fixes).
- fs: dlm: move sending fin message into state change handling (git-fixes).
- fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes).
- fs: dlm: return positive pid value for F_GETLK (git-fixes).
- fs: dlm: start midcomms before scand (git-fixes).
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes).
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes).
- fs: jfs: check for read-only mounted filesystem in txbegin (git-fixes).
- fs: jfs: fix null-ptr-deref read in txbegin (git-fixes).
- gve: Set default duplex configuration to full (git-fixes).
- gve: unify driver name usage (git-fixes).
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes).
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes).
- iavf: Fix out-of-bounds when setting channels on remove (git-fixes).
- iavf: Fix use-after-free in free_netdev (git-fixes).
- iavf: use internal state to free traffic IRQs (git-fixes).
- igc: Check if hardware TX timestamping is enabled earlier (git-fixes).
- igc: Enable and fix RX hash usage by netstack (git-fixes).
- igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes).
- igc: Fix inserting of empty frame for launchtime (git-fixes).
- igc: Fix launchtime before start of cycle (git-fixes).
- igc: Fix race condition in PTP tx code (git-fixes).
- igc: Handle PPS start time programming for past time values (git-fixes).
- igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes).
- igc: Remove delay during TX ring configuration (git-fixes).
- igc: Work around HW bug causing missing timestamps (git-fixes).
- igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes).
- input: i8042 - add clevo pcx0dx to i8042 quirk table (git-fixes).
- input: iqs269a - do not poll during ati (git-fixes).
- input: iqs269a - do not poll during suspend or resume (git-fixes).
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes).
- jffs2: fix memory leak in jffs2_do_fill_super (git-fixes).
- jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes).
- jffs2: fix memory leak in jffs2_scan_medium (git-fixes).
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes).
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes).
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes).
- kvm: arm64: do not read a hw interrupt pending state in user context (git-fixes)
- kvm: arm64: warn if accessing timer pending state outside of vcpu (bsc#1213620)
- kvm: do not null dereference ops-&gt;destroy (git-fixes)
- kvm: downgrade two bug_ons to warn_on_once (git-fixes)
- kvm: initialize debugfs_dentry when a vm is created to avoid null (git-fixes)
- kvm: s390: pv: fix index value of replaced asce (git-fixes bsc#1213867).
- kvm: vmx: inject #gp on encls if vcpu has paging disabled (cr0.pg==0) (git-fixes).
- kvm: vmx: inject #gp, not #ud, if sgx2 encls leafs are unsupported (git-fixes).
- kvm: vmx: restore vmx_vmexit alignment (git-fixes).
- kvm: x86: account fastpath-only vm-exits in vcpu stats (git-fixes).
- libceph: harden msgr2.1 frame segment length checks (bsc#1213857).
- media: staging: atomisp: select V4L2_FWNODE (git-fixes).
- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
- net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585).
- net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes).
- net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901).
- net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901).
- net: phy: marvell10g: fix 88x3310 power up (git-fixes).
- nfsd: add encoding of op_recall flag for write delegation (git-fixes).
- nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes).
- nfsd: fix sparse warning (git-fixes).
- nfsd: remove open coding of string copy (git-fixes).
- nfsv4.1: always send a reclaim_complete after establishing lease (git-fixes).
- nfsv4.1: freeze the session table upon receiving nfs4err_badsession (git-fixes).
- nvme-pci: fix DMA direction of unmapping integrity data (git-fixes).
- nvme-pci: remove nvme_queue from nvme_iod (git-fixes).
- octeontx-af: fix hardware timestamp configuration (git-fixes).
- octeontx2-af: Move validation of ptp pointer before its usage (git-fixes).
- octeontx2-pf: Add additional check for MCAM rules (git-fixes).
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes).
- pinctrl: amd: Do not show `Invalid config param` errors (git-fixes).
- pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes).
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes).
- rdma/bnxt_re: fix hang during driver unload (git-fixes)
- rdma/bnxt_re: prevent handling any completions after qp destroy (git-fixes)
- rdma/core: update cma destination address on rdma_resolve_addr (git-fixes)
- rdma/irdma: add missing read barriers (git-fixes)
- rdma/irdma: fix data race on cqp completion stats (git-fixes)
- rdma/irdma: fix data race on cqp request done (git-fixes)
- rdma/irdma: fix op_type reporting in cqes (git-fixes)
- rdma/irdma: report correct wc error (git-fixes)
- rdma/mlx4: make check for invalid flags stricter (git-fixes)
- rdma/mthca: fix crash when polling cq for shared qps (git-fixes)
- regmap: Account for register length in SMBus I/O limits (git-fixes).
- regmap: Drop initial version of maximum transfer length fixes (git-fixes).
- revert &quot;debugfs, coccinelle: check for obsolete define_simple_attribute() usage&quot; (git-fixes).
- revert &quot;nfsv4: retry lock on old_stateid during delegation return&quot; (git-fixes).
- revert &quot;usb: dwc3: core: enable autoretry feature in the controller&quot; (git-fixes).
- revert &quot;usb: gadget: tegra-xudc: fix error check in tegra_xudc_powerdomain_init()&quot; (git-fixes).
- revert &quot;usb: xhci: tegra: fix error check&quot; (git-fixes).
- revert &quot;xhci: add quirk for host controllers that do not update endpoint dcs&quot; (git-fixes).
- rxrpc, afs: Fix selection of abort codes (git-fixes).
- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810).
- s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863).
- s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871).
- s390/qeth: Fix vipa deletion (git-fixes bsc#1213713).
- s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715).
- s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870).
- scftorture: Count reschedule IPIs (git-fixes).
- scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756).
- scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756).
- scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756).
- scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756).
- scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756).
- scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756).
- scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756).
- scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756).
- scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756).
- scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756).
- scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756).
- scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756).
- scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756).
- scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756).
- scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756).
- scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756).
- scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756).
- scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756).
- scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756).
- scsi: lpfc: Use struct_size() helper (bsc#1213756).
- scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747).
- scsi: qla2xxx: Array index may go out of bound (bsc#1213747).
- scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747).
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747).
- scsi: qla2xxx: Correct the index of array (bsc#1213747).
- scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747).
- scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747).
- scsi: qla2xxx: Fix TMF leak through (bsc#1213747).
- scsi: qla2xxx: Fix buffer overrun (bsc#1213747).
- scsi: qla2xxx: Fix command flush during TMF (bsc#1213747).
- scsi: qla2xxx: Fix deletion race condition (bsc#1213747).
- scsi: qla2xxx: Fix end of loop test (bsc#1213747).
- scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747).
- scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747).
- scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747).
- scsi: qla2xxx: Fix session hang in gnl (bsc#1213747).
- scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747).
- scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747).
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747).
- scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747).
- scsi: qla2xxx: Silence a static checker warning (bsc#1213747).
- scsi: qla2xxx: Turn off noisy message log (bsc#1213747).
- scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747).
- scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747).
- scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747).
- scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747).
- serial: qcom-geni: drop bogus runtime pm state update (git-fixes).
- serial: sifive: Fix sifive_serial_console_setup() section (git-fixes).
- soundwire: qcom: update status correctly with mask (git-fixes).
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes).
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes).
- sunrpc: always free ctxt when freeing deferred request (git-fixes).
- sunrpc: double free xprt_ctxt while still in use (git-fixes).
- sunrpc: fix trace_svc_register() call site (git-fixes).
- sunrpc: fix uaf in svc_tcp_listen_data_ready() (git-fixes).
- sunrpc: remove dead code in svc_tcp_release_rqst() (git-fixes).
- sunrpc: remove the maximum number of retries in call_bind_status (git-fixes).
- svcrdma: Prevent page release when nothing was received (git-fixes).
- tpm_tis: Explicitly check for error code (git-fixes).
- tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes).
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes).
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes).
- ubifs: Fix 'ui-&gt;dirty' race between do_tmpfile() and writeback work (git-fixes).
- ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes).
- ubifs: Fix build errors as symbol undefined (git-fixes).
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes).
- ubifs: Fix memory leak in alloc_wbufs() (git-fixes).
- ubifs: Fix memory leak in do_rename (git-fixes).
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes).
- ubifs: Fix to add refcount once page is set private (git-fixes).
- ubifs: Fix wrong dirty space budget for dirty inode (git-fixes).
- ubifs: Free memory for tmpfile name (git-fixes).
- ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes).
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes).
- ubifs: Rectify space budget for ubifs_xrename() (git-fixes).
- ubifs: Rename whiteout atomically (git-fixes).
- ubifs: Reserve one leb for each journal head while doing budget (git-fixes).
- ubifs: do_rename: Fix wrong space budget when target inode's nlink &gt; 1 (git-fixes).
- ubifs: rename_whiteout: Fix double free for whiteout_ui-&gt;data (git-fixes).
- ubifs: rename_whiteout: correct old_dir size computing (git-fixes).
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes).
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes).
- usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes).
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes).
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes).
- usb: xhci-mtk: set the dma max_seg_size (git-fixes).
- vhost: support PACKED when setting-getting vring_base (git-fixes).
- vhost_net: revert upend_idx only on retriable error (git-fixes).
- virtio-net: Maintain reverse cleanup order (git-fixes).
- virtio_net: Fix error unwinding of XDP initialization (git-fixes).
- x86/PVH: obtain VGA console info in Dom0 (git-fixes).
- xen/blkfront: Only check REQ_FUA for writes (git-fixes).
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.81.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.81.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.81.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.81.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.81.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.81.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.81.1.150400.24.35.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.81.1.150400.24.35.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.81.1.150400.24.35.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.81.1.150400.24.35.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.81.1.150400.24.35.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.81.1.150400.24.35.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.81.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.81.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.81.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.81.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.81.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.81.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.81.1.150400.24.35.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.81.1.150400.24.35.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.81.1.150400.24.35.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3477</id>
    <title>Recommended update for cpuset</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693303555"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210468" id="1210468" title="Fix typo mistake &quot;--syset&quot; to &quot;--sysset&quot; in cpuset" type="bugzilla"/>
    </references>
    <description>This update for cpuset fixes the following issues:

- Fix documentation typos (bsc#1210468)
</description>
    <pkglist>
      <collection>
        <package name="cpuset" epoch="0" version="1.6.1" release="150100.3.6.1" arch="noarch" src="noarch/cpuset-1.6.1-150100.3.6.1.noarch.rpm">
          <filename>cpuset-1.6.1-150100.3.6.1.noarch.rpm</filename>
        </package>
        <package name="cpuset" epoch="0" version="1.6.1" release="150100.3.6.1" arch="src" src="src/cpuset-1.6.1-150100.3.6.1.src.rpm">
          <filename>cpuset-1.6.1-150100.3.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3318</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692088466"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1150305" id="1150305" title="SLES 15 SP1 - [SCM/PMEM/vPMEM][kernel-4.12.14-197.7-default] LPAR crashes when creating multiple namespaces with multiple regions (HMS)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206418" id="1206418" title="VUL-0: EMBARGOED: CVE-2022-40982: transient execution attack &quot;Gather Data Sampling&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207129" id="1207129" title="A few problems in Microsoft Modern Wireless headset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207894" id="1207894" title="Mellanox OFED 5.8 LTS triggers SLES 15 SP4 crash not long after loading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208788" id="1208788" title="K8S container crashes after kernel update from 4.12.14-122.144 to 4.12.14-122.147" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210565" id="1210565" title="Partner-L3: SLES 15 SP5, NVMe natively multipathing, iostat have no value on pseudo device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210584" id="1210584" title="VUL-0: kernel: buffer overflow in mtd_ubi build.c:::io_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210627" id="1210627" title="VUL-0: CVE-2023-2166: kernel: NULL pointer dereference in can_rcv_filter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210780" id="1210780" title="VUL-0: CVE-2023-31083: kernel: drivers/bluetooth/hci_ldisc.c race condition in hci_uart_tty_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210853" id="1210853" title="[NDA] [RFE] SLES15 launch issue on new instance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211131" id="1211131" title="VUL-0: CVE-2023-2156: kernel-source-rt,kernel-source,kernel-source-azure: Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211243" id="1211243" title="HPE/OEM Nvidia/Mellanox mlx5_core driver panic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211738" id="1211738" title="VUL-0: CVE-2023-0459: kernel-source-azure,kernel-source-rt,kernel-source: Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the &quot;access_ok&quot; check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211811" id="1211811" title="XFS  Internal error ltbno + ltlen &gt; bno at line 1940 of file ../fs/xfs/libxfs/xfs_alloc.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211867" id="1211867" title="VUL-0: CVE-2023-2985: kernel-source-azure,kernel-source,kernel-source-rt: hfs: use-after-free issue in hfsplus_release_folio in fs/hfsplus/super.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212301" id="1212301" title="[Azure][MANA][VLANTagging] Support for VLAN Tagging for MANA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212502" id="1212502" title="VUL-0: CVE-2023-3268: kernel: out-of-bounds access in relay_file_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212604" id="1212604" title="BUG: kernel NULL pointer dereference with mthca_poll_cq (infiniband NIC)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212846" id="1212846" title="VUL-0: CVE-2023-3390: kernel-source-azure,kernel-source-rt,kernel-source: use-after-free in the netfilter subsystem in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212901" id="1212901" title="[MSFT][MANA] Fix doorbell access for receive queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212905" id="1212905" title="L3: Docker crash after upgrading to 4.12.14-122.150" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213010" id="1213010" title="[PATCH] ext4: fail ext4_iget if special inode unallocated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213011" id="1213011" title="[PATCH] ext4: move where set the MAY_INLINE_DATA flag is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213012" id="1213012" title="[PATCH] ext4: fix WARNING in ext4_update_inline_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213013" id="1213013" title="[PATCH] ext4: zero i_disksize when initializing the bootloader inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213014" id="1213014" title="[PATCH] jdb2: Don't refuse invalidation of already invalidated  buffers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213015" id="1213015" title="[PATCH] ext4: fix i_disksize exceeding i_size problem in paritally  written case" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213016" id="1213016" title="[PATCH] ext4: avoid deadlock in fs reclaim with page writeback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213017" id="1213017" title="[PATCH] ext4: improve error recovery code paths in __ext4_remount()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213018" id="1213018" title="[PATCH] ext4: bail out of ext4_xattr_ibody_get() fails for any reason" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213019" id="1213019" title="[PATCH] ext4: only update i_reserved_data_blocks on successful block  allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213020" id="1213020" title="[PATCH] ext4: Fix reusing stale buffer heads from last failed  mounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213021" id="1213021" title="[PATCH] ext4: fix to check return value of freeze_bdev() in  ext4_shutdown()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213024" id="1213024" title="[PATCH] writeback: fix call of incorrect macro" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213025" id="1213025" title="[PATCH] inotify: Avoid reporting event with invalid wd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213032" id="1213032" title="[PATCH] udf: Avoid double brelse() in udf_rename()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213034" id="1213034" title="[PATCH] udf: Fix preallocation discarding at indirect extent boundary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213035" id="1213035" title="[PATCH] udf: Do not bother looking for prealloc extents if  i_lenExtents matches i_size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213036" id="1213036" title="[PATCH] udf: Discard preallocation before extending file with a hole" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213037" id="1213037" title="[PATCH] udf: Fix extending file within last block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213038" id="1213038" title="[PATCH] udf: Define EFSCORRUPTED error code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213039" id="1213039" title="[PATCH] udf: Truncate added extents on failed expansion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213040" id="1213040" title="[PATCH] udf: Do not bother merging very long extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213041" id="1213041" title="[PATCH] udf: Do not update file length for failed writes to inline  files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213059" id="1213059" title="VUL-0: CVE-2023-35001: kernel: nf_tables nft_byteorder_eval OOB read/write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213061" id="1213061" title="VUL-0: CVE-2023-31248: kernel: nf_tables UAF when using nft_chain_lookup_byid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213087" id="1213087" title="[PATCH] ext4: refactor ext4_free_blocks() to pull out  ext4_mb_clear_bb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213088" id="1213088" title="[PATCH] ext4: add ext4_sb_block_valid() refactored out of  ext4_inode_block_valid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213089" id="1213089" title="[PATCH] ext4: add strict range checks while freeing blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213090" id="1213090" title="[PATCH] ext4: block range must be validated before use in  ext4_mb_clear_bb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213092" id="1213092" title="[PATCH] ext4: use ext4_fc_tl_mem in fast-commit replay path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213093" id="1213093" title="[PATCH] ext4: refuse to create ea block when umounted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213094" id="1213094" title="[PATCH] ext4: update s_journal_inum if it changes after journal  replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213095" id="1213095" title="[PATCH] jbd2: fix data missing when reusing bh which is ready to be  checkpointed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213096" id="1213096" title="[PATCH] ext4: fix task hung in ext4_xattr_delete_inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213098" id="1213098" title="[PATCH] ext4: fix use-after-free read in ext4_find_extent for  bigalloc + inline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213099" id="1213099" title="[PATCH] ext4: fix WARNING in mb_find_extent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213100" id="1213100" title="[PATCH] ext4: fix lockdep warning when enabling MMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213102" id="1213102" title="[PATCH] ext4: fix data races when using cached status extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213103" id="1213103" title="[PATCH] ext4: check iomap type only if ext4_iomap_begin() does not  fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213104" id="1213104" title="[PATCH] ext4: improve error handling from ext4_dirhash()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213105" id="1213105" title="[PATCH] ext4: fix deadlock when converting an inline directory in  nojournal mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213106" id="1213106" title="[PATCH] ext4: add EA_INODE checking to ext4_iget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213107" id="1213107" title="[PATCH] ext4: set lockdep subclass for the ea_inode in  ext4_xattr_inode_cache_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213108" id="1213108" title="[PATCH] ext4: disallow ea_inodes with extended attributes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213109" id="1213109" title="[PATCH] ext4: add lockdep annotations for i_data_sem for ea_inode's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213110" id="1213110" title="[PATCH] ext4: turn quotas off if mount failed after enabling quotas" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213111" id="1213111" title="[PATCH] ext4: fix bug_on in __es_tree_search caused by bad quota  inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213112" id="1213112" title="[PATCH] udf: Fix error handling in udf_new_inode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213113" id="1213113" title="[PATCH] udf: Preserve link count of system files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213114" id="1213114" title="[PATCH] udf: Detect system inodes linked into directory hierarchy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213134" id="1213134" title="Sles15sp5 - drmgr command is failing [hvcs/PowerVS]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213167" id="1213167" title="VUL-0: CVE-2023-3567: kernel-source,kernel-source-rt,kernel-source-azure: use after free in vcs_read() in the vc_screen driver due to race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213245" id="1213245" title="VUL-0: CVE-2023-3117: kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213247" id="1213247" title="s390: discard .interp section" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213252" id="1213252" title="s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213258" id="1213258" title="s390/ap: fix status returned by ap_qact()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213259" id="1213259" title="s390/ap: fix status returned by ap_aqic()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213263" id="1213263" title="s390/debug: add _ASM_S390_ prefix to header guard" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213264" id="1213264" title="s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt;  2.36" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213272" id="1213272" title="VUL-0: CVE-2023-21400: kernel: In multiple functions of io_uring.c possible kernel memory corruption due to improper locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213286" id="1213286" title="VUL-0: CVE-2023-20593: kernel,kernel-firmware: AMD CPU: &quot;ZenBleed&quot;: VZEROUPPER does not clear upper bits under certain conditions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213287" id="1213287" title="VUL-0: EMBARGOED: CVE-2023-20569: AMD CPU: &quot;Inception&quot; issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213304" id="1213304" title="Displays Crash After Logging Into System" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213523" id="1213523" title="fuse: revalidate: don't invalidate if interrupted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213524" id="1213524" title="fuse: ioctl: translate ENOSYS in outarg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213543" id="1213543" title="VUL-0: CVE-2023-3812: kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213585" id="1213585" title="VUL-0: CVE-2023-3611: kernel-source-rt,kernel-source,kernel-source-azure: out-of-bounds read/write due to an unbounded overhead value in interface size table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213586" id="1213586" title="VUL-0: CVE-2023-3609: kernel: use-after-free in net/sched: cls_u32 can lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213588" id="1213588" title="VUL-0: CVE-2023-3776: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free vulnerability the cls_fw component" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213620" id="1213620" title="kernel oops:  Unable to handle kernel paging request at virtual address 0000000000001ea0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213653" id="1213653" title="L3: bfq RIP: bfqq_request_over_limit+732" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213705" id="1213705" title="Kernel update 29917 breaks k3s on 15-SP4 and 15-SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213713" id="1213713" title="s390/qeth: Fix vipa deletion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213715" id="1213715" title="s390/vmem: fix empty page tables cleanup under KASAN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213747" id="1213747" title="qla2xxx: update driver to 10.02.08.500-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213756" id="1213756" title="Update Broadcom Emulex lpfc driver to 14.2.0.14" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213777" id="1213777" title="Desktop crash after showing X server screen for 2 seconds under 5.14.21-150400.24.69" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213810" id="1213810" title="s390/dasd: fix hanging device after quiesce/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213812" id="1213812" title="VUL-0: CVE-2023-4004: kernel: netfilter: nft_set_pipapo: improper element removal in function nft_pipapo_remove when insert an element without a NFT_SET_EXT_KEY_END that can lead to use-af" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213856" id="1213856" title="ceph: don't let check_caps skip sending responses for revoke msgs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213857" id="1213857" title="libceph: harden msgr2.1 frame segment length checks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213863" id="1213863" title="s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213867" id="1213867" title="KVM: s390: pv: fix index value of replaced ASCE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213870" id="1213870" title="s390/bpf: Add expoline to tail calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213871" id="1213871" title="s390/ipl: add missing intersection check to ipl_report handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" id="CVE-2022-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459" id="CVE-2023-0459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" id="CVE-2023-20569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" id="CVE-2023-20593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21400" id="CVE-2023-21400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" id="CVE-2023-2156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2156" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2166" id="CVE-2023-2166" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2166" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2985" id="CVE-2023-2985" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2985" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31083" id="CVE-2023-31083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" id="CVE-2023-3117" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3117" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31248" id="CVE-2023-31248" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31248" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268" id="CVE-2023-3268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3390" id="CVE-2023-3390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001" id="CVE-2023-35001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567" id="CVE-2023-3567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3609" id="CVE-2023-3609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3611" id="CVE-2023-3611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776" id="CVE-2023-3776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3812" id="CVE-2023-3812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004" id="CVE-2023-4004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004" type="cve"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-40982: Fixed transient execution attack called &quot;Gather Data Sampling&quot; (bsc#1206418).
- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
- CVE-2023-20593: Fixed a ZenBleed issue in &quot;Zen 2&quot; CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
- CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
- CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
- CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).
- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

- acpi: utils: fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).
- add module_firmware() for firmware_tg357766 (git-fixes).
- afs: adjust ack interpretation to try and cope with nat (git-fixes).
- afs: fix access after dec in put functions (git-fixes).
- afs: fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
- afs: fix dynamic root getattr (git-fixes).
- afs: fix fileserver probe rtt handling (git-fixes).
- afs: fix infinite loop found by xfstest generic/676 (git-fixes).
- afs: fix lost servers_outstanding count (git-fixes).
- afs: fix server-&gt;active leak in afs_put_server (git-fixes).
- afs: fix setting of mtime when creating a file/dir/symlink (git-fixes).
- afs: fix updating of i_size with dv jump from server (git-fixes).
- afs: fix vlserver probe rtt handling (git-fixes).
- afs: return -eagain, not -eremoteio, when a file already locked (git-fixes).
- afs: use refcount_t rather than atomic_t (git-fixes).
- afs: use the operation issue time instead of the reply time for callbacks (git-fixes).
- alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).
- alsa: fireface: make read-only const array for model names static (git-fixes).
- alsa: hda/realtek - remove 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for asus rog g614jx (git-fixes).
- alsa: hda/realtek: add quirk for asus rog ga402x (git-fixes).
- alsa: hda/realtek: add quirk for asus rog gx650p (git-fixes).
- alsa: hda/realtek: add quirk for asus rog gz301v (git-fixes).
- alsa: hda/realtek: add quirk for clevo npx0snx (git-fixes).
- alsa: hda/realtek: add quirk for clevo ns70au (git-fixes).
- alsa: hda/realtek: add quirks for unis h3c desktop b760 &amp; q760 (git-fixes).
- alsa: hda/realtek: add support for dell oasis 13/14/16 laptops (git-fixes).
- alsa: hda/realtek: amend g634 quirk to enable rear speakers (git-fixes).
- alsa: hda/realtek: enable mute led on hp laptop 15s-eq2xxx (git-fixes).
- alsa: hda/realtek: fix generic fixup definition for cs35l41 amp (git-fixes).
- alsa: hda/realtek: support asus g713pv laptop (git-fixes).
- alsa: hda/realtek: whitespace fix (git-fixes).
- alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes).
- alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).
- alsa: oxfw: make read-only const array models static (git-fixes).
- alsa: pcm: fix potential data race at pcm memory allocation helpers (git-fixes).
- alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129).
- alsa: usb-audio: update for native dsd support quirks (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).
- arm64/mm: mark private vm_fault_x defines as vm_fault_t (git-fixes)
- arm64: dts: microchip: sparx5: do not use psci on reference boards (git-fixes)
- arm64: vdso: pass (void *) to virt_to_page() (git-fixes)
- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)
- asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes).
- asoc: codecs: es8316: fix dmic config (git-fixes).
- asoc: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).
- asoc: codecs: wcd934x: fix resource leaks on component remove (git-fixes).
- asoc: codecs: wcd938x: fix codec initialisation race (git-fixes).
- asoc: codecs: wcd938x: fix db range for hphl and hphr (git-fixes).
- asoc: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).
- asoc: codecs: wcd938x: fix soundwire initialisation race (git-fixes).
- asoc: da7219: check for failure reading aad irq events (git-fixes).
- asoc: da7219: flush pending aad irq when suspending (git-fixes).
- asoc: fsl_sai: disable bit clock with transmitter (git-fixes).
- asoc: fsl_spdif: silence output on stop (git-fixes).
- asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes).
- asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes).
- asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes).
- asoc: tegra: fix adx byte map (git-fixes).
- asoc: tegra: fix amx byte map (git-fixes).
- asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes).
- ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).
- block, bfq: fix division by zero error on zero wsum (bsc#1213653).
- block: fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).
- can: bcm: fix uaf in bcm_proc_show() (git-fixes).
- can: gs_usb: gs_can_close(): add missing set of can state to can_state_stopped (git-fixes).
- ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).
- cifs: add a warning when the in-flight count goes negative (bsc#1193629).
- cifs: address unused variable warning (bsc#1193629).
- cifs: do all necessary checks for credits within or before locking (bsc#1193629).
- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).
- cifs: fix max_credits implementation (bsc#1193629).
- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).
- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).
- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).
- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).
- cifs: fix status checks in cifs_tree_connect (bsc#1193629).
- cifs: log session id when a matching ses is not found (bsc#1193629).
- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).
- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).
- cifs: print all credit counters in debugdata (bsc#1193629).
- cifs: print client_guid in debugdata (bsc#1193629).
- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).
- cifs: print nosharesock value while dumping mount options (bsc#1193629).
- clk: qcom: camcc-sc7180: add parent dependency to all camera gdscs (git-fixes).
- clk: qcom: gcc-ipq6018: use floor ops for sdcc clocks (git-fixes).
- coda: avoid partial allocation of sig_inputargs (git-fixes).
- codel: fix kernel-doc notation warnings (git-fixes).
- crypto: kpp - add helper to set reqsize (git-fixes).
- crypto: qat - use helper to set reqsize (git-fixes).
- delete suse/memcg-drop-kmem-limit_in_bytes. drop the patch in order to fix bsc#1213705.
- devlink: fix kernel-doc notation warnings (git-fixes).
- dlm: fix missing lkb refcount handling (git-fixes).
- dlm: fix plock invalid read (git-fixes).
- docs: networking: update codeaurora references for rmnet (git-fixes).
- documentation: abi: sysfs-class-net-qmi: pass_through contact update (git-fixes).
- documentation: bonding: fix the doc of peer_notif_delay (git-fixes).
- documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes).
- documentation: timers: hrtimers: make hybrid union historical (git-fixes).
- drm/amd/display: correct `dmub_fw_version` macro (git-fixes).
- drm/amd/display: disable mpc split by default on special asic (git-fixes).
- drm/amd/display: keep phy active for dp displays on dcn31 (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop (git-fixes).
- drm/amdgpu: fix clearing mappings for bos that are always valid in vm (git-fixes).
- drm/amdgpu: set vmbo destroy after pt bo is created (git-fixes).
- drm/amdgpu: validate vm ioctl flags (git-fixes).
- drm/atomic: allow vblank-enabled + self-refresh &quot;disable&quot; (git-fixes).
- drm/atomic: fix potential use-after-free in nonblocking commits (git-fixes).
- drm/bridge: tc358768: add atomic_get_input_bus_fmts() implementation (git-fixes).
- drm/bridge: tc358768: fix tclk_trailcnt computation (git-fixes).
- drm/bridge: tc358768: fix ths_trailcnt computation (git-fixes).
- drm/bridge: tc358768: fix ths_zerocnt computation (git-fixes).
- drm/client: fix memory leak in drm_client_modeset_probe (git-fixes).
- drm/client: fix memory leak in drm_client_target_cloned (git-fixes).
- drm/i915/psr: use hw.adjusted mode when calculating io/fast wake times (git-fixes).
- drm/i915: fix one wrong caching mode enum usage (git-fixes).
- drm/msm/adreno: fix snapshot bindless_data size (git-fixes).
- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes).
- drm/msm/dpu: set dpu_data_hctl_en for in intf_sc7180_mask (git-fixes).
- drm/msm: fix is_err_or_null() vs null check in a5xx_submit_in_rb() (git-fixes).
- drm/panel: simple: add connector_type for innolux_at043tn24 (git-fixes).
- drm/panel: simple: add powertip ph800480t013 drm_display_mode flags (git-fixes).
- drm/radeon: fix integer overflow in radeon_cs_parser_init (git-fixes).
- drm/ttm: do not leak a resource on swapout move error (git-fixes).
- drop amdgpu patches for fixing regression (bsc#1213304,bsc#1213777)
- dt-bindings: phy: brcm,brcmstb-usb-phy: fix error in &quot;compatible&quot; conditional schema (git-fixes).
- enable nxp snvs rtc driver for i.mx 8mq/8mp (jsc#PED-4758)
- ext4: add ea_inode checking to ext4_iget() (bsc#1213106).
- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).
- ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).
- ext4: add strict range checks while freeing blocks (bsc#1213089).
- ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).
- ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).
- ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).
- ext4: disallow ea_inodes with extended attributes (bsc#1213108).
- ext4: fail ext4_iget if special inode unallocated (bsc#1213010).
- ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).
- ext4: fix data races when using cached status extents (bsc#1213102).
- ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).
- ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).
- ext4: fix lockdep warning when enabling mmp (bsc#1213100).
- ext4: fix reusing stale buffer heads from last failed mounting (bsc#1213020).
- ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).
- ext4: fix warning in ext4_update_inline_data (bsc#1213012).
- ext4: fix warning in mb_find_extent (bsc#1213099).
- ext4: improve error handling from ext4_dirhash() (bsc#1213104).
- ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).
- ext4: move where set the may_inline_data flag is set (bsc#1213011).
- ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).
- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).
- ext4: refuse to create ea block when umounted (bsc#1213093).
- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).
- ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).
- ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).
- ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).
- ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).
- fbdev: au1200fb: fix missing irq check in au1200fb_drv_probe (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- file: always lock position for fmode_atomic_pos (bsc#1213759).
- fix documentation of panic_on_warn (git-fixes).
- fs: dlm: add midcomms init/start functions (git-fixes).
- fs: dlm: do not set stop rx flag after node reset (git-fixes).
- fs: dlm: filter user dlm messages for kernel locks (git-fixes).
- fs: dlm: fix log of lowcomms vs midcomms (git-fixes).
- fs: dlm: fix race between test_bit() and queue_work() (git-fixes).
- fs: dlm: fix race in lowcomms (git-fixes).
- fs: dlm: handle -ebusy first in lock arg validation (git-fixes).
- fs: dlm: move sending fin message into state change handling (git-fixes).
- fs: dlm: retry accept() until -eagain or error returns (git-fixes).
- fs: dlm: return positive pid value for f_getlk (git-fixes).
- fs: dlm: start midcomms before scand (git-fixes).
- fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes).
- fs: jfs: check for read-only mounted filesystem in txbegin (git-fixes).
- fs: jfs: fix null-ptr-deref read in txbegin (git-fixes).
- fs: jfs: fix ubsan: array-index-out-of-bounds in dballocdmaplev (git-fixes).
- fuse: ioctl: translate enosys in outarg (bsc#1213524).
- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).
- gve: set default duplex configuration to full (git-fixes).
- gve: unify driver name usage (git-fixes).
- hvcs: fix hvcs port reference counting (bsc#1213134 ltc#202861).
- hvcs: get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: synchronize hotplug remove with port free (bsc#1213134 ltc#202861).
- hvcs: use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).
- hvcs: use driver groups to manage driver attributes (bsc#1213134 ltc#202861).
- hvcs: use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hwmon: (adm1275) allow setting sample averaging (git-fixes).
- hwmon: (k10temp) enable amd3255 proc to show negative temperature (git-fixes).
- hwmon: (nct7802) fix for temp6 (peci1) processed even if peci1 disabled (git-fixes).
- hwmon: (pmbus/adm1275) fix problems with temperature monitoring on adm1272 (git-fixes).
- i2c: xiic: defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).
- i2c: xiic: do not try to handle more interrupt events after error (git-fixes).
- iavf: fix out-of-bounds when setting channels on remove (git-fixes).
- iavf: fix use-after-free in free_netdev (git-fixes).
- iavf: use internal state to free traffic irqs (git-fixes).
- ib/hfi1: use bitmap_zalloc() when applicable (git-fixes)
- igc: check if hardware tx timestamping is enabled earlier (git-fixes).
- igc: enable and fix rx hash usage by netstack (git-fixes).
- igc: fix inserting of empty frame for launchtime (git-fixes).
- igc: fix kernel panic during ndo_tx_timeout callback (git-fixes).
- igc: fix launchtime before start of cycle (git-fixes).
- igc: fix race condition in ptp tx code (git-fixes).
- igc: handle pps start time programming for past time values (git-fixes).
- igc: prevent garbled tx queue with xdp zerocopy (git-fixes).
- igc: remove delay during tx ring configuration (git-fixes).
- igc: set tp bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes).
- igc: work around hw bug causing missing timestamps (git-fixes).
- inotify: avoid reporting event with invalid wd (bsc#1213025).
- input: i8042 - add clevo pcx0dx to i8042 quirk table (git-fixes).
- input: iqs269a - do not poll during ati (git-fixes).
- input: iqs269a - do not poll during suspend or resume (git-fixes).
- jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).
- jdb2: do not refuse invalidation of already invalidated buffers (bsc#1213014).
- jffs2: fix memory leak in jffs2_do_fill_super (git-fixes).
- jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes).
- jffs2: fix memory leak in jffs2_scan_medium (git-fixes).
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes).
- jffs2: gc deadlock reading a page that is used in jffs2_write_begin() (git-fixes).
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes).
- jfs: jfs_dmap: validate db_l2nbperpage while mounting (git-fixes).
- kabi/severities: add vas symbols changed due to recent fix vas accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers
- kabi: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).
- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf (&quot;rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps&quot;)
- kselftest: vdso: fix accumulation of uninitialized ret when clock_realtime is undefined (git-fixes).
- kvm: arm64: do not read a hw interrupt pending state in user context (git-fixes)
- kvm: arm64: warn if accessing timer pending state outside of vcpu (bsc#1213620)
- kvm: do not null dereference ops-&gt;destroy (git-fixes)
- kvm: downgrade two bug_ons to warn_on_once (git-fixes)
- kvm: initialize debugfs_dentry when a vm is created to avoid null (git-fixes)
- kvm: s390: pv: fix index value of replaced asce (git-fixes bsc#1213867).
- kvm: vmx: inject #gp on encls if vcpu has paging disabled (cr0.pg==0) (git-fixes).
- kvm: vmx: inject #gp, not #ud, if sgx2 encls leafs are unsupported (git-fixes).
- kvm: vmx: restore vmx_vmexit alignment (git-fixes).
- kvm: x86: account fastpath-only vm-exits in vcpu stats (git-fixes).
- leds: trigger: netdev: recheck netdev_led_mode_linkup on dev rename (git-fixes).
- libceph: harden msgr2.1 frame segment length checks (bsc#1213857).
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).
- media: cec: i2c: ch7322: also select regmap (git-fixes).
- media: i2c: correct format propagation for st-mipid02 (git-fixes).
- media: staging: atomisp: select v4l2_fwnode (git-fixes).
- media: usb: check az6007_read() return value (git-fixes).
- media: usb: siano: fix warning due to null work_func_t function pointer (git-fixes).
- media: venus: helpers: fix align() of non power of two (git-fixes).
- media: videodev2.h: fix struct v4l2_input tuner index comment (git-fixes).
- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).
- mmc: core: disable trim on kingston emmc04g-m627 (git-fixes).
- mmc: sdhci: fix dma configure compatibility issue when 64bit dma mode is used (git-fixes).
- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
- net/sched: sch_qfq: reintroduce lmax bound check for mtu (bsc#1213585).
- net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes).
- net: mana: add support for vlan tagging (bsc#1212301).
- net: mana: batch ringing rx queue doorbell on receiving packets (bsc#1212901).
- net: mana: use the correct wqe count for ringing rq doorbell (bsc#1212901).
- net: phy: marvell10g: fix 88x3310 power up (git-fixes).
- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).
- nfsd: add encoding of op_recall flag for write delegation (git-fixes).
- nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes).
- nfsd: fix sparse warning (git-fixes).
- nfsd: remove open coding of string copy (git-fixes).
- nfsv4.1: always send a reclaim_complete after establishing lease (git-fixes).
- nfsv4.1: freeze the session table upon receiving nfs4err_badsession (git-fixes).
- ntb: amd: fix error handling in amd_ntb_pci_driver_init() (git-fixes).
- ntb: idt: fix error handling in idt_pci_driver_init() (git-fixes).
- ntb: intel: fix error handling in intel_ntb_pci_driver_init() (git-fixes).
- ntb: ntb_tool: add check for devm_kcalloc (git-fixes).
- ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).
- nvme-multipath: support io stats on the mpath device (bsc#1210565).
- nvme-pci: fix dma direction of unmapping integrity data (git-fixes).
- nvme-pci: remove nvme_queue from nvme_iod (git-fixes).
- nvme: introduce nvme_start_request (bsc#1210565).
- ocfs2: check new file size on fallocate call (git-fixes).
- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).
- ocfs2: switch to security_inode_init_security() (git-fixes).
- octeontx-af: fix hardware timestamp configuration (git-fixes).
- octeontx2-af: move validation of ptp pointer before its usage (git-fixes).
- octeontx2-pf: add additional check for mcam rules (git-fixes).
- opp: fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).
- pci/pm: avoid putting elopos e2/s2/h2 pcie ports in d3cold (git-fixes).
- pci: add function 1 dma alias quirk for marvell 88se9235 (git-fixes).
- phy: hisilicon: fix an out of bounds check in hisi_inno_phy_probe() (git-fixes).
- phy: revert &quot;phy: remove soc_exynos4212 dep. from phy_exynos4x12_usb&quot; (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).
- phy: tegra: xusb: clear the driver reference in usb-phy dev (git-fixes).
- pie: fix kernel-doc notation warning (git-fixes).
- pinctrl: amd: detect internal gpio0 debounce handling (git-fixes).
- pinctrl: amd: do not show `invalid config param` errors (git-fixes).
- pinctrl: amd: fix mistake in handling clearing pins at startup (git-fixes).
- pinctrl: amd: only use special debounce behavior for gpio 0 (git-fixes).
- pinctrl: amd: use amd_pinconf_set() for all config options (git-fixes).
- platform/x86: msi-laptop: fix rfkill out-of-sync on msi wind u100 (git-fixes).
- powerpc/64: only warn if __pa()/__va() called with bad addresses (bsc#1194869).
- powerpc/64s: fix vas mm use after free (bsc#1194869).
- powerpc/book3s64/mm: fix directmap stats in /proc/meminfo (bsc#1194869).
- powerpc/bpf: fix use of user_pt_regs in uapi (bsc#1194869).
- powerpc/ftrace: remove ftrace init tramp once kernel init is complete (bsc#1194869).
- powerpc/interrupt: do not read msr from interrupt_exit_kernel_prepare() (bsc#1194869).
- powerpc/mm/dax: fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).
- powerpc/mm: switch obsolete dssall to .long (bsc#1194869).
- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).
- powerpc/powernv/vas: assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).
- powerpc/prom_init: fix kernel config grep (bsc#1194869).
- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).
- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).
- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).
- powerpc: define get_cycles macro for arch-override (bsc#1194869).
- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).
- pwm: ab8500: fix error code in probe() (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).
- pwm: sysfs: do not apply state to already disabled pwms (git-fixes).
- rdma/bnxt_re: fix hang during driver unload (git-fixes)
- rdma/bnxt_re: prevent handling any completions after qp destroy (git-fixes)
- rdma/core: update cma destination address on rdma_resolve_addr (git-fixes)
- rdma/irdma: add missing read barriers (git-fixes)
- rdma/irdma: fix data race on cqp completion stats (git-fixes)
- rdma/irdma: fix data race on cqp request done (git-fixes)
- rdma/irdma: fix op_type reporting in cqes (git-fixes)
- rdma/irdma: report correct wc error (git-fixes)
- rdma/mlx4: make check for invalid flags stricter (git-fixes)
- rdma/mthca: fix crash when polling cq for shared qps (git-fixes)
- rdma/rxe: fix access checks in rxe_check_bind_mw (git-fixes)
- regmap: account for register length in smbus i/o limits (git-fixes).
- regmap: drop initial version of maximum transfer length fixes (git-fixes).
- revert &quot;arm64: dts: zynqmp: add address-cells property to interrupt (git-fixes)
- revert &quot;debugfs, coccinelle: check for obsolete define_simple_attribute() usage&quot; (git-fixes).
- revert &quot;drm/amd/display: edp do not add non-edid timings&quot; (git-fixes).
- revert &quot;nfsv4: retry lock on old_stateid during delegation return&quot; (git-fixes).
- revert &quot;usb: dwc3: core: enable autoretry feature in the controller&quot; (git-fixes).
- revert &quot;usb: gadget: tegra-xudc: fix error check in tegra_xudc_powerdomain_init()&quot; (git-fixes).
- revert &quot;usb: xhci: tegra: fix error check&quot; (git-fixes).
- revert &quot;xhci: add quirk for host controllers that do not update endpoint dcs&quot; (git-fixes).
- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
- rpm: update dependency to match current kmod.
- rsi: remove kernel-doc comment marker (git-fixes).
- rxrpc, afs: fix selection of abort codes (git-fixes).
- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).
- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).
- s390/bpf: add expoline to tail calls (git-fixes bsc#1213870).
- s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810).
- s390/debug: add _asm_s390_ prefix to header guard (git-fixes bsc#1213263).
- s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863).
- s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871).
- s390/percpu: add read_once() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).
- s390/qeth: fix vipa deletion (git-fixes bsc#1213713).
- s390/vmem: fix empty page tables cleanup under kasan (git-fixes bsc#1213715).
- s390: define runtime_discard_exit to fix link error with gnu ld &amp;lt; 2.36 (git-fixes bsc#1213264).
- s390: discard .interp section (git-fixes bsc#1213247).
- s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870).
- scftorture: count reschedule ipis (git-fixes).
- sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)
- sched: fix debug &amp;&amp; !schedstats warn (git-fixes)
- scsi: lpfc: abort outstanding els cmds when mailbox timeout error is detected (bsc#1213756).
- scsi: lpfc: avoid -wstringop-overflow warning (bsc#1213756).
- scsi: lpfc: clean up sli-4 sysfs resource reporting (bsc#1213756).
- scsi: lpfc: copyright updates for 14.2.0.14 patches (bsc#1213756).
- scsi: lpfc: fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756).
- scsi: lpfc: fix incorrect big endian type assignment in bsg loopback path (bsc#1213756).
- scsi: lpfc: fix incorrect big endian type assignments in fdmi and vmid paths (bsc#1213756).
- scsi: lpfc: fix lpfc_name struct packing (bsc#1213756).
- scsi: lpfc: make fabric zone discovery more robust when handling unsolicited logo (bsc#1213756).
- scsi: lpfc: pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756).
- scsi: lpfc: qualify ndlp discovery state when processing rscn (bsc#1213756).
- scsi: lpfc: refactor cpu affinity assignment paths (bsc#1213756).
- scsi: lpfc: remove extra ndlp kref decrement in flogi cmpl for loop topology (bsc#1213756).
- scsi: lpfc: replace all non-returning strlcpy() with strscpy() (bsc#1213756).
- scsi: lpfc: replace one-element array with flexible-array member (bsc#1213756).
- scsi: lpfc: revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756).
- scsi: lpfc: set establish image pair service parameter only for target functions (bsc#1213756).
- scsi: lpfc: simplify fcp_abort transport callback log message (bsc#1213756).
- scsi: lpfc: update lpfc version to 14.2.0.14 (bsc#1213756).
- scsi: lpfc: use struct_size() helper (bsc#1213756).
- scsi: qla2xxx: adjust iocb resource on qpair create (bsc#1213747).
- scsi: qla2xxx: array index may go out of bound (bsc#1213747).
- scsi: qla2xxx: avoid fcport pointer dereference (bsc#1213747).
- scsi: qla2xxx: check valid rport returned by fc_bsg_to_rport() (bsc#1213747).
- scsi: qla2xxx: correct the index of array (bsc#1213747).
- scsi: qla2xxx: drop useless list_head (bsc#1213747).
- scsi: qla2xxx: fix buffer overrun (bsc#1213747).
- scsi: qla2xxx: fix command flush during tmf (bsc#1213747).
- scsi: qla2xxx: fix deletion race condition (bsc#1213747).
- scsi: qla2xxx: fix end of loop test (bsc#1213747).
- scsi: qla2xxx: fix erroneous link up failure (bsc#1213747).
- scsi: qla2xxx: fix error code in qla2x00_start_sp() (bsc#1213747).
- scsi: qla2xxx: fix inconsistent tmf timeout (bsc#1213747).
- scsi: qla2xxx: fix null pointer dereference in target mode (bsc#1213747).
- scsi: qla2xxx: fix potential null pointer dereference (bsc#1213747).
- scsi: qla2xxx: fix session hang in gnl (bsc#1213747).
- scsi: qla2xxx: fix tmf leak through (bsc#1213747).
- scsi: qla2xxx: limit tmf to 8 per function (bsc#1213747).
- scsi: qla2xxx: pointer may be dereferenced (bsc#1213747).
- scsi: qla2xxx: remove unused nvme_ls_waitq wait queue (bsc#1213747).
- scsi: qla2xxx: replace one-element array with declare_flex_array() helper (bsc#1213747).
- scsi: qla2xxx: silence a static checker warning (bsc#1213747).
- scsi: qla2xxx: turn off noisy message log (bsc#1213747).
- scsi: qla2xxx: update version to 10.02.08.400-k (bsc#1213747).
- scsi: qla2xxx: update version to 10.02.08.500-k (bsc#1213747).
- scsi: qla2xxx: use vmalloc_array() and vcalloc() (bsc#1213747).
- security: keys: modify mismatched function name (git-fixes).
- selftests: mptcp: depend on syn_cookies (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).
- selftests: tc: add 'ct' action kconfig dep (git-fixes).
- selftests: tc: add conntrack procfs kconfig (git-fixes).
- selftests: tc: set timeout to 15 minutes (git-fixes).
- serial: qcom-geni: drop bogus runtime pm state update (git-fixes).
- serial: sifive: fix sifive_serial_console_setup() section (git-fixes).
- signal/powerpc: on swapcontext failure force sigsegv (bsc#1194869).
- signal: replace force_sigsegv(sigsegv) with force_fatal_sig(sigsegv) (bsc#1194869).
- smb3: do not reserve too many oplock credits (bsc#1193629).
- smb3: missing null check in smb2_change_notify (bsc#1193629).
- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).
- smb: client: fix missed ses refcounting (git-fixes).
- smb: client: fix parsing of source mount option (bsc#1193629).
- smb: client: fix shared dfs root mounts with different prefixes (bsc#1193629).
- smb: client: fix warning in cifs_match_super() (bsc#1193629).
- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).
- smb: client: fix warning in cifsfindfirst() (bsc#1193629).
- smb: client: fix warning in cifsfindnext() (bsc#1193629).
- smb: client: fix warning in generic_ip_connect() (bsc#1193629).
- smb: client: improve dfs mount check (bsc#1193629).
- smb: client: remove redundant pointer 'server' (bsc#1193629).
- smb: delete an unnecessary statement (bsc#1193629).
- smb: move client and server files to common directory fs/smb (bsc#1193629).
- smb: remove obsolete comment (bsc#1193629).
- soundwire: qcom: fix storing port config out-of-bounds (git-fixes).
- soundwire: qcom: update status correctly with mask (git-fixes).
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).
- spi: bcm63xx: fix max prepend length (git-fixes).
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes).
- staging: r8712: fix memory leak in _r8712_init_xmit_priv() (git-fixes).
- sunrpc: always free ctxt when freeing deferred request (git-fixes).
- sunrpc: double free xprt_ctxt while still in use (git-fixes).
- sunrpc: fix trace_svc_register() call site (git-fixes).
- sunrpc: fix uaf in svc_tcp_listen_data_ready() (git-fixes).
- sunrpc: remove dead code in svc_tcp_release_rqst() (git-fixes).
- sunrpc: remove the maximum number of retries in call_bind_status (git-fixes).
- svcrdma: prevent page release when nothing was received (git-fixes).
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).
- tpm_tis: explicitly check for error code (git-fixes).
- tty: n_gsm: fix uaf in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).
- ubi: ensure that vid header offset + vid header size &amp;lt;= alloc, size (bsc#1210584).
- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
- ubifs: add missing iput if do_tmpfile() failed in rename whiteout (git-fixes).
- ubifs: do_rename: fix wrong space budget when target inode's nlink &gt; 1 (git-fixes).
- ubifs: error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes).
- ubifs: fix 'ui-&gt;dirty' race between do_tmpfile() and writeback work (git-fixes).
- ubifs: fix aa deadlock when setting xattr for encrypted file (git-fixes).
- ubifs: fix build errors as symbol undefined (git-fixes).
- ubifs: fix deadlock in concurrent rename whiteout and inode writeback (git-fixes).
- ubifs: fix memory leak in alloc_wbufs() (git-fixes).
- ubifs: fix memory leak in do_rename (git-fixes).
- ubifs: fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes).
- ubifs: fix to add refcount once page is set private (git-fixes).
- ubifs: fix wrong dirty space budget for dirty inode (git-fixes).
- ubifs: free memory for tmpfile name (git-fixes).
- ubifs: rectify space amount budget for mkdir/tmpfile operations (git-fixes).
- ubifs: rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes).
- ubifs: rectify space budget for ubifs_xrename() (git-fixes).
- ubifs: rename whiteout atomically (git-fixes).
- ubifs: rename_whiteout: correct old_dir size computing (git-fixes).
- ubifs: rename_whiteout: fix double free for whiteout_ui-&gt;data (git-fixes).
- ubifs: reserve one leb for each journal head while doing budget (git-fixes).
- ubifs: setflags: make dirtied_ino_d 8 bytes aligned (git-fixes).
- ubifs: ubifs_writepage: mark page dirty after writing inode failed (git-fixes).
- udf: avoid double brelse() in udf_rename() (bsc#1213032).
- udf: define efscorrupted error code (bsc#1213038).
- udf: detect system inodes linked into directory hierarchy (bsc#1213114).
- udf: discard preallocation before extending file with a hole (bsc#1213036).
- udf: do not bother looking for prealloc extents if i_lenextents matches i_size (bsc#1213035).
- udf: do not bother merging very long extents (bsc#1213040).
- udf: do not update file length for failed writes to inline files (bsc#1213041).
- udf: fix error handling in udf_new_inode() (bsc#1213112).
- udf: fix extending file within last block (bsc#1213037).
- udf: fix preallocation discarding at indirect extent boundary (bsc#1213034).
- udf: preserve link count of system files (bsc#1213113).
- udf: truncate added extents on failed expansion (bsc#1213039).
- update config and supported.conf files due to renaming.
- update suse/rdma-mthca-fix-crash-when-polling-cq-for-shared-qps. (git-fixes bsc#1212604). added bug reference.
- usb: dwc2: fix some error handling paths (git-fixes).
- usb: dwc2: platform: improve error reporting for problems during .remove() (git-fixes).
- usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes).
- usb: dwc3: pci: skip byt gpio lookup table for hardwired phy (git-fixes).
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes).
- usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes).
- usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes).
- usb: serial: option: add lara-r6 01b pids (git-fixes).
- usb: xhci-mtk: set the dma max_seg_size (git-fixes).
- vhost: support packed when setting-getting vring_base (git-fixes).
- vhost_net: revert upend_idx only on retriable error (git-fixes).
- virtio-net: maintain reverse cleanup order (git-fixes).
- virtio_net: fix error unwinding of xdp initialization (git-fixes).
- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).
- wifi: ray_cs: drop useless status variable in parse_addr() (git-fixes).
- wifi: ray_cs: utilize strnlen() in parse_addr() (git-fixes).
- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- writeback: fix call of incorrect macro (bsc#1213024).
- x86/pvh: obtain vga console info in dom0 (git-fixes).
- x86: fix .brk attribute in linker script (git-fixes).
- xen/blkfront: only check req_fua for writes (git-fixes).
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes).
- xfs: ail needs asynchronous cil forcing (bsc#1211811).
- xfs: async cil flushes need pending pushes to be made stable (bsc#1211811).
- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).
- xfs: cil work is serialised, not pipelined (bsc#1211811).
- xfs: clean up the rtbitmap fsmap backend (git-fixes).
- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).
- xfs: do not reverse order of items in bulk ail insertion (git-fixes).
- xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).
- xfs: drop async cache flushes from cil commits (bsc#1211811).
- xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).
- xfs: fix getfsmap reporting past the last rt extent (git-fixes).
- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).
- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).
- xfs: fix logdev fsmap query result filtering (git-fixes).
- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).
- xfs: fix uninitialized variable access (git-fixes).
- xfs: make fsmap backend function key parameters const (git-fixes).
- xfs: make the record pointer passed to query_range functions const (git-fixes).
- xfs: move the cil workqueue to the cil (bsc#1211811).
- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).
- xfs: order cil checkpoint start records (bsc#1211811).
- xfs: pass a cil context to xlog_write() (bsc#1211811).
- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).
- xfs: rework xlog_state_do_callback() (bsc#1211811).
- xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).
- xfs: separate out log shutdown callback processing (bsc#1211811).
- xfs: wait iclog complete before tearing down ail (bsc#1211811).
- xfs: xlog_state_ioerror must die (bsc#1211811).
- xhci: fix resume issue of some zhaoxin hosts (git-fixes).
- xhci: fix trb prefetch issue of zhaoxin hosts (git-fixes).
- xhci: show zhaoxin xhci root hub speed correctly (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.46.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.46.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.46.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.46.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.46.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.46.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3440</id>
    <title>Security update for gawk</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693205856"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4156" id="CVE-2023-4156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4156" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214025" id="1214025" title="VUL-0: CVE-2023-4156: gawk: heap out of bound read in builtin.c" type="bugzilla"/>
    </references>
    <description>This update for gawk fixes the following issues:

- CVE-2023-4156: Fix a heap out of bound read by validating the index into argument list. (bsc#1214025)
</description>
    <pkglist>
      <collection>
        <package name="gawk" epoch="0" version="4.2.1" release="150000.3.3.1" arch="src" src="src/gawk-4.2.1-150000.3.3.1.src.rpm">
          <filename>gawk-4.2.1-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="gawk" epoch="0" version="4.2.1" release="150000.3.3.1" arch="x86_64" src="x86_64/gawk-4.2.1-150000.3.3.1.x86_64.rpm">
          <filename>gawk-4.2.1-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="gawk" epoch="0" version="4.2.1" release="150000.3.3.1" arch="s390x" src="s390x/gawk-4.2.1-150000.3.3.1.s390x.rpm">
          <filename>gawk-4.2.1-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="gawk" epoch="0" version="4.2.1" release="150000.3.3.1" arch="aarch64" src="aarch64/gawk-4.2.1-150000.3.3.1.aarch64.rpm">
          <filename>gawk-4.2.1-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3383</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692775620"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206418" id="1206418" title="VUL-0: CVE-2022-40982: transient execution attack &quot;Gather Data Sampling&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214099" id="1214099" title="VUL-0: ucode-intel: 20230808 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41804" id="CVE-2022-41804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23908" id="CVE-2023-23908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" id="CVE-2022-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
- CVE-2022-40982: Fixed a potential security vulnerability in some Intel® Processors which may allow information disclosure.
- CVE-2023-23908: Fixed a potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable processors which may allow information disclosure.
- CVE-2022-41804: Fixed a potential security vulnerability in some Intel® Xeon® Processors with Intel® Software Guard Extensions (SGX) which may allow escalation of privilege.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20230808" release="150200.27.1" arch="src" src="src/ucode-intel-20230808-150200.27.1.src.rpm">
          <filename>ucode-intel-20230808-150200.27.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20230808" release="150200.27.1" arch="x86_64" src="x86_64/ucode-intel-20230808-150200.27.1.x86_64.rpm">
          <filename>ucode-intel-20230808-150200.27.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3360</id>
    <title>Security update for kernel-firmware</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692363016"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213287" id="1213287" title="VUL-0: CVE-2023-20569: kernel-source, kernel-firmware: AMD CPU &quot;Inception&quot; issue" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" id="CVE-2023-20569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" type="cve"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

- CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. (bsc#1213287)
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20220509" release="150400.4.22.1" arch="src" src="src/kernel-firmware-20220509-150400.4.22.1.src.rpm">
          <filename>kernel-firmware-20220509-150400.4.22.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-all-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-all-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-atheros-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-brcm-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-i915-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-i915-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-intel-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-intel-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-marvell-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-media-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-media-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-network-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-network-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-nfp-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-platform-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-platform-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-prestera-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-qcom-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-radeon-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-realtek-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-serial-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-serial-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-sound-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-sound-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-ti-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-ti-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20220509-150400.4.22.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20220509" release="150400.4.22.1" arch="noarch" src="noarch/ucode-amd-20220509-150400.4.22.1.noarch.rpm">
          <filename>ucode-amd-20220509-150400.4.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3363</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692363352"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214054" id="1214054" title="VUL-0: CVE-2023-36054: krb5: array count inconsistency in kadm5 RPC" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36054" id="CVE-2023-36054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36054" type="cve"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.6.1" arch="src" src="src/krb5-1.19.2-150400.3.6.1.src.rpm">
          <filename>krb5-1.19.2-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.6.1" arch="x86_64" src="x86_64/krb5-1.19.2-150400.3.6.1.x86_64.rpm">
          <filename>krb5-1.19.2-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.6.1" arch="s390x" src="s390x/krb5-1.19.2-150400.3.6.1.s390x.rpm">
          <filename>krb5-1.19.2-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.6.1" arch="aarch64" src="aarch64/krb5-1.19.2-150400.3.6.1.aarch64.rpm">
          <filename>krb5-1.19.2-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3395</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692807228"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213616" id="1213616" title="VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed (XSA-433)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214082" id="1214082" title="VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative Return Stack Overflow (XSA-434)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214083" id="1214083" title="VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" id="CVE-2023-20569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" id="CVE-2022-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" id="CVE-2023-20593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434)
- CVE-2022-40982: Fixed transient execution attack called &quot;Gather Data Sampling&quot;. (bsc#1214083, XSA-435)
- CVE-2023-20593: Fixed a ZenBleed issue in &quot;Zen 2&quot; CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_02" release="150400.4.31.1" arch="src" src="src/xen-4.16.5_02-150400.4.31.1.src.rpm">
          <filename>xen-4.16.5_02-150400.4.31.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_02" release="150400.4.31.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_02-150400.4.31.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_02-150400.4.31.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4073</id>
    <title>Recommended update for rpm</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697192210"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1988" id="PED-1988" title="https://jira.suse.com/browse/PED-1988" type="jira"/>
    </references>
    <description>This update for rpm fixes the following issue:

- Enables build for all python modules (jsc#PED-68, jsc#PED-1988)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="src" src="src/python-rpm-4.14.3-150400.59.3.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.3.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.3.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.3.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="src" src="src/rpm-4.14.3-150400.59.3.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.3.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.3.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.3.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.3.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.3.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.3.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.3.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.3.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.3.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.3.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.3.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.3.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.3.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.3.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.3.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.3.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.3.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.3.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.3.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.3.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.3.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.3.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3403</id>
    <title>Recommended update for osinfo-db</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692810920"/>
    <references/>
    <description>This update for osinfo-db fixes the following issue:

- Update to database version 20230719
</description>
    <pkglist>
      <collection>
        <package name="osinfo-db" epoch="0" version="20230719" release="150400.3.12.1" arch="noarch" src="noarch/osinfo-db-20230719-150400.3.12.1.noarch.rpm">
          <filename>osinfo-db-20230719-150400.3.12.1.noarch.rpm</filename>
        </package>
        <package name="osinfo-db" epoch="0" version="20230719" release="150400.3.12.1" arch="src" src="src/osinfo-db-20230719-150400.3.12.1.src.rpm">
          <filename>osinfo-db-20230719-150400.3.12.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3454</id>
    <title>Security update for ca-certificates-mozilla</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693223059"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214248" id="1214248" title="VUL-0: ca-certificates-mozilla: update to 2.62" type="bugzilla"/>
    </references>
    <description>This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates-mozilla" epoch="0" version="2.62" release="150200.30.1" arch="noarch" src="noarch/ca-certificates-mozilla-2.62-150200.30.1.noarch.rpm">
          <filename>ca-certificates-mozilla-2.62-150200.30.1.noarch.rpm</filename>
        </package>
        <package name="ca-certificates-mozilla" epoch="0" version="2.62" release="150200.30.1" arch="src" src="src/ca-certificates-mozilla-2.62-150200.30.1.src.rpm">
          <filename>ca-certificates-mozilla-2.62-150200.30.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3466</id>
    <title>Recommended update for icu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693287542"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1103893" id="1103893" title="libicu: New Japanese Era name support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1112183" id="1112183" title="Japan changing to a new calendar era" type="bugzilla"/>
      <reference href="https://fate.suse.com/325570" id="325570" title="https://fate.suse.com/325570" type="fate"/>
      <reference href="https://fate.suse.com/325419" id="325419" title="https://fate.suse.com/325419" type="fate"/>
      <reference href="https://fate.suse.com/325570" id="325570" title="https://fate.suse.com/325570" type="fate"/>
    </references>
    <description>This update for icu fixes the following issues:

- Japanese era Reiwa (bsc#1112183, bsc#1103893, fate570, fate#325570, fate#325419)</description>
    <pkglist>
      <collection>
        <package name="icu" epoch="0" version="65.1" release="150200.4.8.1" arch="src" src="src/icu-65.1-150200.4.8.1.src.rpm">
          <filename>icu-65.1-150200.4.8.1.src.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.8.1" arch="x86_64" src="x86_64/libicu-suse65_1-65.1-150200.4.8.1.x86_64.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.8.1.x86_64.rpm</filename>
        </package>
        <package name="libicu65_1-ledata" epoch="0" version="65.1" release="150200.4.8.1" arch="noarch" src="noarch/libicu65_1-ledata-65.1-150200.4.8.1.noarch.rpm">
          <filename>libicu65_1-ledata-65.1-150200.4.8.1.noarch.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.8.1" arch="s390x" src="s390x/libicu-suse65_1-65.1-150200.4.8.1.s390x.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.8.1.s390x.rpm</filename>
        </package>
        <package name="libicu65_1-bedata" epoch="0" version="65.1" release="150200.4.8.1" arch="noarch" src="noarch/libicu65_1-bedata-65.1-150200.4.8.1.noarch.rpm">
          <filename>libicu65_1-bedata-65.1-150200.4.8.1.noarch.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.8.1" arch="aarch64" src="aarch64/libicu-suse65_1-65.1-150200.4.8.1.aarch64.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3472</id>
    <title>Security update for procps</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693299398"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4016" id="CVE-2023-4016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4016" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214290" id="1214290" title="VUL-0: CVE-2023-4016: procps: ps buffer overflow" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issues:

  - CVE-2023-4016: Fixed ps buffer overflow (bsc#1214290).
</description>
    <pkglist>
      <collection>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.34.1" arch="x86_64" src="x86_64/libprocps7-3.3.15-150000.7.34.1.x86_64.rpm">
          <filename>libprocps7-3.3.15-150000.7.34.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.34.1" arch="src" src="src/procps-3.3.15-150000.7.34.1.src.rpm">
          <filename>procps-3.3.15-150000.7.34.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.34.1" arch="x86_64" src="x86_64/procps-3.3.15-150000.7.34.1.x86_64.rpm">
          <filename>procps-3.3.15-150000.7.34.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.34.1" arch="s390x" src="s390x/libprocps7-3.3.15-150000.7.34.1.s390x.rpm">
          <filename>libprocps7-3.3.15-150000.7.34.1.s390x.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.34.1" arch="s390x" src="s390x/procps-3.3.15-150000.7.34.1.s390x.rpm">
          <filename>procps-3.3.15-150000.7.34.1.s390x.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.34.1" arch="aarch64" src="aarch64/libprocps7-3.3.15-150000.7.34.1.aarch64.rpm">
          <filename>libprocps7-3.3.15-150000.7.34.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.34.1" arch="aarch64" src="aarch64/procps-3.3.15-150000.7.34.1.aarch64.rpm">
          <filename>procps-3.3.15-150000.7.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3850</id>
    <title>Recommended update for evolution</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695877197"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213858" id="1213858" title="Evolution should handle frame flattening changes in WebKitGTK 2.40" type="bugzilla"/>
    </references>
    <description>This update for evolution and its dependencies fixes the following issues:

evolution:

- Handle frame flattening change in WebKitGTK 2.40 (bsc#1213858)

bogofilter, evolution-data-server, gcr, geocode-glib, gjs, glade, gnome-autoar,
gnome-desktop, gnome-online-accounts, gsl, gspell, gtkspell3, libcanberra, libgdata,
libgweather, libical, liboauth, libphonenumber, librest, libxkbcommon, mozjs78:

- Deliver missing direct and indirect dependencies of evolution
  to SUSE Package Hub 15 SP{4,5} for aarch64, ppc64le and s390x
- There are NO code changes
</description>
    <pkglist>
      <collection>
        <package name="libxkbcommon" epoch="0" version="1.3.0" release="150400.3.2.2" arch="src" src="src/libxkbcommon-1.3.0-150400.3.2.2.src.rpm">
          <filename>libxkbcommon-1.3.0-150400.3.2.2.src.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.2.2" arch="x86_64" src="x86_64/libxkbcommon0-1.3.0-150400.3.2.2.x86_64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.2.2.x86_64.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.2.2" arch="s390x" src="s390x/libxkbcommon0-1.3.0-150400.3.2.2.s390x.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.2.2.s390x.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.2.2" arch="aarch64" src="aarch64/libxkbcommon0-1.3.0-150400.3.2.2.aarch64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.2.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3416</id>
    <title>Recommended update for btrfsprogs</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692856987"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207225" id="1207225" title="Partner-L3: UUID symlinks are 'sometimes' not created for a BTRFS filesystem created on a partition [Dell BugID: PPLI-3500]" type="bugzilla"/>
    </references>
    <description>This update for btrfsprogs fixes the following issues:

- No UUID symlink in /dev/disk/by-uuid after creating a BTRFS filesystem on a partition of a mpath device (bsc#1207225)
</description>
    <pkglist>
      <collection>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.3.1" arch="src" src="src/btrfsprogs-5.14-150400.5.3.1.src.rpm">
          <filename>btrfsprogs-5.14-150400.5.3.1.src.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.3.1" arch="x86_64" src="x86_64/btrfsprogs-5.14-150400.5.3.1.x86_64.rpm">
          <filename>btrfsprogs-5.14-150400.5.3.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs-udev-rules" epoch="0" version="5.14" release="150400.5.3.1" arch="noarch" src="noarch/btrfsprogs-udev-rules-5.14-150400.5.3.1.noarch.rpm">
          <filename>btrfsprogs-udev-rules-5.14-150400.5.3.1.noarch.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150400.5.3.1" arch="x86_64" src="x86_64/libbtrfs0-5.14-150400.5.3.1.x86_64.rpm">
          <filename>libbtrfs0-5.14-150400.5.3.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.3.1" arch="s390x" src="s390x/btrfsprogs-5.14-150400.5.3.1.s390x.rpm">
          <filename>btrfsprogs-5.14-150400.5.3.1.s390x.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150400.5.3.1" arch="s390x" src="s390x/libbtrfs0-5.14-150400.5.3.1.s390x.rpm">
          <filename>libbtrfs0-5.14-150400.5.3.1.s390x.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.3.1" arch="aarch64" src="aarch64/btrfsprogs-5.14-150400.5.3.1.aarch64.rpm">
          <filename>btrfsprogs-5.14-150400.5.3.1.aarch64.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150400.5.3.1" arch="aarch64" src="aarch64/libbtrfs0-5.14-150400.5.3.1.aarch64.rpm">
          <filename>libbtrfs0-5.14-150400.5.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3955</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696361353"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214925" id="1214925" title="VUL-0: CVE-2023-4734: vim: segmentation fault in function f_fullcommand" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214924" id="1214924" title="VUL-0: CVE-2023-4735: vim: OOB Write ops.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215006" id="1215006" title="VUL-0: CVE-2023-4752: vim: Heap Use After Free in function ins_compl_get_exp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215004" id="1215004" title="VUL-0: CVE-2023-4733: vim: use-after-free in function buflist_altfpos" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215033" id="1215033" title="VUL-0: CVE-2023-4781: vim: heap-buffer-overflow in function vim_regsub_both" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214922" id="1214922" title="VUL-0: CVE-2023-4738: vim: heap-buffer-overflow in vim_regsub_both" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4738" id="CVE-2023-4738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4735" id="CVE-2023-4735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4781" id="CVE-2023-4781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4752" id="CVE-2023-4752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4752" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4733" id="CVE-2023-4733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4734" id="CVE-2023-4734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4734" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Security fixes:

- CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). 
- CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). 
- CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). 
- CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922). 
- CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006). 
- CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033).

Other fixes:

- Update to version 9.0 with patch level 1894,
  for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894
- Use app icons generated from vimlogo.eps in the source tarball;
  add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1894" release="150000.5.54.1" arch="src" src="src/vim-9.0.1894-150000.5.54.1.src.rpm">
          <filename>vim-9.0.1894-150000.5.54.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1894" release="150000.5.54.1" arch="noarch" src="noarch/vim-data-common-9.0.1894-150000.5.54.1.noarch.rpm">
          <filename>vim-data-common-9.0.1894-150000.5.54.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1894" release="150000.5.54.1" arch="x86_64" src="x86_64/vim-small-9.0.1894-150000.5.54.1.x86_64.rpm">
          <filename>vim-small-9.0.1894-150000.5.54.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1894" release="150000.5.54.1" arch="s390x" src="s390x/vim-small-9.0.1894-150000.5.54.1.s390x.rpm">
          <filename>vim-small-9.0.1894-150000.5.54.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1894" release="150000.5.54.1" arch="aarch64" src="aarch64/vim-small-9.0.1894-150000.5.54.1.aarch64.rpm">
          <filename>vim-small-9.0.1894-150000.5.54.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3410</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1692853065"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201519" id="1201519" title="Binary /sbin/audispd is missing in package audit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204844" id="1204844" title="&quot;systemctl restart auditd.service&quot; will not reload audit rules" type="bugzilla"/>
    </references>
    <description>This update for audit fixes the following issues:

- Create symbolic link from /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519)
- Fix rules not loaded when restarting auditd.service (bsc#1204844)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="src" src="src/audit-3.0.6-150400.4.13.1.src.rpm">
          <filename>audit-3.0.6-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.13.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.13.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.13.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.13.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.13.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.13.1" arch="x86_64" src="x86_64/libaudit1-3.0.6-150400.4.13.1.x86_64.rpm">
          <filename>libaudit1-3.0.6-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.13.1" arch="x86_64" src="x86_64/libauparse0-3.0.6-150400.4.13.1.x86_64.rpm">
          <filename>libauparse0-3.0.6-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.13.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.13.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="s390x" src="s390x/audit-3.0.6-150400.4.13.1.s390x.rpm">
          <filename>audit-3.0.6-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.13.1" arch="s390x" src="s390x/audit-audispd-plugins-3.0.6-150400.4.13.1.s390x.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.13.1" arch="s390x" src="s390x/libaudit1-3.0.6-150400.4.13.1.s390x.rpm">
          <filename>libaudit1-3.0.6-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.13.1" arch="s390x" src="s390x/libauparse0-3.0.6-150400.4.13.1.s390x.rpm">
          <filename>libauparse0-3.0.6-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="s390x" src="s390x/python3-audit-3.0.6-150400.4.13.1.s390x.rpm">
          <filename>python3-audit-3.0.6-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="s390x" src="s390x/system-group-audit-3.0.6-150400.4.13.1.s390x.rpm">
          <filename>system-group-audit-3.0.6-150400.4.13.1.s390x.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.13.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.13.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.13.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.13.1" arch="aarch64" src="aarch64/libaudit1-3.0.6-150400.4.13.1.aarch64.rpm">
          <filename>libaudit1-3.0.6-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.13.1" arch="aarch64" src="aarch64/libauparse0-3.0.6-150400.4.13.1.aarch64.rpm">
          <filename>libauparse0-3.0.6-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.13.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.13.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.13.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.13.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3469</id>
    <title>Security update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693294290"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40225" id="CVE-2023-40225" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40225" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214102" id="1214102" title="VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value" type="bugzilla"/>
    </references>
    <description>This update for haproxy fixes the following issues:

- CVE-2023-40225: Fixed request smuggling with empty content-length header value (bsc#1214102).
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.16.1" arch="src" src="src/haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.src.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.16.1" arch="x86_64" src="x86_64/haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.x86_64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.16.1" arch="s390x" src="s390x/haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.s390x.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.s390x.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.16.1" arch="aarch64" src="aarch64/haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.aarch64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3538</id>
    <title>Recommended update for dracut</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693924775"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214081" id="1214081" title="L3: dracut fails to pack its main library libsystemd-shared-249.so into initrd" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Protect against broken links pointing to themselves
- Exit if resolving executable dependencies fails (bsc#1214081)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="src" src="src/dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.src.rpm">
          <filename>dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="x86_64" src="x86_64/dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.x86_64.rpm">
          <filename>dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.347.gdcb9bdbf-150400.3.28.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.347.gdcb9bdbf-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.347.gdcb9bdbf-150400.3.28.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.347.gdcb9bdbf-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="s390x" src="s390x/dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.s390x.rpm">
          <filename>dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="s390x" src="s390x/dracut-fips-055+suse.347.gdcb9bdbf-150400.3.28.1.s390x.rpm">
          <filename>dracut-fips-055+suse.347.gdcb9bdbf-150400.3.28.1.s390x.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="s390x" src="s390x/dracut-mkinitrd-deprecated-055+suse.347.gdcb9bdbf-150400.3.28.1.s390x.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.347.gdcb9bdbf-150400.3.28.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="aarch64" src="aarch64/dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.aarch64.rpm">
          <filename>dracut-055+suse.347.gdcb9bdbf-150400.3.28.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.347.gdcb9bdbf-150400.3.28.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.347.gdcb9bdbf-150400.3.28.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.347.gdcb9bdbf" release="150400.3.28.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.347.gdcb9bdbf-150400.3.28.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.347.gdcb9bdbf-150400.3.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3661</id>
    <title>Security update for gcc12</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695066378"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" id="CVE-2023-4039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214052" id="1214052" title="VUL-0: EMBARGOED: CVE-2023-4039: gcc: stack protector does not protect C99 VLAs on Aarch64" type="bugzilla"/>
    </references>
    <description>This update for gcc12 fixes the following issues:

- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="src" src="src/gcc12-12.3.0+git1204-150000.1.16.1.src.rpm">
          <filename>gcc12-12.3.0+git1204-150000.1.16.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="x86_64" src="x86_64/libgcc_s1-12.3.0+git1204-150000.1.16.1.x86_64.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.16.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="x86_64" src="x86_64/libstdc++6-12.3.0+git1204-150000.1.16.1.x86_64.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.16.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="s390x" src="s390x/libgcc_s1-12.3.0+git1204-150000.1.16.1.s390x.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.16.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="s390x" src="s390x/libstdc++6-12.3.0+git1204-150000.1.16.1.s390x.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.16.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="aarch64" src="aarch64/libgcc_s1-12.3.0+git1204-150000.1.16.1.aarch64.rpm">
          <filename>libgcc_s1-12.3.0+git1204-150000.1.16.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.3.0+git1204" release="150000.1.16.1" arch="aarch64" src="aarch64/libstdc++6-12.3.0+git1204-150000.1.16.1.aarch64.rpm">
          <filename>libstdc++6-12.3.0+git1204-150000.1.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3486</id>
    <title>Recommended update for lvm2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693312059"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214071" id="1214071" title="blkdeactivate calls wrong mountpoint cmd" type="bugzilla"/>
    </references>
    <description>This update for lvm2 fixes the following issues:

- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
</description>
    <pkglist>
      <collection>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="x86_64" src="x86_64/device-mapper-2.03.05_1.02.163-150400.188.1.x86_64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.188.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="x86_64" src="x86_64/libdevmapper-event1_03-2.03.05_1.02.163-150400.188.1.x86_64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.188.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="x86_64" src="x86_64/libdevmapper1_03-2.03.05_1.02.163-150400.188.1.x86_64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.188.1.x86_64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.188.1" arch="x86_64" src="x86_64/liblvm2cmd2_03-2.03.05-150400.188.1.x86_64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.188.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.188.1" arch="src" src="src/lvm2-2.03.05-150400.188.1.src.rpm">
          <filename>lvm2-2.03.05-150400.188.1.src.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.188.1" arch="x86_64" src="x86_64/lvm2-2.03.05-150400.188.1.x86_64.rpm">
          <filename>lvm2-2.03.05-150400.188.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2-device-mapper" epoch="0" version="2.03.05" release="150400.188.1" arch="src" src="src/lvm2-device-mapper-2.03.05-150400.188.1.src.rpm">
          <filename>lvm2-device-mapper-2.03.05-150400.188.1.src.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="s390x" src="s390x/device-mapper-2.03.05_1.02.163-150400.188.1.s390x.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.188.1.s390x.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="s390x" src="s390x/libdevmapper-event1_03-2.03.05_1.02.163-150400.188.1.s390x.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.188.1.s390x.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="s390x" src="s390x/libdevmapper1_03-2.03.05_1.02.163-150400.188.1.s390x.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.188.1.s390x.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.188.1" arch="s390x" src="s390x/liblvm2cmd2_03-2.03.05-150400.188.1.s390x.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.188.1.s390x.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.188.1" arch="s390x" src="s390x/lvm2-2.03.05-150400.188.1.s390x.rpm">
          <filename>lvm2-2.03.05-150400.188.1.s390x.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="aarch64" src="aarch64/device-mapper-2.03.05_1.02.163-150400.188.1.aarch64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.188.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="aarch64" src="aarch64/libdevmapper-event1_03-2.03.05_1.02.163-150400.188.1.aarch64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.188.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.188.1" arch="aarch64" src="aarch64/libdevmapper1_03-2.03.05_1.02.163-150400.188.1.aarch64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.188.1.aarch64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.188.1" arch="aarch64" src="aarch64/liblvm2cmd2_03-2.03.05-150400.188.1.aarch64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.188.1.aarch64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.188.1" arch="aarch64" src="aarch64/lvm2-2.03.05-150400.188.1.aarch64.rpm">
          <filename>lvm2-2.03.05-150400.188.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3542</id>
    <title>Recommended update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693981543"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214427" id="1214427" title="mdadm package doesn't rebuild initrd in %post/%posttrans" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issues:

- Make sure initramfs is rebuilt in %posttrans (bsc#1214427)
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.30.1" arch="src" src="src/mdadm-4.1-150300.24.30.1.src.rpm">
          <filename>mdadm-4.1-150300.24.30.1.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.30.1" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.30.1.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.30.1.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.30.1" arch="s390x" src="s390x/mdadm-4.1-150300.24.30.1.s390x.rpm">
          <filename>mdadm-4.1-150300.24.30.1.s390x.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.30.1" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.30.1.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.30.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3461</id>
    <title>Security update for freetype2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693236498"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2004" id="CVE-2023-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2004" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210419" id="1210419" title="VUL-0: CVE-2023-2004: freetype,freetype2: integer overflowin in tt_hvadvance_adjust() in src/truetype/ttgxvar.c" type="bugzilla"/>
    </references>
    <description>This update for freetype2 fixes the following issues:

- CVE-2023-2004: Fixed integer overflow in tt_hvadvance_adjust (bsc#1210419).
</description>
    <pkglist>
      <collection>
        <package name="freetype2" epoch="0" version="2.10.4" release="150000.4.15.1" arch="src" src="src/freetype2-2.10.4-150000.4.15.1.src.rpm">
          <filename>freetype2-2.10.4-150000.4.15.1.src.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.10.4" release="150000.4.15.1" arch="x86_64" src="x86_64/libfreetype6-2.10.4-150000.4.15.1.x86_64.rpm">
          <filename>libfreetype6-2.10.4-150000.4.15.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.10.4" release="150000.4.15.1" arch="s390x" src="s390x/libfreetype6-2.10.4-150000.4.15.1.s390x.rpm">
          <filename>libfreetype6-2.10.4-150000.4.15.1.s390x.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.10.4" release="150000.4.15.1" arch="aarch64" src="aarch64/libfreetype6-2.10.4-150000.4.15.1.aarch64.rpm">
          <filename>libfreetype6-2.10.4-150000.4.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3575</id>
    <title>Recommended update for python3-ec2metadata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1694429023"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214215" id="1214215" title="ec2metadata needs to default to IMDSv2" type="bugzilla"/>
    </references>
    <description>This update for python3-ec2metadata fixes the following issues:

- Update to version 5.0.0 (bsc#1214215)
  - Remove the '--use-token' command line option as AWS is deprecating access
    to instance metadata without authentication token, therefore the ability to access
    metadata without token has been removed.
  - Support access to the metadata server over IPv6. If the customer
    enables the IPv6 endpoint for an instance it will be preferred over the
    IPv4 endpoint
</description>
    <pkglist>
      <collection>
        <package name="python3-ec2metadata" epoch="0" version="5.0.0" release="150000.3.12.1" arch="noarch" src="noarch/python3-ec2metadata-5.0.0-150000.3.12.1.noarch.rpm">
          <filename>python3-ec2metadata-5.0.0-150000.3.12.1.noarch.rpm</filename>
        </package>
        <package name="python3-ec2metadata" epoch="0" version="5.0.0" release="150000.3.12.1" arch="src" src="src/python3-ec2metadata-5.0.0-150000.3.12.1.src.rpm">
          <filename>python3-ec2metadata-5.0.0-150000.3.12.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3553</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1694148278"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209247" id="1209247" title="DASD image does not growfs root filesystem into the unused space of the DASD disk" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Add `parted` support for s390 architecture
- Expand DASD partition table with `parted` (bsc#1209247)
  </description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.59.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.59.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.59.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.59.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.59.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.59.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.59.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.59.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.59.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.59.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.59.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.59.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.59.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.59.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.59.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.59.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.59.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.59.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.59.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.59.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.59.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.59.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.59.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.59.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.59.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.59.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.59.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3555</id>
    <title>Security update for libssh2_org</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1694176361"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214527" id="1214527" title="VUL-0: CVE-2020-22218: libssh2_org: _libssh2_packet_add allows to access out of bounds memory." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22218" id="CVE-2020-22218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22218" type="cve"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- CVE-2020-22218: Fixed a bug in _libssh2_packet_add() which allows to access out of bounds memory. (bsc#1214527)
</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.9.0" release="150000.4.16.1" arch="x86_64" src="x86_64/libssh2-1-1.9.0-150000.4.16.1.x86_64.rpm">
          <filename>libssh2-1-1.9.0-150000.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.9.0" release="150000.4.16.1" arch="src" src="src/libssh2_org-1.9.0-150000.4.16.1.src.rpm">
          <filename>libssh2_org-1.9.0-150000.4.16.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.9.0" release="150000.4.16.1" arch="s390x" src="s390x/libssh2-1-1.9.0-150000.4.16.1.s390x.rpm">
          <filename>libssh2-1-1.9.0-150000.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.9.0" release="150000.4.16.1" arch="aarch64" src="aarch64/libssh2-1-1.9.0-150000.4.16.1.aarch64.rpm">
          <filename>libssh2-1-1.9.0-150000.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3507</id>
    <title>Security update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693504704"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214566" id="1214566" title="VUL-0: EMBARGOED: CVE-2023-20900: open-vm-tools: SAML token signature bypass vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20900" id="CVE-2023-20900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20900" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3421" id="PED-3421" title="https://jira.suse.com/browse/PED-3421" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

This update also ships a open-vm-tools-containerinfo plugin. (jsc#PED-3421)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.2.0" release="150300.33.1" arch="x86_64" src="x86_64/libvmtools0-12.2.0-150300.33.1.x86_64.rpm">
          <filename>libvmtools0-12.2.0-150300.33.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.33.1" arch="src" src="src/open-vm-tools-12.2.0-150300.33.1.src.rpm">
          <filename>open-vm-tools-12.2.0-150300.33.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.2.0" release="150300.33.1" arch="x86_64" src="x86_64/open-vm-tools-12.2.0-150300.33.1.x86_64.rpm">
          <filename>open-vm-tools-12.2.0-150300.33.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3521</id>
    <title>Recommended update for python-iniconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1693897329"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213582" id="1213582" title="Missing dependencies for python3-py-1.10.0-150000.5.9.2.noarch.rpm" type="bugzilla"/>
    </references>
    <description>
This update for python-iniconfig provides python3-iniconfig to SUSE Linux Enterprise Micro 5.2. 
</description>
    <pkglist>
      <collection>
        <package name="python-iniconfig" epoch="0" version="1.1.1" release="150000.1.11.1" arch="src" src="src/python-iniconfig-1.1.1-150000.1.11.1.src.rpm">
          <filename>python-iniconfig-1.1.1-150000.1.11.1.src.rpm</filename>
        </package>
        <package name="python3-iniconfig" epoch="0" version="1.1.1" release="150000.1.11.1" arch="noarch" src="noarch/python3-iniconfig-1.1.1-150000.1.11.1.noarch.rpm">
          <filename>python3-iniconfig-1.1.1-150000.1.11.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3815</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695831735"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.14.1" arch="src" src="src/cni-0.7.1-150100.3.14.1.src.rpm">
          <filename>cni-0.7.1-150100.3.14.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.14.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.14.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.14.1" arch="s390x" src="s390x/cni-0.7.1-150100.3.14.1.s390x.rpm">
          <filename>cni-0.7.1-150100.3.14.1.s390x.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.14.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.14.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3816</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695832055"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.17.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.17.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.17.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.17.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.17.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.17.1" arch="s390x" src="s390x/cni-plugins-0.8.6-150100.3.17.1.s390x.rpm">
          <filename>cni-plugins-0.8.6-150100.3.17.1.s390x.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.17.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.17.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3817</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695832340"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of containerd fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="src" src="src/containerd-1.6.21-150000.95.1.src.rpm">
          <filename>containerd-1.6.21-150000.95.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="x86_64" src="x86_64/containerd-1.6.21-150000.95.1.x86_64.rpm">
          <filename>containerd-1.6.21-150000.95.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="s390x" src="s390x/containerd-1.6.21-150000.95.1.s390x.rpm">
          <filename>containerd-1.6.21-150000.95.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.21" release="150000.95.1" arch="aarch64" src="aarch64/containerd-1.6.21-150000.95.1.aarch64.rpm">
          <filename>containerd-1.6.21-150000.95.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3952</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696356424"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
    </references>
    <description>
This update of runc fixes the following issues:

- Update to runc v1.1.8.

  Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="src" src="src/runc-1.1.8-150000.49.1.src.rpm">
          <filename>runc-1.1.8-150000.49.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="x86_64" src="x86_64/runc-1.1.8-150000.49.1.x86_64.rpm">
          <filename>runc-1.1.8-150000.49.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="s390x" src="s390x/runc-1.1.8-150000.49.1.s390x.rpm">
          <filename>runc-1.1.8-150000.49.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.8" release="150000.49.1" arch="aarch64" src="aarch64/runc-1.1.8-150000.49.1.aarch64.rpm">
          <filename>runc-1.1.8-150000.49.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3863</id>
    <title>Security update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695901174"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213441" id="1213441" title="L3: After latest updates getting tracebacks in salt-master and clients are not checking in" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210994" id="1210994" title="salt gitfs cannot automatically refresh the git cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212844" id="1212844" title="L3: TypeError: LoadedFunc object got multiple values for keyword argument 'saltenv'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212794" id="1212794" title="Minion does not start after upgrade from 3004 to 3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212855" id="1212855" title="Salt: user.present does not leave existing groups alone when groups is unset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213960" id="1213960" title="L3: venv-salt-minion-3006.0-150000.3.35.1 fails to report job results to SUMA GUI System History" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213630" id="1213630" title="L3: An extra return was detected from minion are logged for Salt Bundle version 3006 minions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213257" id="1213257" title="L3: SP Migration from SLES 15 SP1 to SLES 15 SP3 is pickup but the status does not change to complete even though the migration completes successfully" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214797" id="1214797" title="VUL-0: CVE-2023-20898: salt: Git Providers can read from the wrong environment because they get the same cache directory base name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193948" id="1193948" title="L3: Issue with salt and gitfs and multienvironment  with salt pillars" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214796" id="1214796" title="VUL-0: CVE-2023-20897: salt: DOS in minion return" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215489" id="1215489" title="egg-info for Salt has wrong version (including Salt Bundle)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20898" id="CVE-2023-20898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20897" id="CVE-2023-20897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20897" type="cve"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)
- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base
  name. (bsc#1214797, bsc#1193948)

Bugs fixed:

- Create minion_id with reproducible mtime
- Fix broken tests to make them running in the testsuite
- Fix detection of Salt codename by &quot;salt_version&quot; execution module
- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix utf8 handling in 'pass' renderer and make it more robust
- Fix zypper repositories always being reconfigured
- Make sure configured user is properly set by Salt (bsc#1210994)
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.44.1.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.44.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="src" src="src/salt-3006.0-150400.8.44.1.src.rpm">
          <filename>salt-3006.0-150400.8.44.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="x86_64" src="x86_64/salt-3006.0-150400.8.44.1.x86_64.rpm">
          <filename>salt-3006.0-150400.8.44.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.44.1" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.44.1.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.44.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.44.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.44.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.44.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.44.1.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.44.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="s390x" src="s390x/salt-3006.0-150400.8.44.1.s390x.rpm">
          <filename>salt-3006.0-150400.8.44.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.44.1" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.44.1.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.44.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.44.1" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.44.1.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.44.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.44.1.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.44.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.44.1" arch="aarch64" src="aarch64/salt-3006.0-150400.8.44.1.aarch64.rpm">
          <filename>salt-3006.0-150400.8.44.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.44.1" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.44.1.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.44.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.44.1" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.44.1.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.44.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3637</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695034984"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214715" id="1214715" title="L3: Automatic Addition of Secondary IP Addresses in Azure Using cloud-netconfig no longer working" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.8:
  - Fix Automatic Addition of Secondary IP Addresses in Azure Using cloud-netconfig. (bsc#1214715)
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.8" release="150000.25.11.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.8-150000.25.11.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.8-150000.25.11.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.8" release="150000.25.11.1" arch="src" src="src/cloud-netconfig-azure-1.8-150000.25.11.1.src.rpm">
          <filename>cloud-netconfig-azure-1.8-150000.25.11.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.8" release="150000.25.11.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.8-150000.25.11.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.8-150000.25.11.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.8" release="150000.25.11.1" arch="src" src="src/cloud-netconfig-ec2-1.8-150000.25.11.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.8-150000.25.11.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.8" release="150000.25.11.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.8-150000.25.11.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.8-150000.25.11.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.8" release="150000.25.11.1" arch="src" src="src/cloud-netconfig-gce-1.8-150000.25.11.1.src.rpm">
          <filename>cloud-netconfig-gce-1.8-150000.25.11.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3563</id>
    <title>Security update for icu73_2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698690933"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1030253" id="1030253" title="icu fails on a test with GCC 7 on i586" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1095425" id="1095425" title="The ICU library ignores the users locale setting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1103893" id="1103893" title="libicu: New Japanese Era name support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1112183" id="1112183" title="[TRACKERBUG] Japan changing to a new calendar era" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1146907" id="1146907" title="libicu60_2 package has incorrect &quot;Obsoletes&quot; tag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158955" id="1158955" title="icu: /usr/lib64/icu/current not owned by package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1159131" id="1159131" title="icu: follow upstream soname again?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1161007" id="1161007" title="Removal of Provides: libicu breaks installation of SAP HANA on SLE-15 and SLE-15-SP1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1162882" id="1162882" title="icu: Qt apps cannot handle non-ASCII filesystem path if LC_ALL is defined and empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1166844" id="1166844" title="VUL-0: CVE-2020-10531: icu: ICU: Integer overflow in UnicodeString:doAppend()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1167603" id="1167603" title="libicu &quot;provides&quot; clause was removed but is needed for .NET Core" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182252" id="1182252" title="[binutils2.36] nuspell build failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182645" id="1182645" title="icu fails in test on aarch64 since update to 68.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192935" id="1192935" title="ICU package fails in /tsutil/ucptrietest/TrieTestSet1 test for aarch64, armv6/7, ppc64le, riscv64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193951" id="1193951" title="VUL-0: CVE-2020-21913: icu: Use after free in pkg_createWithAssemblyCode function in tools/pkgdata/pkgdata.cpp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=354372" id="354372" title="VUL-0: LibICU (ICU4C) regular expression bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=437293" id="437293" title="obsolete -XXbit packages during system upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=824262" id="824262" title="LibreOffice crashes in libicule.so.51.2" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531" id="CVE-2020-10531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913" id="CVE-2020-21913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-11118" id="SLE-11118" title="https://jira.suse.com/browse/SLE-11118" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4917" id="PED-4917" title="https://jira.suse.com/browse/PED-4917" type="jira"/>
    </references>
    <description>This update for icu73_2 fixes the following issues:

- Update to release 73.2

  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.

- fixes builds where UCHAR_TYPE is re-defined such as libqt5-qtwebengine

- Update to release 73.1

  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting

- Update to release 72.1

  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.

- bump library packagename to libicu71 to match the version.

- update to 71.1:

  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.

- ICU-21793 Fix ucptrietest golden diff [bsc#1192935]

- Update to release 70.1:

  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers

- ICU-21613 Fix undefined behaviour in ComplexUnitsConverter::applyRounder

- Update to release 69.1

  * CLDR 39
  * For Norwegian, &quot;no&quot; is back to being the canonical code, with
    &quot;nb&quot; treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()

- Backport ICU-21366 (bsc#1182645)

- Update to release 68.2

  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer

- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361 

Update to release 68.1:

  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d

- Add the provides for libicu to Make .Net core can install 
  successfully. (bsc#1167603, bsc#1161007) 

Update to version 67.1:

  * Unicode 13 (ICU-20893, same as in ICU 66)

    + Total of 5930 new characters
    + 4 new scripts
    + 55 new emoji characters, plus additional new sequences
    + New CJK extension, first characters in plane 3: U+30000..U+3134A

  * CLDR 37

    + New language at Modern coverage: Nigerian Pidgin
    + New languages at Basic coverage: Fulah (Adlam), Maithili,
      Manipuri, Santali, Sindhi (Devanagari), Sundanese
    + Region containment: EU no longer includes GB
    + Unicode 13 root collation data and Chinese data for collation and transliteration
  * DateTimePatternGenerator now obeys the &quot;hc&quot; preference in the locale identifier (ICU-20442)
  * Various other improvements for ECMA-402 conformance
  * Number skeletons have a new &quot;concise&quot; form that can be used in MessageFormat strings (ICU-20418)
  * Currency formatting options for formal and other currency display name variants (ICU-20854)
  * ListFormatter: new public API to select the style &amp; type (ICU-12863)
  * ListFormatter now selects the proper “and”/“or” form for Spanish &amp; Hebrew (ICU-21016)
  * Locale ID canonicalization upgraded to implement the complete CLDR spec (ICU-20834, ICU-20272)
  * LocaleMatcher: New option to ignore one-way matches (ICU-20936),
    and other tweaks to the code (ICU-20916, ICU-20917) and data (from CLDR)
  * acceptLanguage() reimplemented via LocaleMatcher (ICU-20700)
  * Data build tool: tzdbNames.res moved from the &quot;zone_tree&quot; category to the &quot;zone_supplemental&quot; category (ICU-21073)
  * Fixed uses of u8&quot;literals&quot; broken by the C++20 introduction of the incompatible char8_t type (ICU-20972),
  * and added a few API overloads to reduce the need for reinterpret_cast (ICU-20984).
  * Support for manipulating CLDR 37 unit identifiers in MeasureUnit.
  * Fix potential integer overflow in UnicodeString:doAppend (bsc#1166844, CVE-2020-10531).

Update to version 66.1:

  * Unicode 13 support
  * Fix uses of u8&quot;literals&quot; broken by C++20 introduction of
    incompatible char8_t type. (ICU-20972)
  * use LocalMemory for cmd to prevent use after free
    (bsc#1193951 CVE-2020-21913).

- Remove /usr/lib(64)/icu/current [bsc#1158955].

Update to release 65.1 (jsc#SLE-11118):

  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
</description>
    <pkglist>
      <collection>
        <package name="icu73_2" epoch="0" version="73.2" release="150000.1.3.1" arch="src" src="src/icu73_2-73.2-150000.1.3.1.src.rpm">
          <filename>icu73_2-73.2-150000.1.3.1.src.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.3.1" arch="x86_64" src="x86_64/libicu73_2-73.2-150000.1.3.1.x86_64.rpm">
          <filename>libicu73_2-73.2-150000.1.3.1.x86_64.rpm</filename>
        </package>
        <package name="libicu73_2-ledata" epoch="0" version="73.2" release="150000.1.3.1" arch="noarch" src="noarch/libicu73_2-ledata-73.2-150000.1.3.1.noarch.rpm">
          <filename>libicu73_2-ledata-73.2-150000.1.3.1.noarch.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.3.1" arch="s390x" src="s390x/libicu73_2-73.2-150000.1.3.1.s390x.rpm">
          <filename>libicu73_2-73.2-150000.1.3.1.s390x.rpm</filename>
        </package>
        <package name="libicu73_2-bedata" epoch="0" version="73.2" release="150000.1.3.1" arch="noarch" src="noarch/libicu73_2-bedata-73.2-150000.1.3.1.noarch.rpm">
          <filename>libicu73_2-bedata-73.2-150000.1.3.1.noarch.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.3.1" arch="ppc64le" src="ppc64le/libicu73_2-73.2-150000.1.3.1.ppc64le.rpm">
          <filename>libicu73_2-73.2-150000.1.3.1.ppc64le.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.3.1" arch="aarch64" src="aarch64/libicu73_2-73.2-150000.1.3.1.aarch64.rpm">
          <filename>libicu73_2-73.2-150000.1.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3780</id>
    <title>Recommended update hidapi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695718728"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214535" id="1214535" title="patches with missing dependencies fir libfido2 fail to install" type="bugzilla"/>
    </references>
    <description>
This update for hidapi ships the missing libhidapi-raw0 library to SLE and Leap Micro 5.3 and 5.4.
</description>
    <pkglist>
      <collection>
        <package name="hidapi" epoch="0" version="0.10.1" release="150300.3.2.1" arch="src" src="src/hidapi-0.10.1-150300.3.2.1.src.rpm">
          <filename>hidapi-0.10.1-150300.3.2.1.src.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="x86_64" src="x86_64/libhidapi-hidraw0-0.10.1-150300.3.2.1.x86_64.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="s390x" src="s390x/libhidapi-hidraw0-0.10.1-150300.3.2.1.s390x.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="ppc64le" src="ppc64le/libhidapi-hidraw0-0.10.1-150300.3.2.1.ppc64le.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.ppc64le.rpm</filename>
        </package>
        <package name="libhidapi-hidraw0" epoch="0" version="0.10.1" release="150300.3.2.1" arch="aarch64" src="aarch64/libhidapi-hidraw0-0.10.1-150300.3.2.1.aarch64.rpm">
          <filename>libhidapi-hidraw0-0.10.1-150300.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1910</id>
    <title>Security update for gstreamer-plugins-base</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717428578"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4453" id="CVE-2024-4453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4453" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224806" id="1224806" title="VUL-0: CVE-2024-4453: gstreamer-plugins-base: lack of proper validation of user-supplied data when parsing EXIF metadata" type="bugzilla"/>
    </references>
    <description>This update for gstreamer-plugins-base fixes the following issues:

- CVE-2024-4453: Fixed lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806)
</description>
    <pkglist>
      <collection>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.8.2" arch="src" src="src/gstreamer-plugins-base-1.20.1-150400.3.8.2.src.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.8.2.src.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/gstreamer-plugins-base-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstallocators-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstallocators-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstapp-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstapp-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstaudio-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstaudio-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstgl-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstgl-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstriff-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstriff-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgsttag-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgsttag-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="x86_64" src="x86_64/libgstvideo-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm">
          <filename>libgstvideo-1_0-0-1.20.1-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/gstreamer-plugins-base-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstallocators-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstallocators-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstapp-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstapp-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstaudio-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstaudio-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstgl-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstgl-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstpbutils-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstpbutils-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstriff-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstriff-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgsttag-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgsttag-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="s390x" src="s390x/libgstvideo-1_0-0-1.20.1-150400.3.8.2.s390x.rpm">
          <filename>libgstvideo-1_0-0-1.20.1-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/gstreamer-plugins-base-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>gstreamer-plugins-base-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstallocators-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstallocators-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstapp-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstapp-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstaudio-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstaudio-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstgl-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstgl-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstpbutils-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstpbutils-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstriff-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstriff-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgsttag-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgsttag-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.20.1" release="150400.3.8.2" arch="aarch64" src="aarch64/libgstvideo-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm">
          <filename>libgstvideo-1_0-0-1.20.1-150400.3.8.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3953</id>
    <title>Security update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696356544"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28736" id="CVE-2023-28736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28938" id="CVE-2023-28938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28938" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214244" id="1214244" title="VUL-0: CVE-2023-28736: mdadm: Buffer overflow may allow a privileged user to potentially enable escalation of privilege via local access." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214245" id="1214245" title="VUL-0: CVE-2023-28938: mdadm: Uncontrolled resource consumption may allow a priviledged user to potentially enable denial of service via local access" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issues:

- CVE-2023-28736: Fixed a buffer overflow (bsc#1214244).
- CVE-2023-28938: Fixed uncontrolled resource consumption (bsc#1214245).
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.33.1" arch="src" src="src/mdadm-4.1-150300.24.33.1.src.rpm">
          <filename>mdadm-4.1-150300.24.33.1.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.33.1" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.33.1.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.33.1.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.33.1" arch="s390x" src="s390x/mdadm-4.1-150300.24.33.1.s390x.rpm">
          <filename>mdadm-4.1-150300.24.33.1.s390x.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.33.1" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.33.1.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3822</id>
    <title>Security update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695832891"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210950" id="1210950" title="powerpc plugin to collect the slots and active memory sharing information (lsslot, amsstat)and opal-elogs." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208928" id="1208928" title="Insufficient hwinfo details in supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207543" id="1207543" title="supportconfig collects last 30 files but should collect files for last 30 days instead" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211598" id="1211598" title="supportconfig runs invalid nvme commands" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181477" id="1181477" title="supportconfig doesn't collect container information when podman is used instead of docker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206608" id="1206608" title="supportconfig - docker - Argument list too long" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206402" id="1206402" title="Supportconfig does not remove passwords in /etc/iscsi/iscsid.conf." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209979" id="1209979" title="Supportconfig should check for selinux" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196933" id="1196933" title="apparmor supportutils plugin outdated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210015" id="1210015" title="supportconfig should check for sysfstool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213127" id="1213127" title="Azure - Customer executed &quot;supportconifg -l&quot; command twice - Implement a check to verify if command is already running - SFSC 00696352 - ref:_00D1igLOd._5005qSrAqu:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204942" id="1204942" title="SLES15sp3: getappcore is checking for chkbin in the wrong location." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211599" id="1211599" title="supportconfig is missing discovery and NBFT info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205533" id="1205533" title="getappcore uses incorrect path to chkbin  ref:_00D1igLOd._5005qFgDBr:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207598" id="1207598" title="VUL-0: CVE-2022-45154: supportconfig: does not remove passwords in /etc/iscsi/iscsid.conf and  /etc/target/lio_setup.sh" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45154" id="CVE-2022-45154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45154" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1703" id="PED-1703" title="https://jira.suse.com/browse/PED-1703" type="jira"/>
    </references>
    <description>This update for supportutils fixes the following issues:

Security fixes:

- CVE-2022-45154: Removed iSCSI passwords (bsc#1207598).

Other Fixes:

- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)

- Added run time detection (bsc#1213127)

- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix

- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)

- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs

- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)

- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info 

- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.26" release="150300.7.35.21.1" arch="noarch" src="noarch/supportutils-3.1.26-150300.7.35.21.1.noarch.rpm">
          <filename>supportutils-3.1.26-150300.7.35.21.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.26" release="150300.7.35.21.1" arch="src" src="src/supportutils-3.1.26-150300.7.35.21.1.src.rpm">
          <filename>supportutils-3.1.26-150300.7.35.21.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3973</id>
    <title>Recommended update for zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696493879"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214292" id="1214292" title="zypper signal handler causes deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213854" id="1213854" title="zypper still using /etc/bash_completion.d/" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215007" id="1215007" title="Zypper - Patch openSUSE-SLE-15.5-2023-3514 killed CLI completion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214395" id="1214395" title="CDN repo-non-oss signature verification failed" type="bugzilla"/>
    </references>
    <description>This update for zypper fixes the following issues:

- Fix name of the bash completion script (bsc#1215007)
- Update notes about failing signature checks (bsc#1214395)
- Improve the SIGINT handler to be signal safe (bsc#1214292)
- Update to version 1.14.64
- Changed location of bash completion script (bsc#1213854).</description>
    <pkglist>
      <collection>
        <package name="zypper" epoch="0" version="1.14.64" release="150400.3.32.1" arch="src" src="src/zypper-1.14.64-150400.3.32.1.src.rpm">
          <filename>zypper-1.14.64-150400.3.32.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.64" release="150400.3.32.1" arch="x86_64" src="x86_64/zypper-1.14.64-150400.3.32.1.x86_64.rpm">
          <filename>zypper-1.14.64-150400.3.32.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.64" release="150400.3.32.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.64-150400.3.32.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.64-150400.3.32.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.64" release="150400.3.32.1" arch="s390x" src="s390x/zypper-1.14.64-150400.3.32.1.s390x.rpm">
          <filename>zypper-1.14.64-150400.3.32.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.64" release="150400.3.32.1" arch="aarch64" src="aarch64/zypper-1.14.64-150400.3.32.1.aarch64.rpm">
          <filename>zypper-1.14.64-150400.3.32.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3683</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695285130"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1120059" id="1120059" title="[PATCH] powerpc/mm: Fallback to RAM if the altmap is unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177719" id="1177719" title="compare-and-write miscompare assumes fixed SCSI sense data format which is incorrect for 2TB+ LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208949" id="1208949" title="[SLE15 SP5] cpufreq: intel_pstate: Enable HWP IO boost for all servers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209284" id="1209284" title="Partner-L3: Very long time between &quot;lpfc Link Down Event&quot; and &quot;kernel: xsd ... [xsdmla] ...timing out command&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210048" id="1210048" title="The SG_MAX_DEVS / BSG_MAX_DEVS driver defines artificially limit number of scsi devices to &lt;= 32k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210448" id="1210448" title="VUL-0: CVE-2023-2007: kernel: DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212142" id="1212142" title="SLES15 SP4 CIFS file share mount not working using DFS path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212526" id="1212526" title="[DELL EMC SLES15SP5 BUG] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212857" id="1212857" title="SLE15SP5 LIO SCSI target_core_rbd read data zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212873" id="1212873" title="SLE15SP5 LIO SCSI rbd_img_request_create memory leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213026" id="1213026" title="SLE15SP5 LIO SCSI target_core_rbd compare-and-write MISCOMPARE sense propagation broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213546" id="1213546" title="VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213601" id="1213601" title="VUL-0: CVE-2023-3863: kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213666" id="1213666" title="VUL-0: CVE-2023-3772: kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213757" id="1213757" title="All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213916" id="1213916" title="Partner-L3: Performance Regression seen on SLES15 SP5 for high speed disk save throughput" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213921" id="1213921" title="server go to emergency maintenance mode due to &quot;Fail to mount /boot/efi&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213927" id="1213927" title="VUL-0: CVE-2023-20588: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213946" id="1213946" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4 [ref:_00D1igLOd._5005qUNIHK:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213968" id="1213968" title="VUL-0: CVE-2023-4147: kernel-source-rt,kernel-source,kernel-source-azure: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213970" id="1213970" title="VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213971" id="1213971" title="VUL-0: CVE-2023-4134: kernel-source-rt,kernel-source,kernel-source-azure: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214000" id="1214000" title="exfat: unexpected EOF while reading dir and dir_emit() deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214019" id="1214019" title="VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214120" id="1214120" title="VUL-0: CVE-2023-4273: kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214149" id="1214149" title="VUL-0: CVE-2023-4128: kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214180" id="1214180" title="ceph: never send metrics if disable_send_metrics is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214238" id="1214238" title="L3: Kernel WARNING at ../fs/ceph/super.h:547 __lookup_inode+0x188/0x1a0 [ceph] [ref:_00D1igLOd._5005qUueaS:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214297" id="1214297" title="SLES15SP3 [P10] [Rainier] Kdump over nfs is failing (Everglade/mlx5_core/MOFED5.5/P10/IOMMU/vpmem)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214299" id="1214299" title="SLES15SP5 Maintweb:Backport bnx2x page fault EEH fix from Upstream Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214350" id="1214350" title="VUL-0: CVE-2023-4387: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in vmxnet3_rq_alloc_rx_buf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214368" id="1214368" title="Update to the Intel intel_pstate driver needed to fix a CPU freq issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214370" id="1214370" title="KVM: s390: fix sthyi error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214371" id="1214371" title="scsi: zfcp: Defer fc_rport blocking until after ADISC response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214372" id="1214372" title="s390/purgatory: disable branch profiling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214380" id="1214380" title="Incorrect CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC for arm64 with 6.4 kernel and gcc7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214386" id="1214386" title="Cannot build KMP subpackage as unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214392" id="1214392" title="ceph: defer stopping mdsc delayed_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214393" id="1214393" title="libceph: fix potential hang in ceph_osdc_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214397" id="1214397" title="Installation cannot find my NVMe drive when it comes time to format and install." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214428" id="1214428" title="NVMe regression between kernel 6.4.9 and 6.4.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214451" id="1214451" title="VUL-0: CVE-2023-4459: kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214659" id="1214659" title="Placeholder for power management backports (SLE-15-SP4)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214661" id="1214661" title="L3: XFS corruption on kernel version higher than 5.14.21-150400.24.74.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214729" id="1214729" title="VUL-0: CVE-2023-4569: kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214742" id="1214742" title="netfs: Fix lockdep warning from taking sb_writers whilst holding  mmap_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214743" id="1214743" title="netfs: fix parameter of cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214756" id="1214756" title="e8c07082a810 Kbuild: move to -std=gnu11" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" id="CVE-2023-4569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" id="CVE-2023-4134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" id="CVE-2023-4459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" id="CVE-2023-3863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" id="CVE-2023-3772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" id="CVE-2023-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" id="CVE-2023-4387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" id="CVE-2023-4128" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" id="CVE-2023-4273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" id="CVE-2023-4147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" id="CVE-2023-4133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" id="CVE-2023-34319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" id="CVE-2023-4194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-4579" id="PED-4579" title="https://jira.suse.com/browse/PED-4579" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4759" id="PED-4759" title="https://jira.suse.com/browse/PED-4759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4927" id="PED-4927" title="https://jira.suse.com/browse/PED-4927" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4929" id="PED-4929" title="https://jira.suse.com/browse/PED-4929" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5738" id="PED-5738" title="https://jira.suse.com/browse/PED-5738" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6003" id="PED-6003" title="https://jira.suse.com/browse/PED-6003" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6004" id="PED-6004" title="https://jira.suse.com/browse/PED-6004" type="jira"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

NOTE: This update was retracted due to severe USB problems.

The following security bugs were fixed:

- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).

The following non-security bugs were fixed:

- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).
- acpi: processor: perflib: use the &quot;no limit&quot; frequency qos (git-fixes).
- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).
- alsa: ac97: fix possible error value of *rac97 (git-fixes).
- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).
- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).
- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).
- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).
- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).
- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).
- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).
- alsa: usb-audio: fix init call orders for uac1 (git-fixes).
- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).
- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).
- arm: dts: imx6sll: fixup of operating points (git-fixes).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- asoc: lower &quot;no backend dais enabled for ... port&quot; log severity (git-fixes).
- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).
- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).
- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).
- asoc: tegra: fix sfc conversion for few rates (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).
- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: do not increase mtu when set by user (git-fixes).
- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: fix tt global entry leak when client roamed back (git-fixes).
- batman-adv: trigger events for auto adjusted mtu (git-fixes).
- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).
- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- bluetooth: fix potential use-after-free when clear keys (git-fixes).
- bluetooth: l2cap: fix use-after-free (git-fixes).
- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bpf: disable preemption in bpf_event_output (git-fixes).
- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: fix cast to enum warning (git-fixes).
- bus: ti-sysc: flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on mds stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- config_nvme_verbose_errors=y     gone with a82baa8083b
- config_printk_safe_log_buf_shift=13  gone with 7e152d55123
- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).
- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).
- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).
- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: fix docs syntax (git-fixes).
- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).
- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).
- docs/process/howto: replace c89 with c11 (bsc#1214756).
- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: fix hex printing of signed values (git-fixes).
- documentation: devices.txt: fix minors for ttycpm* (git-fixes).
- documentation: devices.txt: remove ttyioc* (git-fixes).
- documentation: devices.txt: remove ttysioc* (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).
- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).
- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: fix dram init on ast2200 (git-fixes).
- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: fix -wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active mmu context (git-fixes).
- drm/mediatek: fix dereference before null check (git-fixes).
- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).
- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).
- drm/msm/mdp5: do not leak some plane state (git-fixes).
- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).
- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).
- drm/qxl: fix uaf on handle creation (git-fixes).
- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).
- drm/rockchip: do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: reset vma-&gt;vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned bos for eviction&amp;swap (git-fixes).
- drm/vmwgfx: fix shader stage validation (git-fixes).
- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).
- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) 
- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) 
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: fix typos in comments (jsc#ped-5738).
- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).
- e1000: switch to napi_build_skb() (jsc#ped-5738).
- e1000: switch to napi_consume_skb() (jsc#ped-5738).
- enable analog devices industrial ethernet phy driver (jsc#ped-4759)
- exfat: fix unexpected eof while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).
- fbdev: fix potential oob read in fast_imageblit() (git-fixes).
- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: improve performance of sys_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).
- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).
- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).
- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).
- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).
- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).
- hid: wacom: remove the battery when the ekr is off (git-fixes).
- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).
- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).
- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).
- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: correct length byte validation logic (git-fixes).
- i2c: designware: handle invalid smbus block data response length value (git-fixes).
- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).
- i2c: improve size determinations (git-fixes).
- i2c: nomadik: remove a useless call in the remove function (git-fixes).
- i2c: nomadik: remove unnecessary goto label (git-fixes).
- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).
- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for fdir filters (git-fixes).
- ib/hfi1: fix possible panic during hotplug remove (git-fixes)
- ib/uverbs: fix an potential error pointer dereference (git-fixes)
- ice: fix max_rate check while configuring tx rate limits (git-fixes).
- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).
- ice: fix rdma vsi removal during queue rebuild (git-fixes).
- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).
- iio: adc: stx104: implement and utilize register structures (git-fixes).
- iio: adc: stx104: utilize iomap interface (git-fixes).
- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).
- input: exc3000 - properly stop timer on shutdown (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#ped-5738).
- intel: remove unused macros (jsc#ped-5738).
- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).
- iommu/amd: fix compile warning in init code (git-fixes).
- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: initialize dart_streams_enable (git-fixes).
- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).
- iommu/iova: fix module config properly (git-fixes).
- iommu/omap: fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/sun50i: consider all fault sources for reset (git-fixes).
- iommu/sun50i: fix flush size (git-fixes).
- iommu/sun50i: fix r/w permission check (git-fixes).
- iommu/sun50i: fix reset release (git-fixes).
- iommu/sun50i: implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: remove iommu_domain_identity (git-fixes).
- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).
- iommu/vt-d: check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).
- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).
- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).
- ipmi:ssif: add check for kstrdup (git-fixes).
- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- kabi: allow extra bugsints (bsc#1213927).
- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).
- kbuild: move to -std=gnu11 (bsc#1214756).
- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).
- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).
- leds: multicolor: use rounded division when calculating color components (git-fixes).
- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order max_order (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: remove redundant if statement (git-fixes).
- media: i2c: ccs: check rules is non-null (git-fixes).
- media: i2c: rdacm21: fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: fix ov2680_bayer_order() (git-fixes).
- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).
- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: fix vflip / hflip set functions (git-fixes).
- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).
- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for h.264 (git-fixes).
- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).
- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).
- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).
- mkspec: allow unsupported kmps (bsc#1214386)
- mlxsw: pci: add shutdown method in pci driver (git-fixes).
- mmc: block: fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- move upstreamed hid patch into sorted section
- move upstreamed powerpc patches into sorted section
- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: check bus width while setting qe bit (git-fixes).
- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).
- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).
- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).
- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).
- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- objtool/x86: fix srso mess (git-fixes).
- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).
- objtool: union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.
- pci/aspm: avoid link retraining race (git-fixes).
- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).
- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).
- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).
- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).
- pci: meson: remove cast between incompatible function type (git-fixes).
- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).
- pci: microchip: remove cast between incompatible function type (git-fixes).
- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).
- pci: rockchip: remove writes to unused registers (git-fixes).
- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).
- pci: tegra194: fix possible array out of bounds access (git-fixes).
- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: fix reference leak (git-fixes).
- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).
- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).
- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).
- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: rename &quot;direct window&quot; to &quot;dma window&quot; (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051). 
- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).
- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: check start of empty przs during init (git-fixes).
- pwm: add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).
- pwm: meson: simplify duplicated per-channel tracking (git-fixes).
- qed: fix scheduling in a tasklet while getting stats (git-fixes).
- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)
- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)
- rdma/efa: fix wrong resources deallocation order (git-fixes)
- rdma/hns: fix cq and qp cache affinity (git-fixes)
- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)
- rdma/hns: fix port active speed (git-fixes)
- rdma/irdma: prevent zero-length stag registration (git-fixes)
- rdma/irdma: replace one-element array with flexible-array member (git-fixes)
- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)
- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)
- rdma/siw: balance the reference of cep-&gt;kref in the error path (git-fixes)
- rdma/siw: correct wrong debug message (git-fixes)
- rdma/umem: set iova in odp flow (git-fixes)
- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.
- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).
- revert &quot;ib/isert: fix incorrect release of isert connection&quot; (git-fixes)
- revert &quot;tracing: add &quot;(fault)&quot; name injection to kernel probes&quot; (git-fixes).
- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer-&gt;read (git-fixes).
- rpmsg: glink: add check for kstrdup (git-fixes).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).
- scsi: bsg: increase number of devices (bsc#1210048).
- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: rdma/srp: fix residual handling (git-fixes)
- scsi: sg: increase number of devices (bsc#1210048).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- scsi: storvsc: handle srb status value 0x30 (git-fixes).
- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).
- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).
- selftests/futex: order calls to futex_lock_pi (git-fixes).
- selftests/harness: actually report skip for signal tests (git-fixes).
- selftests/resctrl: close perf value read fd on errors (git-fixes).
- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).
- selftests: forwarding: skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: switch off timeout (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_flower: relax success criterion (git-fixes).
- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).
- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: fix dma buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while nic is resetting (git-fixes).
- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).
- smb: client: fix -wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: fix not to count error code to total length (git-fixes).
- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: fix memory leak of iter-&gt;temp when reading trace_pipe (git-fixes).
- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).
- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).
- ubifs: fix memleak when insert_old_idx() failed (git-fixes).
- update cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).
- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: fix typos in gadget.c (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: dwc3: properly handle processing of pending events (git-fixes).
- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).
- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for focusrite scarlett (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).
- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).
- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/alternative: make custom return thunk unconditional (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu: clean up srso return thunk mess (git-fixes).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/srso: fix return thunks in generated code (git-fixes).
- x86/static_call: fix __static_call_fixup() (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.84.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.84.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.84.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.84.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.84.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.84.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.84.1.150400.24.37.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.84.1.150400.24.37.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.84.1.150400.24.37.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.84.1.150400.24.37.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.84.1.150400.24.37.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.84.1.150400.24.37.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.84.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.84.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.84.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.84.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.84.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.84.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.84.1.150400.24.37.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.84.1.150400.24.37.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.84.1.150400.24.37.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3823</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695833003"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215026" id="1215026" title="VUL-0: EMBARGOED: CVE-2023-38039: curl: HTTP headers eat all memory" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38039" id="CVE-2023-38039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38039" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.29.1" arch="src" src="src/curl-8.0.1-150400.5.29.1.src.rpm">
          <filename>curl-8.0.1-150400.5.29.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.29.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.29.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.29.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.29.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.29.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.29.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.29.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.29.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.29.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.29.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.29.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.29.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.29.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.29.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.29.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.29.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.29.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3699</id>
    <title>Security update for libxml2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695200593"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39615" id="CVE-2023-39615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39615" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214768" id="1214768" title="VUL-0: CVE-2023-39615: libxml2,python-libxml2: crafted xml can cause global buffer overflow" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.22.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.22.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="src" src="src/libxml2-2.9.14-150400.5.22.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.22.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.22.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.22.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.22.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.22.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.22.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.22.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.22.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.22.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="s390x" src="s390x/libxml2-2-2.9.14-150400.5.22.1.s390x.rpm">
          <filename>libxml2-2-2.9.14-150400.5.22.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.22.1" arch="s390x" src="s390x/libxml2-tools-2.9.14-150400.5.22.1.s390x.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.22.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="s390x" src="s390x/python3-libxml2-2.9.14-150400.5.22.1.s390x.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.22.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.22.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.22.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.22.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.22.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.22.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.22.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.22.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3707</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695222811"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504" id="CVE-2023-4504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360" id="CVE-2023-32360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214254" id="1214254" title="VUL-0: CVE-2023-32360: cups: Information leak through Cups-Get-Document operation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215204" id="1215204" title="VUL-0: EMBARGOED: CVE-2023-4504: cups: OpenPrinting CUPS Postscript Parsing Heap Overflow" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204).
- CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254).
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.51.2" arch="src" src="src/cups-2.2.7-150000.3.51.2.src.rpm">
          <filename>cups-2.2.7-150000.3.51.2.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.51.2" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.51.2.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.51.2.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.51.2" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.51.2.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.51.2.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.51.2" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.51.2.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.51.2.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.51.2" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.51.2.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.51.2.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.51.2" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.51.2.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.51.2.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.51.2" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.51.2.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.51.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3856</id>
    <title>Recommended update for apparmor</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695886998"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214458" id="1214458" title="/usr/bin/xzegrep: line 219: /usr/bin/egrep: Permission denied" type="bugzilla"/>
    </references>
    <description>This update for apparmor fixes the following issues:

- Update zgrep profile to allow egrep helper use (bsc#1214458)
</description>
    <pkglist>
      <collection>
        <package name="apparmor" epoch="0" version="3.0.4" release="150400.5.9.1" arch="src" src="src/apparmor-3.0.4-150400.5.9.1.src.rpm">
          <filename>apparmor-3.0.4-150400.5.9.1.src.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150400.5.9.1" arch="x86_64" src="x86_64/apparmor-parser-3.0.4-150400.5.9.1.x86_64.rpm">
          <filename>apparmor-parser-3.0.4-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libapparmor" epoch="0" version="3.0.4" release="150400.5.9.1" arch="src" src="src/libapparmor-3.0.4-150400.5.9.1.src.rpm">
          <filename>libapparmor-3.0.4-150400.5.9.1.src.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150400.5.9.1" arch="x86_64" src="x86_64/libapparmor1-3.0.4-150400.5.9.1.x86_64.rpm">
          <filename>libapparmor1-3.0.4-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150400.5.9.1" arch="x86_64" src="x86_64/pam_apparmor-3.0.4-150400.5.9.1.x86_64.rpm">
          <filename>pam_apparmor-3.0.4-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150400.5.9.1" arch="s390x" src="s390x/apparmor-parser-3.0.4-150400.5.9.1.s390x.rpm">
          <filename>apparmor-parser-3.0.4-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150400.5.9.1" arch="s390x" src="s390x/libapparmor1-3.0.4-150400.5.9.1.s390x.rpm">
          <filename>libapparmor1-3.0.4-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150400.5.9.1" arch="s390x" src="s390x/pam_apparmor-3.0.4-150400.5.9.1.s390x.rpm">
          <filename>pam_apparmor-3.0.4-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="3.0.4" release="150400.5.9.1" arch="aarch64" src="aarch64/apparmor-parser-3.0.4-150400.5.9.1.aarch64.rpm">
          <filename>apparmor-parser-3.0.4-150400.5.9.1.aarch64.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="3.0.4" release="150400.5.9.1" arch="aarch64" src="aarch64/libapparmor1-3.0.4-150400.5.9.1.aarch64.rpm">
          <filename>libapparmor1-3.0.4-150400.5.9.1.aarch64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="3.0.4" release="150400.5.9.1" arch="aarch64" src="aarch64/pam_apparmor-3.0.4-150400.5.9.1.aarch64.rpm">
          <filename>pam_apparmor-3.0.4-150400.5.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3954</id>
    <title>Security update for libeconf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696356634"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30078" id="CVE-2023-30078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30078" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30079" id="CVE-2023-30079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30079" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32181" id="CVE-2023-32181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22652" id="CVE-2023-22652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22652" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211078" id="1211078" title="VUL-0: CVE-2023-22652, CVE-2023-32181: libeconf: Two stack-buffer-overflow issues" type="bugzilla"/>
    </references>
    <description>This update for libeconf fixes the following issues:

Update to version 0.5.2.

- CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in &quot;econf_writeFile&quot; function (bsc#1211078).
- CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in &quot;read_file&quot; function. (bsc#1211078)
</description>
    <pkglist>
      <collection>
        <package name="libeconf" epoch="0" version="0.5.2" release="150400.3.6.1" arch="src" src="src/libeconf-0.5.2-150400.3.6.1.src.rpm">
          <filename>libeconf-0.5.2-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.5.2" release="150400.3.6.1" arch="x86_64" src="x86_64/libeconf0-0.5.2-150400.3.6.1.x86_64.rpm">
          <filename>libeconf0-0.5.2-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.5.2" release="150400.3.6.1" arch="s390x" src="s390x/libeconf0-0.5.2-150400.3.6.1.s390x.rpm">
          <filename>libeconf0-0.5.2-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.5.2" release="150400.3.6.1" arch="aarch64" src="aarch64/libeconf0-0.5.2-150400.3.6.1.aarch64.rpm">
          <filename>libeconf0-0.5.2-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3855</id>
    <title>Recommended update for nvme-cli</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695886784"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213762" id="1213762" title="nvme list -v crashes when -o json option is provided" type="bugzilla"/>
    </references>
    <description>This update for nvme-cli fixes the following issues:

- Update to version 2.0+48.gbd004e
- Fix segfault converting NULL to JSON string (bsc#1213762)
</description>
    <pkglist>
      <collection>
        <package name="nvme-cli" epoch="0" version="2.0+48.gbd004e" release="150400.3.24.1" arch="src" src="src/nvme-cli-2.0+48.gbd004e-150400.3.24.1.src.rpm">
          <filename>nvme-cli-2.0+48.gbd004e-150400.3.24.1.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+48.gbd004e" release="150400.3.24.1" arch="x86_64" src="x86_64/nvme-cli-2.0+48.gbd004e-150400.3.24.1.x86_64.rpm">
          <filename>nvme-cli-2.0+48.gbd004e-150400.3.24.1.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+48.gbd004e" release="150400.3.24.1" arch="s390x" src="s390x/nvme-cli-2.0+48.gbd004e-150400.3.24.1.s390x.rpm">
          <filename>nvme-cli-2.0+48.gbd004e-150400.3.24.1.s390x.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0+48.gbd004e" release="150400.3.24.1" arch="aarch64" src="aarch64/nvme-cli-2.0+48.gbd004e-150400.3.24.1.aarch64.rpm">
          <filename>nvme-cli-2.0+48.gbd004e-150400.3.24.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3600</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695291488"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1120059" id="1120059" title="[PATCH] powerpc/mm: Fallback to RAM if the altmap is unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177719" id="1177719" title="compare-and-write miscompare assumes fixed SCSI sense data format which is incorrect for 2TB+ LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208949" id="1208949" title="[SLE15 SP5] cpufreq: intel_pstate: Enable HWP IO boost for all servers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209284" id="1209284" title="Partner-L3: Very long time between &quot;lpfc Link Down Event&quot; and &quot;kernel: xsd ... [xsdmla] ...timing out command&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210048" id="1210048" title="The SG_MAX_DEVS / BSG_MAX_DEVS driver defines artificially limit number of scsi devices to &lt;= 32k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210448" id="1210448" title="VUL-0: CVE-2023-2007: kernel: DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212142" id="1212142" title="SLES15 SP4 CIFS file share mount not working using DFS path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212526" id="1212526" title="[DELL EMC SLES15SP5 BUG] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212857" id="1212857" title="SLE15SP5 LIO SCSI target_core_rbd read data zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212873" id="1212873" title="SLE15SP5 LIO SCSI rbd_img_request_create memory leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213026" id="1213026" title="SLE15SP5 LIO SCSI target_core_rbd compare-and-write MISCOMPARE sense propagation broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213546" id="1213546" title="VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213601" id="1213601" title="VUL-0: CVE-2023-3863: kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213666" id="1213666" title="VUL-0: CVE-2023-3772: kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213757" id="1213757" title="All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213916" id="1213916" title="Partner-L3: Performance Regression seen on SLES15 SP5 for high speed disk save throughput" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213921" id="1213921" title="server go to emergency maintenance mode due to &quot;Fail to mount /boot/efi&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213927" id="1213927" title="VUL-0: CVE-2023-20588: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213946" id="1213946" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4 [ref:_00D1igLOd._5005qUNIHK:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213968" id="1213968" title="VUL-0: CVE-2023-4147: kernel-source-rt,kernel-source,kernel-source-azure: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213970" id="1213970" title="VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213971" id="1213971" title="VUL-0: CVE-2023-4134: kernel-source-rt,kernel-source,kernel-source-azure: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214000" id="1214000" title="exfat: unexpected EOF while reading dir and dir_emit() deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214019" id="1214019" title="VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214120" id="1214120" title="VUL-0: CVE-2023-4273: kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214149" id="1214149" title="VUL-0: CVE-2023-4128: kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214180" id="1214180" title="ceph: never send metrics if disable_send_metrics is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214238" id="1214238" title="L3: Kernel WARNING at ../fs/ceph/super.h:547 __lookup_inode+0x188/0x1a0 [ceph] [ref:_00D1igLOd._5005qUueaS:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214297" id="1214297" title="SLES15SP3 [P10] [Rainier] Kdump over nfs is failing (Everglade/mlx5_core/MOFED5.5/P10/IOMMU/vpmem)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214299" id="1214299" title="SLES15SP5 Maintweb:Backport bnx2x page fault EEH fix from Upstream Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214350" id="1214350" title="VUL-0: CVE-2023-4387: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in vmxnet3_rq_alloc_rx_buf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214368" id="1214368" title="Update to the Intel intel_pstate driver needed to fix a CPU freq issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214370" id="1214370" title="KVM: s390: fix sthyi error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214371" id="1214371" title="scsi: zfcp: Defer fc_rport blocking until after ADISC response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214372" id="1214372" title="s390/purgatory: disable branch profiling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214380" id="1214380" title="Incorrect CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC for arm64 with 6.4 kernel and gcc7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214386" id="1214386" title="Cannot build KMP subpackage as unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214392" id="1214392" title="ceph: defer stopping mdsc delayed_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214393" id="1214393" title="libceph: fix potential hang in ceph_osdc_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214397" id="1214397" title="Installation cannot find my NVMe drive when it comes time to format and install." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214428" id="1214428" title="NVMe regression between kernel 6.4.9 and 6.4.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214451" id="1214451" title="VUL-0: CVE-2023-4459: kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214659" id="1214659" title="Placeholder for power management backports (SLE-15-SP4)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214661" id="1214661" title="L3: XFS corruption on kernel version higher than 5.14.21-150400.24.74.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214729" id="1214729" title="VUL-0: CVE-2023-4569: kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214742" id="1214742" title="netfs: Fix lockdep warning from taking sb_writers whilst holding  mmap_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214743" id="1214743" title="netfs: fix parameter of cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214756" id="1214756" title="e8c07082a810 Kbuild: move to -std=gnu11" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" id="CVE-2023-4569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" id="CVE-2023-4134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" id="CVE-2023-4459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" id="CVE-2023-3863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" id="CVE-2023-3772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" id="CVE-2023-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" id="CVE-2023-4387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" id="CVE-2023-4128" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" id="CVE-2023-4273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" id="CVE-2023-4147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" id="CVE-2023-4133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" id="CVE-2023-34319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" id="CVE-2023-4194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-4579" id="PED-4579" title="https://jira.suse.com/browse/PED-4579" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4759" id="PED-4759" title="https://jira.suse.com/browse/PED-4759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4927" id="PED-4927" title="https://jira.suse.com/browse/PED-4927" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4929" id="PED-4929" title="https://jira.suse.com/browse/PED-4929" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5738" id="PED-5738" title="https://jira.suse.com/browse/PED-5738" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6003" id="PED-6003" title="https://jira.suse.com/browse/PED-6003" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6004" id="PED-6004" title="https://jira.suse.com/browse/PED-6004" type="jira"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

NOTE: This update was retracted due to serious USB regression


The following security bugs were fixed:

- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).

The following non-security bugs were fixed:

- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).
- acpi: processor: perflib: use the &quot;no limit&quot; frequency qos (git-fixes).
- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).
- alsa: ac97: fix possible error value of *rac97 (git-fixes).
- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).
- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).
- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).
- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).
- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).
- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).
- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).
- alsa: usb-audio: fix init call orders for uac1 (git-fixes).
- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).
- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).
- arm: dts: imx6sll: fixup of operating points (git-fixes).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- asoc: lower &quot;no backend dais enabled for ... port&quot; log severity (git-fixes).
- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).
- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).
- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).
- asoc: tegra: fix sfc conversion for few rates (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).
- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: do not increase mtu when set by user (git-fixes).
- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: fix tt global entry leak when client roamed back (git-fixes).
- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).
- batman-adv: trigger events for auto adjusted mtu (git-fixes).
- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).
- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- bluetooth: fix potential use-after-free when clear keys (git-fixes).
- bluetooth: l2cap: fix use-after-free (git-fixes).
- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bpf: disable preemption in bpf_event_output (git-fixes).
- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: fix cast to enum warning (git-fixes).
- bus: ti-sysc: flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on mds stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- config_nvme_verbose_errors=y     gone with a82baa8083b
- config_printk_safe_log_buf_shift=13  gone with 7e152d55123
- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).
- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).
- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).
- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: fix docs syntax (git-fixes).
- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).
- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).
- docs/process/howto: replace c89 with c11 (bsc#1214756).
- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: fix hex printing of signed values (git-fixes).
- documentation: devices.txt: fix minors for ttycpm* (git-fixes).
- documentation: devices.txt: remove ttyioc* (git-fixes).
- documentation: devices.txt: remove ttysioc* (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).
- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).
- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: fix dram init on ast2200 (git-fixes).
- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: fix -wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active mmu context (git-fixes).
- drm/mediatek: fix dereference before null check (git-fixes).
- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).
- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).
- drm/msm/mdp5: do not leak some plane state (git-fixes).
- drm/msm: update dev core dump to not print backwards (git-fixes).
- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).
- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).
- drm/qxl: fix uaf on handle creation (git-fixes).
- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).
- drm/rockchip: do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: reset vma-&gt;vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned bos for eviction&amp;swap (git-fixes).
- drm/vmwgfx: fix shader stage validation (git-fixes).
- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).
- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).
- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) 
- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) 
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: fix typos in comments (jsc#ped-5738).
- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).
- e1000: switch to napi_build_skb() (jsc#ped-5738).
- e1000: switch to napi_consume_skb() (jsc#ped-5738).
- enable analog devices industrial ethernet phy driver (jsc#ped-4759)
- exfat: fix unexpected eof while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).
- fbdev: fix potential oob read in fast_imageblit() (git-fixes).
- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: improve performance of sys_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).
- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).
- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).
- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).
- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).
- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).
- hid: wacom: remove the battery when the ekr is off (git-fixes).
- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).
- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).
- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).
- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: delete error messages for failed memory allocations (git-fixes).
- i2c: designware: correct length byte validation logic (git-fixes).
- i2c: designware: handle invalid smbus block data response length value (git-fixes).
- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).
- i2c: improve size determinations (git-fixes).
- i2c: nomadik: remove a useless call in the remove function (git-fixes).
- i2c: nomadik: remove unnecessary goto label (git-fixes).
- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).
- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for fdir filters (git-fixes).
- ib/hfi1: fix possible panic during hotplug remove (git-fixes)
- ib/uverbs: fix an potential error pointer dereference (git-fixes)
- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).
- ice: fix max_rate check while configuring tx rate limits (git-fixes).
- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).
- ice: fix rdma vsi removal during queue rebuild (git-fixes).
- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).
- iio: adc: stx104: implement and utilize register structures (git-fixes).
- iio: adc: stx104: utilize iomap interface (git-fixes).
- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).
- input: exc3000 - properly stop timer on shutdown (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#ped-5738).
- intel: remove unused macros (jsc#ped-5738).
- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).
- iommu/amd: fix compile warning in init code (git-fixes).
- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: initialize dart_streams_enable (git-fixes).
- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).
- iommu/iova: fix module config properly (git-fixes).
- iommu/omap: fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/sun50i: consider all fault sources for reset (git-fixes).
- iommu/sun50i: fix flush size (git-fixes).
- iommu/sun50i: fix r/w permission check (git-fixes).
- iommu/sun50i: fix reset release (git-fixes).
- iommu/sun50i: implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: remove iommu_domain_identity (git-fixes).
- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).
- iommu/vt-d: check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).
- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).
- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).
- ipmi:ssif: add check for kstrdup (git-fixes).
- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- kabi: allow extra bugsints (bsc#1213927).
- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).
- kbuild: move to -std=gnu11 (bsc#1214756).
- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).
- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).
- leds: multicolor: use rounded division when calculating color components (git-fixes).
- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order max_order (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: remove redundant if statement (git-fixes).
- media: i2c: ccs: check rules is non-null (git-fixes).
- media: i2c: rdacm21: fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: fix ov2680_bayer_order() (git-fixes).
- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).
- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: fix vflip / hflip set functions (git-fixes).
- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).
- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for h.264 (git-fixes).
- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).
- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).
- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).
- mkspec: allow unsupported kmps (bsc#1214386)
- mlxsw: pci: add shutdown method in pci driver (git-fixes).
- mmc: block: fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- move upstreamed powerpc patches into sorted section
- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: check bus width while setting qe bit (git-fixes).
- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).
- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).
- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).
- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).
- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- objtool/x86: fix srso mess (git-fixes).
- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).
- objtool: union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.
- pci/aspm: avoid link retraining race (git-fixes).
- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).
- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).
- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).
- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).
- pci: meson: remove cast between incompatible function type (git-fixes).
- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).
- pci: microchip: remove cast between incompatible function type (git-fixes).
- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).
- pci: rockchip: remove writes to unused registers (git-fixes).
- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).
- pci: tegra194: fix possible array out of bounds access (git-fixes).
- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: fix reference leak (git-fixes).
- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).
- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).
- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).
- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: rename &quot;direct window&quot; to &quot;dma window&quot; (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106). 
- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).
- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: check start of empty przs during init (git-fixes).
- pwm: add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).
- pwm: meson: simplify duplicated per-channel tracking (git-fixes).
- qed: fix scheduling in a tasklet while getting stats (git-fixes).
- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)
- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)
- rdma/efa: fix wrong resources deallocation order (git-fixes)
- rdma/hns: fix cq and qp cache affinity (git-fixes)
- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)
- rdma/hns: fix port active speed (git-fixes)
- rdma/irdma: prevent zero-length stag registration (git-fixes)
- rdma/irdma: replace one-element array with flexible-array member (git-fixes)
- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)
- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)
- rdma/siw: balance the reference of cep-&gt;kref in the error path (git-fixes)
- rdma/siw: correct wrong debug message (git-fixes)
- rdma/umem: set iova in odp flow (git-fixes)
- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.
- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).
- revert &quot;ib/isert: fix incorrect release of isert connection&quot; (git-fixes)
- revert &quot;tracing: add &quot;(fault)&quot; name injection to kernel probes&quot; (git-fixes).
- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer-&gt;read (git-fixes).
- rpmsg: glink: add check for kstrdup (git-fixes).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).
- scsi: bsg: increase number of devices (bsc#1210048).
- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: rdma/srp: fix residual handling (git-fixes)
- scsi: sg: increase number of devices (bsc#1210048).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- scsi: storvsc: handle srb status value 0x30 (git-fixes).
- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).
- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).
- selftests/futex: order calls to futex_lock_pi (git-fixes).
- selftests/harness: actually report skip for signal tests (git-fixes).
- selftests/resctrl: close perf value read fd on errors (git-fixes).
- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).
- selftests: forwarding: skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: switch off timeout (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_flower: relax success criterion (git-fixes).
- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).
- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: fix dma buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while nic is resetting (git-fixes).
- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).
- smb: client: fix -wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: fix not to count error code to total length (git-fixes).
- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: fix memory leak of iter-&gt;temp when reading trace_pipe (git-fixes).
- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).
- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).
- ubifs: fix memleak when insert_old_idx() failed (git-fixes).
- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).
- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: fix typos in gadget.c (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: dwc3: properly handle processing of pending events (git-fixes).
- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).
- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for focusrite scarlett (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).
- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).
- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/alternative: make custom return thunk unconditional (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu: clean up srso return thunk mess (git-fixes).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/srso: fix return thunks in generated code (git-fixes).
- x86/static_call: fix __static_call_fixup() (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.49.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.49.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.49.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.49.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.49.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.49.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3843</id>
    <title>Recommended update for suse-build-key</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695838727"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update adds and runs a import-suse-build-key script.

It is run after installation with libzypp based installers. (jsc#PED-2777)

It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys.

To manually import them you can also run:

# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.34.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.34.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.34.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.34.1" arch="src" src="src/suse-build-key-12.0-150000.8.34.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.34.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3591</id>
    <title>Security update for shadow</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1694586839"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214806" id="1214806" title="VUL-0: CVE-2023-4641: shadow: possible password leak during passwd(1) change" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4641" id="CVE-2023-4641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4641" type="cve"/>
    </references>
    <description>This update for shadow fixes the following issues:

- CVE-2023-4641: Fixed potential password leak (bsc#1214806).
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150400.3.3.1" arch="noarch" src="noarch/login_defs-4.8.1-150400.3.3.1.noarch.rpm">
          <filename>login_defs-4.8.1-150400.3.3.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.3.1" arch="src" src="src/shadow-4.8.1-150400.3.3.1.src.rpm">
          <filename>shadow-4.8.1-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.3.1" arch="x86_64" src="x86_64/shadow-4.8.1-150400.3.3.1.x86_64.rpm">
          <filename>shadow-4.8.1-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.3.1" arch="s390x" src="s390x/shadow-4.8.1-150400.3.3.1.s390x.rpm">
          <filename>shadow-4.8.1-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.3.1" arch="aarch64" src="aarch64/shadow-4.8.1-150400.3.3.1.aarch64.rpm">
          <filename>shadow-4.8.1-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3663</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695066596"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215064" id="1215064" title="kernel-rt postinst script fails" type="bugzilla"/>
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
  </description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="src" src="src/perl-Bootloader-0.945-150400.3.9.1.src.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="x86_64" src="x86_64/perl-Bootloader-0.945-150400.3.9.1.x86_64.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="s390x" src="s390x/perl-Bootloader-0.945-150400.3.9.1.s390x.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.945" release="150400.3.9.1" arch="aarch64" src="aarch64/perl-Bootloader-0.945-150400.3.9.1.aarch64.rpm">
          <filename>perl-Bootloader-0.945-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3828</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695834666"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217" id="CVE-2023-40217" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214692" id="1214692" title="VUL-0: CVE-2023-40217: python,python3,python39,python36,python310,python311: Bypass TLS handshake on closed sockets" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.51.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.51.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.51.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="src" src="src/python3-3.6.15-150300.10.51.1.src.rpm">
          <filename>python3-3.6.15-150300.10.51.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.51.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.51.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.51.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.51.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.51.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.51.1" arch="src" src="src/python3-core-3.6.15-150300.10.51.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.51.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.51.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.51.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.51.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.51.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.51.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.51.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.51.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.51.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.51.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.51.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.51.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.51.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.51.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.51.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.51.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.51.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.51.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3736</id>
    <title>Recommended update for libcontainers-common</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695407470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215291" id="1215291" title="container-suseconnect no longer works on SLE Micro 5.3 or 5.4" type="bugzilla"/>
    </references>
    <description>This update for libcontainers-common fixes the following issues:

- Require libcontainers-sles-mounts for *all* SUSE Linux Enterprise products,
  and not just SUSE Linux Enterprise Server. (bsc#1215291)
</description>
    <pkglist>
      <collection>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.11.1" arch="noarch" src="noarch/libcontainers-common-20230214-150400.3.11.1.noarch.rpm">
          <filename>libcontainers-common-20230214-150400.3.11.1.noarch.rpm</filename>
        </package>
        <package name="libcontainers-common" epoch="0" version="20230214" release="150400.3.11.1" arch="src" src="src/libcontainers-common-20230214-150400.3.11.1.src.rpm">
          <filename>libcontainers-common-20230214-150400.3.11.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4162</id>
    <title>Security update for gcc13</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698068056"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214052" id="1214052" title="VUL-0: CVE-2023-4039: gcc: stack protector does not protect C99 VLAs on Aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212101" id="1212101" title="Firefox 114.0 and 114.0.1 immediately crashes at startup." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214460" id="1214460" title="s390x crosscompiler does not seem functional, missing -lgcc, impeding upstream QEMU work (tcg tests)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213915" id="1213915" title="ppc64le Kernel panic - illegal instruction (4) at 7fffb6a4f874 nip 7fffb6a4f874 lr 7fffb6a4380c code 1 in ld64.so.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211427" id="1211427" title="gcc: have libstdc++6-devel-gccZZ own directories it populates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210557" id="1210557" title="compilation of network/psi+ is stuck in cc1plus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206480" id="1206480" title="GCC13 fails on armv6/7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206684" id="1206684" title="Segmentation fault with zypper-1.14.58-1.2.aarch64" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" id="CVE-2023-4039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-153" id="PED-153" title="https://jira.suse.com/browse/PED-153" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-252" id="PED-252" title="https://jira.suse.com/browse/PED-252" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-253" id="PED-253" title="https://jira.suse.com/browse/PED-253" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2005" id="PED-2005" title="https://jira.suse.com/browse/PED-2005" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6584" id="PED-6584" title="https://jira.suse.com/browse/PED-6584" type="jira"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP4 and SP5, and provided in the &quot;Development Tools&quot; module.

The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.

To use gcc13 compilers use:

- install &quot;gcc13&quot; or &quot;gcc13-c++&quot; or one of the other &quot;gcc13-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

        https://gcc.gnu.org/gcc-13/changes.html


Detailed changes:


* CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable
  length stack allocations.  (bsc#1214052)

- Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

- Also handle -static-pie in the default-PIE specs
- Fixed missed optimization in Skia resulting in Firefox crashes when
  building with LTO.  [bsc#1212101]
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]
- Add new x86-related intrinsics (amxcomplexintrin.h).
- RISC-V: Add support for inlining subword atomic operations
- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.
- Add cross-bpf packages.  See https://gcc.gnu.org/wiki/BPFBackEnd
  for the general state of BPF with GCC.
- Add bootstrap conditional to allow --without=bootstrap to be
  specified to speed up local builds for testing.
- Bump included newlib to version 4.3.0. 
- Also package libhwasan_preinit.o on aarch64.
- Configure external timezone database provided by the timezone
  package.  Make libstdc++6 recommend timezone to get a fully
  working std::chrono.  Install timezone when running the testsuite.
- Package libhwasan_preinit.o on x86_64.
- Fixed unwinding on aarch64 with pointer signing.  [bsc#1206684]
- Enable PRU flavour for gcc13
- update floatn fixinclude pickup to check each header separately (bsc#1206480)
- Redo floatn fixinclude pick-up to simply keep what is there. 
- Bump libgo SONAME to libgo22.
- Do not package libhwasan for biarch (32-bit architecture)
  as the extension depends on 64-bit pointers.
- Adjust floatn fixincludes guard to work with SLE12 and earlier
  SLE15.
- Depend on at least LLVM 13 for GCN cross compiler.
- Update embedded newlib to version 4.2.0
- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="src" src="src/gcc13-13.2.1+git7813-150000.1.3.3.src.rpm">
          <filename>gcc13-13.2.1+git7813-150000.1.3.3.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="x86_64" src="x86_64/libgcc_s1-13.2.1+git7813-150000.1.3.3.x86_64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.3.3.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="x86_64" src="x86_64/libstdc++6-13.2.1+git7813-150000.1.3.3.x86_64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.3.3.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="s390x" src="s390x/libgcc_s1-13.2.1+git7813-150000.1.3.3.s390x.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.3.3.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="s390x" src="s390x/libstdc++6-13.2.1+git7813-150000.1.3.3.s390x.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.3.3.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="aarch64" src="aarch64/libgcc_s1-13.2.1+git7813-150000.1.3.3.aarch64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.3.3.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.3.3" arch="aarch64" src="aarch64/libstdc++6-13.2.1+git7813-150000.1.3.3.aarch64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.3.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4194</id>
    <title>Feature update for python3</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698224522"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-68" id="PED-68" title="https://jira.suse.com/browse/PED-68" type="jira"/>
    </references>
    <description>This feature update for python3 packages adds the following:

- First batch of python3.11 modules (jsc#PED-68)
- Rename sources of python3-kubernetes, python3-cryptography and python3-cryptography-vectors to accommodate
the new 3.11 versions, this 3 packages have no code changes.
</description>
    <pkglist>
      <collection>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="src" src="src/python3-cryptography-3.3.2-150400.20.3.src.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.src.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="x86_64" src="x86_64/python3-cryptography-3.3.2-150400.20.3.x86_64.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.x86_64.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="s390x" src="s390x/python3-cryptography-3.3.2-150400.20.3.s390x.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.s390x.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="ppc64le" src="ppc64le/python3-cryptography-3.3.2-150400.20.3.ppc64le.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.ppc64le.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.20.3" arch="aarch64" src="aarch64/python3-cryptography-3.3.2-150400.20.3.aarch64.rpm">
          <filename>python3-cryptography-3.3.2-150400.20.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4153</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697823054"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215313" id="1215313" title="uninstallable package nss-resolve" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- Fix mismatch of nss-resolve version in Package Hub (no source code changes)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/libsystemd0-249.16-150400.8.35.5.x86_64.rpm">
          <filename>libsystemd0-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/libudev1-249.16-150400.8.35.5.x86_64.rpm">
          <filename>libudev1-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="src" src="src/systemd-249.16-150400.8.35.5.src.rpm">
          <filename>systemd-249.16-150400.8.35.5.src.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-container-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-container-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-journal-remote-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/systemd-sysvinit-249.16-150400.8.35.5.x86_64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.35.5" arch="x86_64" src="x86_64/udev-249.16-150400.8.35.5.x86_64.rpm">
          <filename>udev-249.16-150400.8.35.5.x86_64.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/libsystemd0-249.16-150400.8.35.5.s390x.rpm">
          <filename>libsystemd0-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/libudev1-249.16-150400.8.35.5.s390x.rpm">
          <filename>libudev1-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-container-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-container-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-journal-remote-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/systemd-sysvinit-249.16-150400.8.35.5.s390x.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.35.5" arch="s390x" src="s390x/udev-249.16-150400.8.35.5.s390x.rpm">
          <filename>udev-249.16-150400.8.35.5.s390x.rpm</filename>
        </package>
        <package name="libsystemd0" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/libsystemd0-249.16-150400.8.35.5.aarch64.rpm">
          <filename>libsystemd0-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="libudev1" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/libudev1-249.16-150400.8.35.5.aarch64.rpm">
          <filename>libudev1-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd-container" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-container-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-container-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-journal-remote-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-journal-remote-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/systemd-sysvinit-249.16-150400.8.35.5.aarch64.rpm">
          <filename>systemd-sysvinit-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
        <package name="udev" epoch="0" version="249.16" release="150400.8.35.5" arch="aarch64" src="aarch64/udev-249.16-150400.8.35.5.aarch64.rpm">
          <filename>udev-249.16-150400.8.35.5.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4154</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697823279"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215434" id="1215434" title="/etc/profile.d/alljava.sh does not set JAVA_HOME correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1107342" id="1107342" title="JAVA_HOME incorrectly set by /etc/profile.d/alljava.*" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Respect /etc/update-alternatives/java when setting JAVA_HOME (bsc#1215434,bsc#1107342)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.6.2" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3832</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695834978"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215474" id="1215474" title="VUL-0: CVE-2023-20588: xen: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215145" id="1215145" title="VUL-0: CVE-2023-34322: xen: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34322" id="CVE-2023-34322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34322" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474).
- CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_04" release="150400.4.34.1" arch="src" src="src/xen-4.16.5_04-150400.4.34.1.src.rpm">
          <filename>xen-4.16.5_04-150400.4.34.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_04" release="150400.4.34.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_04-150400.4.34.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_04-150400.4.34.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4140</id>
    <title>Security update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697794470"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692" id="CVE-2023-4692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693" id="CVE-2023-4693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4693" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201300" id="1201300" title="core.elf shows different behaviour for network install of SLE15 SP4 on power" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215935" id="1215935" title="VUL-0: CVE-2023-4692: grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215936" id="1215936" title="VUL-0: CVE-2023-4693: grub2: out-of-bounds read at fs/ntfs.c" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

Security fixes:
- CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935)
- CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936)

Other fixes:
- Fix a boot delay issue in PowerPC PXE boot (bsc#1201300)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.38.1" arch="src" src="src/grub2-2.06-150400.11.38.1.src.rpm">
          <filename>grub2-2.06-150400.11.38.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.38.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.38.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.38.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.38.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.38.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.38.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.38.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.38.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.38.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.38.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.38.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.38.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.38.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.38.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.38.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.38.1" arch="s390x" src="s390x/grub2-2.06-150400.11.38.1.s390x.rpm">
          <filename>grub2-2.06-150400.11.38.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150400.11.38.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150400.11.38.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150400.11.38.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.38.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.38.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.38.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.38.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.38.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.38.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3986</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696507807"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201066" id="1201066" title="kernel upgrade fails with Failed to enroll new keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213428" id="1213428" title="Leap Micro 5.4 failed  import uefi cert in post" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Update to version 15.4.17:
  * cert-script: warn only once about non-writable efivarfs
  * cert-script: skip cert handling if efivarfs is not writable (bsc#1213428, bsc#1201066)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.4.17" release="150400.3.11.1" arch="src" src="src/suse-module-tools-15.4.17-150400.3.11.1.src.rpm">
          <filename>suse-module-tools-15.4.17-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.17" release="150400.3.11.1" arch="x86_64" src="x86_64/suse-module-tools-15.4.17-150400.3.11.1.x86_64.rpm">
          <filename>suse-module-tools-15.4.17-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.17" release="150400.3.11.1" arch="s390x" src="s390x/suse-module-tools-15.4.17-150400.3.11.1.s390x.rpm">
          <filename>suse-module-tools-15.4.17-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.17" release="150400.3.11.1" arch="aarch64" src="aarch64/suse-module-tools-15.4.17-150400.3.11.1.aarch64.rpm">
          <filename>suse-module-tools-15.4.17-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3835</id>
    <title>Securitys update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1695835279"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214850" id="1214850" title="open-vm-tools 12.3.0 has been released - please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205927" id="1205927" title="hv_vmbus module is loaded unnecessarily in VMware guests" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20900" id="CVE-2023-20900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20900" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1344" id="PED-1344" title="https://jira.suse.com/browse/PED-1344" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

Update to 12.3.0 (build 22234872) (bsc#1214850)

- There are no new features in the open-vm-tools 12.3.0 release. This is
  primarily a maintenance release that addresses a few critical problems,
  including:

  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    &quot;xml-security-c&quot; and &quot;xerces-c&quot; is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
- For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
- Release Notes are available at
  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
- The granular changes that have gone into the 12.3.0 release are in the
  ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.0" release="150300.37.1" arch="x86_64" src="x86_64/libvmtools0-12.3.0-150300.37.1.x86_64.rpm">
          <filename>libvmtools0-12.3.0-150300.37.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.37.1" arch="src" src="src/open-vm-tools-12.3.0-150300.37.1.src.rpm">
          <filename>open-vm-tools-12.3.0-150300.37.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.37.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.0-150300.37.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.0-150300.37.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3969</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696421238"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1120059" id="1120059" title="[PATCH] powerpc/mm: Fallback to RAM if the altmap is unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177719" id="1177719" title="compare-and-write miscompare assumes fixed SCSI sense data format which is incorrect for 2TB+ LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208949" id="1208949" title="[SLE15 SP5] cpufreq: intel_pstate: Enable HWP IO boost for all servers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209284" id="1209284" title="Partner-L3: Very long time between &quot;lpfc Link Down Event&quot; and &quot;kernel: xsd ... [xsdmla] ...timing out command&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210048" id="1210048" title="The SG_MAX_DEVS / BSG_MAX_DEVS driver defines artificially limit number of scsi devices to &lt;= 32k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210448" id="1210448" title="VUL-0: CVE-2023-2007: kernel: DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212142" id="1212142" title="SLES15 SP4 CIFS file share mount not working using DFS path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212526" id="1212526" title="[DELL EMC SLES15SP5 BUG] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212857" id="1212857" title="SLE15SP5 LIO SCSI target_core_rbd read data zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212873" id="1212873" title="SLE15SP5 LIO SCSI rbd_img_request_create memory leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213026" id="1213026" title="SLE15SP5 LIO SCSI target_core_rbd compare-and-write MISCOMPARE sense propagation broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213546" id="1213546" title="VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213601" id="1213601" title="VUL-0: CVE-2023-3863: kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213666" id="1213666" title="VUL-0: CVE-2023-3772: kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213757" id="1213757" title="All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213916" id="1213916" title="Partner-L3: Performance Regression seen on SLES15 SP5 for high speed disk save throughput" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213921" id="1213921" title="server go to emergency maintenance mode due to &quot;Fail to mount /boot/efi&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213927" id="1213927" title="VUL-0: CVE-2023-20588: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213946" id="1213946" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4 [ref:_00D1igLOd._5005qUNIHK:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213968" id="1213968" title="VUL-0: CVE-2023-4147: kernel-source-rt,kernel-source,kernel-source-azure: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213970" id="1213970" title="VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213971" id="1213971" title="VUL-0: CVE-2023-4134: kernel-source-rt,kernel-source,kernel-source-azure: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214000" id="1214000" title="exfat: unexpected EOF while reading dir and dir_emit() deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214019" id="1214019" title="VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214120" id="1214120" title="VUL-0: CVE-2023-4273: kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214149" id="1214149" title="VUL-0: CVE-2023-4128: kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214180" id="1214180" title="ceph: never send metrics if disable_send_metrics is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214238" id="1214238" title="L3: Kernel WARNING at ../fs/ceph/super.h:547 __lookup_inode+0x188/0x1a0 [ceph] [ref:_00D1igLOd._5005qUueaS:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214297" id="1214297" title="SLES15SP3 [P10] [Rainier] Kdump over nfs is failing (Everglade/mlx5_core/MOFED5.5/P10/IOMMU/vpmem)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214299" id="1214299" title="SLES15SP5 Maintweb:Backport bnx2x page fault EEH fix from Upstream Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214350" id="1214350" title="VUL-0: CVE-2023-4387: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in vmxnet3_rq_alloc_rx_buf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214368" id="1214368" title="Update to the Intel intel_pstate driver needed to fix a CPU freq issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214370" id="1214370" title="KVM: s390: fix sthyi error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214371" id="1214371" title="scsi: zfcp: Defer fc_rport blocking until after ADISC response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214372" id="1214372" title="s390/purgatory: disable branch profiling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214380" id="1214380" title="Incorrect CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC for arm64 with 6.4 kernel and gcc7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214386" id="1214386" title="Cannot build KMP subpackage as unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214392" id="1214392" title="ceph: defer stopping mdsc delayed_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214393" id="1214393" title="libceph: fix potential hang in ceph_osdc_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214397" id="1214397" title="Installation cannot find my NVMe drive when it comes time to format and install." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214428" id="1214428" title="NVMe regression between kernel 6.4.9 and 6.4.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214451" id="1214451" title="VUL-0: CVE-2023-4459: kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214635" id="1214635" title="Backport SEV Live Migration fix into SLES-15 SP4 and greater" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214659" id="1214659" title="Placeholder for power management backports (SLE-15-SP4)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214661" id="1214661" title="L3: XFS corruption on kernel version higher than 5.14.21-150400.24.74.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214729" id="1214729" title="VUL-0: CVE-2023-4569: kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214742" id="1214742" title="netfs: Fix lockdep warning from taking sb_writers whilst holding  mmap_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214743" id="1214743" title="netfs: fix parameter of cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214756" id="1214756" title="e8c07082a810 Kbuild: move to -std=gnu11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215523" id="1215523" title="kernel 5.14.21.150400.24.84.1 amdgpu critical error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215522" id="1215522" title="Kernel Update 5.14.21-150500.55.22.1 breaks LAN and Fingerprint sensors on Dell Precision 5570" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215552" id="1215552" title="5.14.21-150400.24.84-default - docking station eth device fails - Realtek RTL8152/RTL8153 Based USB Ethernet Adapters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215553" id="1215553" title="Kernel update 5.14.21-150400.24.84.1 breaks USB" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" id="CVE-2023-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" id="CVE-2023-34319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" id="CVE-2023-3772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" id="CVE-2023-3863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" id="CVE-2023-4128" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" id="CVE-2023-4133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" id="CVE-2023-4134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" id="CVE-2023-4147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" id="CVE-2023-4194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" id="CVE-2023-4273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" id="CVE-2023-4387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" id="CVE-2023-4459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" id="CVE-2023-4569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-4579" id="PED-4579" title="https://jira.suse.com/browse/PED-4579" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4759" id="PED-4759" title="https://jira.suse.com/browse/PED-4759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4927" id="PED-4927" title="https://jira.suse.com/browse/PED-4927" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4929" id="PED-4929" title="https://jira.suse.com/browse/PED-4929" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5738" id="PED-5738" title="https://jira.suse.com/browse/PED-5738" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6003" id="PED-6003" title="https://jira.suse.com/browse/PED-6003" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6004" id="PED-6004" title="https://jira.suse.com/browse/PED-6004" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).

The following non-security bugs were fixed:

- Drop amdgpu patch causing spamming (bsc#1215523)
- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).
- acpi: processor: perflib: use the &quot;no limit&quot; frequency qos (git-fixes).
- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).
- alsa: ac97: fix possible error value of *rac97 (git-fixes).
- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).
- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).
- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).
- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).
- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).
- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).
- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).
- alsa: usb-audio: fix init call orders for uac1 (git-fixes).
- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).
- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).
- arm: dts: imx6sll: fixup of operating points (git-fixes).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- asoc: lower &quot;no backend dais enabled for ... port&quot; log severity (git-fixes).
- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).
- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).
- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).
- asoc: tegra: fix sfc conversion for few rates (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).
- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: do not increase mtu when set by user (git-fixes).
- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: fix tt global entry leak when client roamed back (git-fixes).
- batman-adv: trigger events for auto adjusted mtu (git-fixes).
- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).
- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- bluetooth: fix potential use-after-free when clear keys (git-fixes).
- bluetooth: l2cap: fix use-after-free (git-fixes).
- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bpf: disable preemption in bpf_event_output (git-fixes).
- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: fix cast to enum warning (git-fixes).
- bus: ti-sysc: flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on mds stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- config_nvme_verbose_errors=y     gone with a82baa8083b
- config_printk_safe_log_buf_shift=13  gone with 7e152d55123
- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).
- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).
- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).
- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: fix docs syntax (git-fixes).
- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).
- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).
- docs/process/howto: replace c89 with c11 (bsc#1214756).
- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: fix hex printing of signed values (git-fixes).
- documentation: devices.txt: fix minors for ttycpm* (git-fixes).
- documentation: devices.txt: remove ttyioc* (git-fixes).
- documentation: devices.txt: remove ttysioc* (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).
- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).
- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: fix dram init on ast2200 (git-fixes).
- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: fix -wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active mmu context (git-fixes).
- drm/mediatek: fix dereference before null check (git-fixes).
- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).
- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).
- drm/msm/mdp5: do not leak some plane state (git-fixes).
- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).
- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).
- drm/qxl: fix uaf on handle creation (git-fixes).
- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).
- drm/rockchip: do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: reset vma-&gt;vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned bos for eviction&amp;swap (git-fixes).
- drm/vmwgfx: fix shader stage validation (git-fixes).
- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).
- drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: fix typos in comments (jsc#ped-5738).
- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).
- e1000: switch to napi_build_skb() (jsc#ped-5738).
- e1000: switch to napi_consume_skb() (jsc#ped-5738).
- enable analog devices industrial ethernet phy driver (jsc#ped-4759)
- exfat: fix unexpected eof while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).
- fbdev: fix potential oob read in fast_imageblit() (git-fixes).
- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: improve performance of sys_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).
- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).
- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).
- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).
- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).
- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).
- hid: wacom: remove the battery when the ekr is off (git-fixes).
- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).
- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).
- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).
- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: correct length byte validation logic (git-fixes).
- i2c: designware: handle invalid smbus block data response length value (git-fixes).
- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).
- i2c: improve size determinations (git-fixes).
- i2c: nomadik: remove a useless call in the remove function (git-fixes).
- i2c: nomadik: remove unnecessary goto label (git-fixes).
- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).
- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for fdir filters (git-fixes).
- ib/hfi1: fix possible panic during hotplug remove (git-fixes)
- ib/uverbs: fix an potential error pointer dereference (git-fixes)
- ice: fix max_rate check while configuring tx rate limits (git-fixes).
- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).
- ice: fix rdma vsi removal during queue rebuild (git-fixes).
- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).
- iio: adc: stx104: implement and utilize register structures (git-fixes).
- iio: adc: stx104: utilize iomap interface (git-fixes).
- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).
- input: exc3000 - properly stop timer on shutdown (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#ped-5738).
- intel: remove unused macros (jsc#ped-5738).
- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).
- iommu/amd: fix compile warning in init code (git-fixes).
- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: initialize dart_streams_enable (git-fixes).
- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).
- iommu/iova: fix module config properly (git-fixes).
- iommu/omap: fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/sun50i: consider all fault sources for reset (git-fixes).
- iommu/sun50i: fix flush size (git-fixes).
- iommu/sun50i: fix r/w permission check (git-fixes).
- iommu/sun50i: fix reset release (git-fixes).
- iommu/sun50i: implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: remove iommu_domain_identity (git-fixes).
- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).
- iommu/vt-d: check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).
- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).
- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).
- ipmi:ssif: add check for kstrdup (git-fixes).
- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- kabi: allow extra bugsints (bsc#1213927).
- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).
- kbuild: move to -std=gnu11 (bsc#1214756).
- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).
- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).
- leds: multicolor: use rounded division when calculating color components (git-fixes).
- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order max_order (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: remove redundant if statement (git-fixes).
- media: i2c: ccs: check rules is non-null (git-fixes).
- media: i2c: rdacm21: fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: fix ov2680_bayer_order() (git-fixes).
- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).
- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: fix vflip / hflip set functions (git-fixes).
- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).
- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for h.264 (git-fixes).
- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).
- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).
- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).
- mkspec: allow unsupported kmps (bsc#1214386)
- mlxsw: pci: add shutdown method in pci driver (git-fixes).
- mmc: block: fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- move upstreamed hid patch into sorted section
- move upstreamed powerpc patches into sorted section
- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: check bus width while setting qe bit (git-fixes).
- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).
- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).
- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).
- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).
- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- objtool/x86: fix srso mess (git-fixes).
- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).
- objtool: union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.
- pci/aspm: avoid link retraining race (git-fixes).
- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).
- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).
- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).
- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).
- pci: meson: remove cast between incompatible function type (git-fixes).
- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).
- pci: microchip: remove cast between incompatible function type (git-fixes).
- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).
- pci: rockchip: remove writes to unused registers (git-fixes).
- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).
- pci: tegra194: fix possible array out of bounds access (git-fixes).
- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: fix reference leak (git-fixes).
- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).
- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).
- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).
- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: rename &quot;direct window&quot; to &quot;dma window&quot; (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).
- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: check start of empty przs during init (git-fixes).
- pwm: add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).
- pwm: meson: simplify duplicated per-channel tracking (git-fixes).
- qed: fix scheduling in a tasklet while getting stats (git-fixes).
- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)
- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)
- rdma/efa: fix wrong resources deallocation order (git-fixes)
- rdma/hns: fix cq and qp cache affinity (git-fixes)
- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)
- rdma/hns: fix port active speed (git-fixes)
- rdma/irdma: prevent zero-length stag registration (git-fixes)
- rdma/irdma: replace one-element array with flexible-array member (git-fixes)
- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)
- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)
- rdma/siw: balance the reference of cep-&gt;kref in the error path (git-fixes)
- rdma/siw: correct wrong debug message (git-fixes)
- rdma/umem: set iova in odp flow (git-fixes)
- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.
- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).
- revert &quot;ib/isert: fix incorrect release of isert connection&quot; (git-fixes)
- revert &quot;tracing: add &quot;(fault)&quot; name injection to kernel probes&quot; (git-fixes).
- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer-&gt;read (git-fixes).
- rpmsg: glink: add check for kstrdup (git-fixes).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).
- scsi: bsg: increase number of devices (bsc#1210048).
- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: rdma/srp: fix residual handling (git-fixes)
- scsi: sg: increase number of devices (bsc#1210048).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- scsi: storvsc: handle srb status value 0x30 (git-fixes).
- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).
- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).
- selftests/futex: order calls to futex_lock_pi (git-fixes).
- selftests/harness: actually report skip for signal tests (git-fixes).
- selftests/resctrl: close perf value read fd on errors (git-fixes).
- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).
- selftests: forwarding: skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: switch off timeout (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_flower: relax success criterion (git-fixes).
- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).
- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: fix dma buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while nic is resetting (git-fixes).
- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).
- smb: client: fix -wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: fix not to count error code to total length (git-fixes).
- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: fix memory leak of iter-&gt;temp when reading trace_pipe (git-fixes).
- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).
- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).
- ubifs: fix memleak when insert_old_idx() failed (git-fixes).
- update cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).
- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: fix typos in gadget.c (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: dwc3: properly handle processing of pending events (git-fixes).
- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).
- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for focusrite scarlett (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).
- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).
- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/alternative: make custom return thunk unconditional (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu: clean up srso return thunk mess (git-fixes).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/srso: fix return thunks in generated code (git-fixes).
- x86/static_call: fix __static_call_fixup() (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).

</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.88.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.88.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.88.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.88.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.88.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.88.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.88.1.150400.24.40.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.88.1.150400.24.40.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.88.1.150400.24.40.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.88.1.150400.24.40.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.88.1.150400.24.40.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.88.1.150400.24.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.88.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.88.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.88.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.88.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.88.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.88.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.88.1.150400.24.40.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.88.1.150400.24.40.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.88.1.150400.24.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4304</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698745671"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214801" id="1214801" title="Unable to register payg instance  ref:_00D1igLOd._5005qUwvGs:ref" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.3 (bsc#1214801):
  * Fixes an issue when it is unable to register a 'payg' instance.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.3" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.3-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.3-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.3" release="150000.6.99.1" arch="src" src="src/cloud-regionsrv-client-10.1.3-150000.6.99.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.3-150000.6.99.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.99.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.99.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.99.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.99.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3964</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696405155"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1120059" id="1120059" title="[PATCH] powerpc/mm: Fallback to RAM if the altmap is unusable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177719" id="1177719" title="compare-and-write miscompare assumes fixed SCSI sense data format which is incorrect for 2TB+ LUNs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208949" id="1208949" title="[SLE15 SP5] cpufreq: intel_pstate: Enable HWP IO boost for all servers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209284" id="1209284" title="Partner-L3: Very long time between &quot;lpfc Link Down Event&quot; and &quot;kernel: xsd ... [xsdmla] ...timing out command&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210048" id="1210048" title="The SG_MAX_DEVS / BSG_MAX_DEVS driver defines artificially limit number of scsi devices to &lt;= 32k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210448" id="1210448" title="VUL-0: CVE-2023-2007: kernel: DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212142" id="1212142" title="SLES15 SP4 CIFS file share mount not working using DFS path." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212526" id="1212526" title="[DELL EMC SLES15SP5 BUG] Unable to interpret the frequency values in cpuinfo_min_freq and cpuino_max_freq sysfs files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212857" id="1212857" title="SLE15SP5 LIO SCSI target_core_rbd read data zeroed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212873" id="1212873" title="SLE15SP5 LIO SCSI rbd_img_request_create memory leaks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213026" id="1213026" title="SLE15SP5 LIO SCSI target_core_rbd compare-and-write MISCOMPARE sense propagation broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213546" id="1213546" title="VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213580" id="1213580" title="VUL-0: CVE-2023-3610: kernel: use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213601" id="1213601" title="VUL-0: CVE-2023-3863: kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213666" id="1213666" title="VUL-0: CVE-2023-3772: kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213757" id="1213757" title="All processes that try to communicate with NETLINK socket hang up if running hostapd on Raspberry Pi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213759" id="1213759" title="pidfd_getfd() race with optimization in fdget_pos()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213916" id="1213916" title="Partner-L3: Performance Regression seen on SLES15 SP5 for high speed disk save throughput" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213921" id="1213921" title="server go to emergency maintenance mode due to &quot;Fail to mount /boot/efi&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213927" id="1213927" title="VUL-0: CVE-2023-20588: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213946" id="1213946" title="L3: Likely ceph related kernel NULL pointer after uplifting to 15 SP4 [ref:_00D1igLOd._5005qUNIHK:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213968" id="1213968" title="VUL-0: CVE-2023-4147: kernel-source-rt,kernel-source,kernel-source-azure: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213970" id="1213970" title="VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213971" id="1213971" title="VUL-0: CVE-2023-4134: kernel-source-rt,kernel-source,kernel-source-azure: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214000" id="1214000" title="exfat: unexpected EOF while reading dir and dir_emit() deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214019" id="1214019" title="VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214120" id="1214120" title="VUL-0: CVE-2023-4273: kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214149" id="1214149" title="VUL-0: CVE-2023-4128: kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214180" id="1214180" title="ceph: never send metrics if disable_send_metrics is set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214238" id="1214238" title="L3: Kernel WARNING at ../fs/ceph/super.h:547 __lookup_inode+0x188/0x1a0 [ceph] [ref:_00D1igLOd._5005qUueaS:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214297" id="1214297" title="SLES15SP3 [P10] [Rainier] Kdump over nfs is failing (Everglade/mlx5_core/MOFED5.5/P10/IOMMU/vpmem)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214299" id="1214299" title="SLES15SP5 Maintweb:Backport bnx2x page fault EEH fix from Upstream Kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214350" id="1214350" title="VUL-0: CVE-2023-4387: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in vmxnet3_rq_alloc_rx_buf()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214368" id="1214368" title="Update to the Intel intel_pstate driver needed to fix a CPU freq issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214370" id="1214370" title="KVM: s390: fix sthyi error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214371" id="1214371" title="scsi: zfcp: Defer fc_rport blocking until after ADISC response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214372" id="1214372" title="s390/purgatory: disable branch profiling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214380" id="1214380" title="Incorrect CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC for arm64 with 6.4 kernel and gcc7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214386" id="1214386" title="Cannot build KMP subpackage as unsupported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214392" id="1214392" title="ceph: defer stopping mdsc delayed_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214393" id="1214393" title="libceph: fix potential hang in ceph_osdc_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214397" id="1214397" title="Installation cannot find my NVMe drive when it comes time to format and install." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214428" id="1214428" title="NVMe regression between kernel 6.4.9 and 6.4.11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214451" id="1214451" title="VUL-0: CVE-2023-4459: kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214635" id="1214635" title="Backport SEV Live Migration fix into SLES-15 SP4 and greater" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214659" id="1214659" title="Placeholder for power management backports (SLE-15-SP4)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214661" id="1214661" title="L3: XFS corruption on kernel version higher than 5.14.21-150400.24.74.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214729" id="1214729" title="VUL-0: CVE-2023-4569: kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214742" id="1214742" title="netfs: Fix lockdep warning from taking sb_writers whilst holding  mmap_lock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214743" id="1214743" title="netfs: fix parameter of cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214756" id="1214756" title="e8c07082a810 Kbuild: move to -std=gnu11" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215523" id="1215523" title="kernel 5.14.21.150400.24.84.1 amdgpu critical error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215522" id="1215522" title="Kernel Update 5.14.21-150500.55.22.1 breaks LAN and Fingerprint sensors on Dell Precision 5570" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215552" id="1215552" title="5.14.21-150400.24.84-default - docking station eth device fails - Realtek RTL8152/RTL8153 Based USB Ethernet Adapters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215553" id="1215553" title="Kernel update 5.14.21-150400.24.84.1 breaks USB" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" id="CVE-2023-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2007" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" id="CVE-2023-34319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34319" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" id="CVE-2023-3610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" id="CVE-2023-37453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" id="CVE-2023-3772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3772" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" id="CVE-2023-3863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" id="CVE-2023-4128" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4128" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" id="CVE-2023-4133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4133" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" id="CVE-2023-4134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" id="CVE-2023-4147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4147" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" id="CVE-2023-4194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" id="CVE-2023-4273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4273" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" id="CVE-2023-4387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" id="CVE-2023-4459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" id="CVE-2023-4569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4569" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-4579" id="PED-4579" title="https://jira.suse.com/browse/PED-4579" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4759" id="PED-4759" title="https://jira.suse.com/browse/PED-4759" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4927" id="PED-4927" title="https://jira.suse.com/browse/PED-4927" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-4929" id="PED-4929" title="https://jira.suse.com/browse/PED-4929" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5738" id="PED-5738" title="https://jira.suse.com/browse/PED-5738" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6003" id="PED-6003" title="https://jira.suse.com/browse/PED-6003" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6004" id="PED-6004" title="https://jira.suse.com/browse/PED-6004" type="jira"/>
    </references>
    <description> The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).

The following non-security bugs were fixed:

- Drop amdgpu patch causing spamming (bsc#1215523)
- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).
- acpi: processor: perflib: use the &quot;no limit&quot; frequency qos (git-fixes).
- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).
- alsa: ac97: fix possible error value of *rac97 (git-fixes).
- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).
- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).
- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).
- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).
- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).
- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).
- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).
- alsa: usb-audio: fix init call orders for uac1 (git-fixes).
- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).
- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).
- arm: dts: imx6sll: fixup of operating points (git-fixes).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- asoc: lower &quot;no backend dais enabled for ... port&quot; log severity (git-fixes).
- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).
- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).
- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).
- asoc: tegra: fix sfc conversion for few rates (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).
- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: do not increase mtu when set by user (git-fixes).
- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: fix tt global entry leak when client roamed back (git-fixes).
- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).
- batman-adv: trigger events for auto adjusted mtu (git-fixes).
- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).
- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- bluetooth: fix potential use-after-free when clear keys (git-fixes).
- bluetooth: l2cap: fix use-after-free (git-fixes).
- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bpf: disable preemption in bpf_event_output (git-fixes).
- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: fix cast to enum warning (git-fixes).
- bus: ti-sysc: flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on mds stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- config_nvme_verbose_errors=y     gone with a82baa8083b
- config_printk_safe_log_buf_shift=13  gone with 7e152d55123
- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).
- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).
- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).
- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: fix docs syntax (git-fixes).
- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).
- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).
- docs/process/howto: replace c89 with c11 (bsc#1214756).
- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: fix hex printing of signed values (git-fixes).
- documentation: devices.txt: fix minors for ttycpm* (git-fixes).
- documentation: devices.txt: remove ttyioc* (git-fixes).
- documentation: devices.txt: remove ttysioc* (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).
- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).
- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: fix dram init on ast2200 (git-fixes).
- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: fix -wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active mmu context (git-fixes).
- drm/mediatek: fix dereference before null check (git-fixes).
- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).
- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).
- drm/msm/mdp5: do not leak some plane state (git-fixes).
- drm/msm: update dev core dump to not print backwards (git-fixes).
- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).
- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).
- drm/qxl: fix uaf on handle creation (git-fixes).
- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).
- drm/rockchip: do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: reset vma-&gt;vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned bos for eviction&amp;swap (git-fixes).
- drm/vmwgfx: fix shader stage validation (git-fixes).
- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).
- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).
- drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: fix typos in comments (jsc#ped-5738).
- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).
- e1000: switch to napi_build_skb() (jsc#ped-5738).
- e1000: switch to napi_consume_skb() (jsc#ped-5738).
- enable analog devices industrial ethernet phy driver (jsc#ped-4759)
- exfat: fix unexpected eof while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).
- fbdev: fix potential oob read in fast_imageblit() (git-fixes).
- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: improve performance of sys_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).
- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).
- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).
- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).
- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).
- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).
- hid: wacom: remove the battery when the ekr is off (git-fixes).
- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).
- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).
- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).
- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: delete error messages for failed memory allocations (git-fixes).
- i2c: designware: correct length byte validation logic (git-fixes).
- i2c: designware: handle invalid smbus block data response length value (git-fixes).
- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).
- i2c: improve size determinations (git-fixes).
- i2c: nomadik: remove a useless call in the remove function (git-fixes).
- i2c: nomadik: remove unnecessary goto label (git-fixes).
- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).
- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for fdir filters (git-fixes).
- ib/hfi1: fix possible panic during hotplug remove (git-fixes)
- ib/uverbs: fix an potential error pointer dereference (git-fixes)
- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).
- ice: fix max_rate check while configuring tx rate limits (git-fixes).
- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).
- ice: fix rdma vsi removal during queue rebuild (git-fixes).
- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).
- iio: adc: stx104: implement and utilize register structures (git-fixes).
- iio: adc: stx104: utilize iomap interface (git-fixes).
- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).
- input: exc3000 - properly stop timer on shutdown (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#ped-5738).
- intel: remove unused macros (jsc#ped-5738).
- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).
- iommu/amd: fix compile warning in init code (git-fixes).
- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: initialize dart_streams_enable (git-fixes).
- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).
- iommu/iova: fix module config properly (git-fixes).
- iommu/omap: fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/sun50i: consider all fault sources for reset (git-fixes).
- iommu/sun50i: fix flush size (git-fixes).
- iommu/sun50i: fix r/w permission check (git-fixes).
- iommu/sun50i: fix reset release (git-fixes).
- iommu/sun50i: implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: remove iommu_domain_identity (git-fixes).
- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).
- iommu/vt-d: check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).
- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).
- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).
- ipmi:ssif: add check for kstrdup (git-fixes).
- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- kabi: allow extra bugsints (bsc#1213927).
- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).
- kbuild: move to -std=gnu11 (bsc#1214756).
- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).
- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).
- leds: multicolor: use rounded division when calculating color components (git-fixes).
- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order max_order (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: remove redundant if statement (git-fixes).
- media: i2c: ccs: check rules is non-null (git-fixes).
- media: i2c: rdacm21: fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: fix ov2680_bayer_order() (git-fixes).
- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).
- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: fix vflip / hflip set functions (git-fixes).
- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).
- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for h.264 (git-fixes).
- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).
- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).
- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).
- mkspec: allow unsupported kmps (bsc#1214386)
- mlxsw: pci: add shutdown method in pci driver (git-fixes).
- mmc: block: fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- move upstreamed powerpc patches into sorted section
- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: check bus width while setting qe bit (git-fixes).
- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).
- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).
- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).
- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).
- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nvme-rdma: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze &amp; unfreeze (bsc#1208902).
- objtool/x86: fix srso mess (git-fixes).
- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).
- objtool: union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.
- pci/aspm: avoid link retraining race (git-fixes).
- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).
- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).
- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).
- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).
- pci: meson: remove cast between incompatible function type (git-fixes).
- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).
- pci: microchip: remove cast between incompatible function type (git-fixes).
- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).
- pci: rockchip: remove writes to unused registers (git-fixes).
- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).
- pci: tegra194: fix possible array out of bounds access (git-fixes).
- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: fix reference leak (git-fixes).
- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).
- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).
- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).
- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: rename &quot;direct window&quot; to &quot;dma window&quot; (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).
- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: check start of empty przs during init (git-fixes).
- pwm: add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).
- pwm: meson: simplify duplicated per-channel tracking (git-fixes).
- qed: fix scheduling in a tasklet while getting stats (git-fixes).
- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)
- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)
- rdma/efa: fix wrong resources deallocation order (git-fixes)
- rdma/hns: fix cq and qp cache affinity (git-fixes)
- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)
- rdma/hns: fix port active speed (git-fixes)
- rdma/irdma: prevent zero-length stag registration (git-fixes)
- rdma/irdma: replace one-element array with flexible-array member (git-fixes)
- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)
- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)
- rdma/siw: balance the reference of cep-&gt;kref in the error path (git-fixes)
- rdma/siw: correct wrong debug message (git-fixes)
- rdma/umem: set iova in odp flow (git-fixes)
- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.
- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).
- revert &quot;ib/isert: fix incorrect release of isert connection&quot; (git-fixes)
- revert &quot;tracing: add &quot;(fault)&quot; name injection to kernel probes&quot; (git-fixes).
- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer-&gt;read (git-fixes).
- rpmsg: glink: add check for kstrdup (git-fixes).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).
- scsi: bsg: increase number of devices (bsc#1210048).
- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: rdma/srp: fix residual handling (git-fixes)
- scsi: sg: increase number of devices (bsc#1210048).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- scsi: storvsc: handle srb status value 0x30 (git-fixes).
- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).
- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).
- selftests/futex: order calls to futex_lock_pi (git-fixes).
- selftests/harness: actually report skip for signal tests (git-fixes).
- selftests/resctrl: close perf value read fd on errors (git-fixes).
- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).
- selftests: forwarding: skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: switch off timeout (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_flower: relax success criterion (git-fixes).
- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).
- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: fix dma buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while nic is resetting (git-fixes).
- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).
- smb: client: fix -wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: fix not to count error code to total length (git-fixes).
- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: fix memory leak of iter-&gt;temp when reading trace_pipe (git-fixes).
- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).
- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).
- ubifs: fix memleak when insert_old_idx() failed (git-fixes).
- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).
- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: fix typos in gadget.c (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: dwc3: properly handle processing of pending events (git-fixes).
- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).
- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for focusrite scarlett (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).
- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).
- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/alternative: make custom return thunk unconditional (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu: clean up srso return thunk mess (git-fixes).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/srso: fix return thunks in generated code (git-fixes).
- x86/static_call: fix __static_call_fixup() (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.53.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.53.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.53.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.53.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.53.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.53.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3951</id>
    <title>Recommended update for python3-jmespath, python3-ply</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696354732"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209233" id="1209233" title="salt 3005.1: Need to add python3-jmespath to python3-salt's RPM Requires" type="bugzilla"/>
    </references>
    <description>
This update for python3-jmespath and python3-ply fixes the following issue:

- the packages are required as dependencies for python3-salt, and were missing
  on aarch64 based SLE Micro flavors so far.

There are no functional changes.
</description>
    <pkglist>
      <collection>
        <package name="python-jmespath" epoch="0" version="0.9.3" release="150000.3.5.1" arch="src" src="src/python-jmespath-0.9.3-150000.3.5.1.src.rpm">
          <filename>python-jmespath-0.9.3-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python-ply" epoch="0" version="3.10" release="150000.3.5.1" arch="src" src="src/python-ply-3.10-150000.3.5.1.src.rpm">
          <filename>python-ply-3.10-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python3-jmespath" epoch="0" version="0.9.3" release="150000.3.5.1" arch="noarch" src="noarch/python3-jmespath-0.9.3-150000.3.5.1.noarch.rpm">
          <filename>python3-jmespath-0.9.3-150000.3.5.1.noarch.rpm</filename>
        </package>
        <package name="python3-ply" epoch="0" version="3.10" release="150000.3.5.1" arch="noarch" src="noarch/python3-ply-3.10-150000.3.5.1.noarch.rpm">
          <filename>python3-ply-3.10-150000.3.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3997</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696594947"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35945" id="CVE-2023-35945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35945" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215713" id="1215713" title="VUL-0: CVE-2023-35945: nghttp2: HTTP/2 memory leak in nghttp2 codec" type="bugzilla"/>
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713).
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.9.1" arch="x86_64" src="x86_64/libnghttp2-14-1.40.0-150200.9.1.x86_64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.9.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.40.0" release="150200.9.1" arch="src" src="src/nghttp2-1.40.0-150200.9.1.src.rpm">
          <filename>nghttp2-1.40.0-150200.9.1.src.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.9.1" arch="s390x" src="s390x/libnghttp2-14-1.40.0-150200.9.1.s390x.rpm">
          <filename>libnghttp2-14-1.40.0-150200.9.1.s390x.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.9.1" arch="aarch64" src="aarch64/libnghttp2-14-1.40.0-150200.9.1.aarch64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-3963</id>
    <title>Security update for libX11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696404393"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787" id="CVE-2023-43787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43787" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786" id="CVE-2023-43786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43786" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785" id="CVE-2023-43785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43785" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215684" id="1215684" title="VUL-0: EMBARGOED: CVE-2023-43786: libX11: stack exhaustion from infinite recursion in PutSubImage()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215685" id="1215685" title="VUL-0: EMBARGOED: CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215683" id="1215683" title="VUL-0: EMBARGOED: CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms()" type="bugzilla"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684).
- CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685).
- CVE-2023-43785: Fixed out-of-bounds memory access in _XkbReadKeySyms() (bsc#1215683).
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.33.1" arch="src" src="src/libX11-1.6.5-150000.3.33.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.33.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.33.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.33.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.33.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.33.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.33.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.33.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.33.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.33.1" arch="s390x" src="s390x/libX11-6-1.6.5-150000.3.33.1.s390x.rpm">
          <filename>libX11-6-1.6.5-150000.3.33.1.s390x.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.33.1" arch="s390x" src="s390x/libX11-xcb1-1.6.5-150000.3.33.1.s390x.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.33.1.s390x.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.33.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.33.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.33.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.33.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.33.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4143</id>
    <title>Recommended update for brltty, harfbuzz, libcdr, libmspub, libreoffice, libzmf, tepl, vte</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697795681"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6193" id="PED-6193" title="https://jira.suse.com/browse/PED-6193" type="jira"/>
    </references>
    <description>
This update provides rebuilds of various packages against the newer icu73 to support GB18030-2023.

This set contains libreoffice, various libraries used by libreoffice and GNOME, and brltty.
</description>
    <pkglist>
      <collection>
        <package name="brltty" epoch="0" version="6.4" release="150400.4.5.1" arch="src" src="src/brltty-6.4-150400.4.5.1.src.rpm">
          <filename>brltty-6.4-150400.4.5.1.src.rpm</filename>
        </package>
        <package name="harfbuzz" epoch="0" version="3.4.0" release="150400.3.8.1" arch="src" src="src/harfbuzz-3.4.0-150400.3.8.1.src.rpm">
          <filename>harfbuzz-3.4.0-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="x86_64" src="x86_64/libharfbuzz-gobject0-3.4.0-150400.3.8.1.x86_64.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="x86_64" src="x86_64/libharfbuzz0-3.4.0-150400.3.8.1.x86_64.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="system-user-brltty" epoch="0" version="6.4" release="150400.4.5.1" arch="noarch" src="noarch/system-user-brltty-6.4-150400.4.5.1.noarch.rpm">
          <filename>system-user-brltty-6.4-150400.4.5.1.noarch.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="x86_64" src="x86_64/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.x86_64.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="s390x" src="s390x/libharfbuzz-gobject0-3.4.0-150400.3.8.1.s390x.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="s390x" src="s390x/libharfbuzz0-3.4.0-150400.3.8.1.s390x.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="s390x" src="s390x/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.s390x.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libharfbuzz-gobject0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="aarch64" src="aarch64/libharfbuzz-gobject0-3.4.0-150400.3.8.1.aarch64.rpm">
          <filename>libharfbuzz-gobject0-3.4.0-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="aarch64" src="aarch64/libharfbuzz0-3.4.0-150400.3.8.1.aarch64.rpm">
          <filename>libharfbuzz0-3.4.0-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-HarfBuzz-0_0" epoch="0" version="3.4.0" release="150400.3.8.1" arch="aarch64" src="aarch64/typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.aarch64.rpm">
          <filename>typelib-1_0-HarfBuzz-0_0-3.4.0-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4110</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697625918"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813" id="CVE-2023-4813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4813" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215286" id="1215286" title="VUL-0: CVE-2023-4813: glibc: potential use-after-free in gaih_inet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215891" id="1215891" title="OpenVPN/PAM &quot;failed to map segment from shared object&quot; after glibc update" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931)

Also a regression from a previous update was fixed:

- elf: Align argument of __munmap to page size (bsc#1215891, BZ #28676)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="src" src="src/glibc-2.31-150300.63.1.src.rpm">
          <filename>glibc-2.31-150300.63.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.63.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.63.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.63.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.63.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.63.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.63.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.63.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.63.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.63.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4112</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697627243"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205927" id="1205927" title="hv_vmbus module is loaded unnecessarily in VMware guests" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issue:

- Ship correct open-vm-tools version to 15-SP4 (bsc#1205927)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.0" release="150300.40.1" arch="x86_64" src="x86_64/libvmtools0-12.3.0-150300.40.1.x86_64.rpm">
          <filename>libvmtools0-12.3.0-150300.40.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.40.1" arch="src" src="src/open-vm-tools-12.3.0-150300.40.1.src.rpm">
          <filename>open-vm-tools-12.3.0-150300.40.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.40.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.0-150300.40.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.0-150300.40.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4231</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698415298"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211102" id="1211102" title="&quot;Enable Secure Boot Support&quot; is preselected executing &quot;yast bootloader&quot; because of SECURE_BOOT=&quot;&quot;" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Add SECURE_BOOT no when the firmware is efi (bsc#1211102)
  </description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.62.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.62.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.62.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.62.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.62.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.62.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.62.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.62.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.62.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.62.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.62.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.62.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.62.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.62.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.62.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.62.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.62.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.62.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.62.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4138</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697728568"/>
    <references/>
    <description>This update for systemd-rpm-macros fixes the following issues:

- Switch to `systemd-hwdb` tool when updating the HW database. It's been
  introduced in systemd v219 and replaces the deprecated command `udevadm hwdb`.
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="14" release="150000.7.36.1" arch="noarch" src="noarch/systemd-rpm-macros-14-150000.7.36.1.noarch.rpm">
          <filename>systemd-rpm-macros-14-150000.7.36.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="14" release="150000.7.36.1" arch="src" src="src/systemd-rpm-macros-14-150000.7.36.1.src.rpm">
          <filename>systemd-rpm-macros-14-150000.7.36.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4178</id>
    <title>Recommended update for sssd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698157211"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214434" id="1214434" title="L3: sssd - allows login even if grace logins are exhausted" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- LDAP password policy: return failure if there are no grace logins left (bsc#1214434)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.17.1" arch="src" src="src/sssd-2.5.2-150400.4.17.1.src.rpm">
          <filename>sssd-2.5.2-150400.4.17.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/sssd-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>sssd-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.17.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150400.4.17.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.17.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/sssd-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>sssd-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/sssd-common-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.17.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150400.4.17.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.17.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/sssd-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>sssd-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.17.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150400.4.17.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4453</id>
    <title>Recommended update for libjansson</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700054738"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216541" id="1216541" title="L3-Question: libjansson4-32bit missing from SLES15 SP5" type="bugzilla"/>
    </references>
    <description>
This update for libjansson ships the missing 32bit library to the Basesystem module of 15 SP5.
</description>
    <pkglist>
      <collection>
        <package name="libjansson" epoch="0" version="2.14" release="150000.3.5.1" arch="src" src="src/libjansson-2.14-150000.3.5.1.src.rpm">
          <filename>libjansson-2.14-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.5.1" arch="x86_64" src="x86_64/libjansson4-2.14-150000.3.5.1.x86_64.rpm">
          <filename>libjansson4-2.14-150000.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.5.1" arch="s390x" src="s390x/libjansson4-2.14-150000.3.5.1.s390x.rpm">
          <filename>libjansson4-2.14-150000.3.5.1.s390x.rpm</filename>
        </package>
        <package name="libjansson4" epoch="0" version="2.14" release="150000.3.5.1" arch="aarch64" src="aarch64/libjansson4-2.14-150000.3.5.1.aarch64.rpm">
          <filename>libjansson4-2.14-150000.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4044</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697008171"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215888" id="1215888" title="VUL-0: CVE-2023-38545: curl: SOCKS5 heap buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215889" id="1215889" title="VUL-0: CVE-2023-38546: curl: cookie injection with none file" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545" id="CVE-2023-38545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546" id="CVE-2023-38546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-38545: Fixed a heap buffer overflow in SOCKS5. (bsc#1215888)
- CVE-2023-38546: Fixed a cookie injection with none file. (bsc#1215889)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="src" src="src/curl-8.0.1-150400.5.32.1.src.rpm">
          <filename>curl-8.0.1-150400.5.32.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.32.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.32.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.32.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.32.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.32.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.32.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.32.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.32.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.32.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.32.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.32.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.32.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.32.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.32.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.32.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4042</id>
    <title>Security update for conmon</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696957940"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215806" id="1215806" title="VUL-0:  conmon: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

conmon was rebuilt using go1.21 (bsc#1215806)
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.14.1" arch="src" src="src/conmon-2.1.7-150400.3.14.1.src.rpm">
          <filename>conmon-2.1.7-150400.3.14.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.14.1" arch="x86_64" src="x86_64/conmon-2.1.7-150400.3.14.1.x86_64.rpm">
          <filename>conmon-2.1.7-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.14.1" arch="s390x" src="s390x/conmon-2.1.7-150400.3.14.1.s390x.rpm">
          <filename>conmon-2.1.7-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.7" release="150400.3.14.1" arch="aarch64" src="aarch64/conmon-2.1.7-150400.3.14.1.aarch64.rpm">
          <filename>conmon-2.1.7-150400.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4450</id>
    <title>Recommended update for crypto-policies</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700042142"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209998" id="1209998" title="crypto-policies: Behaviour / documentation of crypto-policies introduction in SLES 15 SP4" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-5041" id="PED-5041" title="https://jira.suse.com/browse/PED-5041" type="jira"/>
    </references>
    <description>This update for crypto-policies fixes the following issues:

  - Enable setting the kernel FIPS mode with the fips-mode-setup and fips-finish-install commands
    (jsc#PED-5041)
  - Adapt fips-mode-setup to use the pbl command from the perl-Bootloader package instead of grubby
    and add a note for transactional systems
  - Ship the man pages for fips-mode-setup and fips-finish-install
  - Make the supported versions change in the update-crypto-policies(8) man page persistent
    (bsc#1209998)
</description>
    <pkglist>
      <collection>
        <package name="crypto-policies" epoch="0" version="20210917.c9d86d1" release="150400.3.6.1" arch="noarch" src="noarch/crypto-policies-20210917.c9d86d1-150400.3.6.1.noarch.rpm">
          <filename>crypto-policies-20210917.c9d86d1-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="crypto-policies" epoch="0" version="20210917.c9d86d1" release="150400.3.6.1" arch="src" src="src/crypto-policies-20210917.c9d86d1-150400.3.6.1.src.rpm">
          <filename>crypto-policies-20210917.c9d86d1-150400.3.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4002</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1696832741"/>
    <references/>
    <description>This update for selinux-policy fixes the following issues:

- Create path in macros.selinux-policy since is might not exist on transactional systems
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.12.1" arch="noarch" src="noarch/selinux-policy-20230511+git3.b78f5aff-150400.4.12.1.noarch.rpm">
          <filename>selinux-policy-20230511+git3.b78f5aff-150400.4.12.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.12.1" arch="src" src="src/selinux-policy-20230511+git3.b78f5aff-150400.4.12.1.src.rpm">
          <filename>selinux-policy-20230511+git3.b78f5aff-150400.4.12.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.12.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git3.b78f5aff-150400.4.12.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git3.b78f5aff-150400.4.12.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git3.b78f5aff" release="150400.4.12.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git3.b78f5aff-150400.4.12.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git3.b78f5aff-150400.4.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4072</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697186967"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202845" id="1202845" title="PVT:1020:XM:Everest: After running switch up stream error injection on switch drc, HTX devices state changed from RN to DD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213808" id="1213808" title="Unexpected DP dual mode adaptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214928" id="1214928" title="qla2xxx: update driver to 10.02.09.100-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214940" id="1214940" title="[PATCH] ext4: set goal start correctly in ext4_mb_normalize_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214941" id="1214941" title="[PATCH] ext4: reflect error codes from ext4_multi_mount_protect() to  its callers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214942" id="1214942" title="[PATCH] ext4: get block from bh in ext4_free_blocks for fast commit  replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214943" id="1214943" title="[PATCH] ext4: fix wrong unit use in ext4_mb_clear_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214944" id="1214944" title="[PATCH] ext4: fix wrong unit use in ext4_mb_new_blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214950" id="1214950" title="[PATCH] ext4: correct inline offset when handling xattrs in inode  body" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214951" id="1214951" title="[PATCH] ext4: avoid potential data overflow in next_linear_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214954" id="1214954" title="[PATCH] ext4: fix memory leaks in  ext4_fname_{setup_filename,prepare_lookup}" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214957" id="1214957" title="[PATCH] ext4: Remove ext4 locking of moved directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214986" id="1214986" title="[PATCH] blk-iocost: fix divide by 0 error in calc_lcoefs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214988" id="1214988" title="btrfs-cleaner hangs and: watchdog: BUG: soft lockup - CPU#8 stuck for" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214992" id="1214992" title="[PATCH] blk-iocost: use spin_lock_irqsave in  adjust_inuse_and_calc_cost" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214993" id="1214993" title="[PATCH] block/mq-deadline: use correct way to throttling write  requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215877" id="1215877" title="[PATCH] workqueue: clean up WORK_* constant types, clarify masking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215894" id="1215894" title="KVM: s390: vsie: Fix the initialization of the epoch extension (epdx)  field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215895" id="1215895" title="KVM: s390: vsie: fix the length of APCB bitmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215896" id="1215896" title="KVM: s390: interrupt: use READ_ONCE() before cmpxchg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215911" id="1215911" title="KVM: s390/diag: fix racy access of physical cpu number in diag 9c  handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215915" id="1215915" title="KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215916" id="1215916" title="KVM: s390: pv: fix external interruption loop not always detected" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" id="CVE-2023-39194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" id="CVE-2023-39192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" id="CVE-2023-42754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" id="CVE-2023-4389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" id="CVE-2023-5345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" id="CVE-2023-42753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" id="CVE-2023-1206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" id="CVE-2023-4622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" id="CVE-2023-4623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" id="CVE-2023-4155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" id="CVE-2023-1859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" id="CVE-2023-2177" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" id="CVE-2023-4563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" id="CVE-2023-1192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
- CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861)
- CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860)
- CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858)
- CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467)
- CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899)
- CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022)
- CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351).
- CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
- CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275).
- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117).
- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).
- CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643).
- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).

The following non-security bugs were fixed:

- ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes).
- ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes).
- ARM: pxa: remove use of symbol_get() (git-fixes).
- arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes).
- arm64: module-plts: inline linux/moduleloader.h (git-fixes)
- arm64: module: Use module_init_layout_section() to spot init sections (git-fixes)
- arm64: sdei: abort running SDEI handlers during crash (git-fixes)
- arm64: tegra: Update AHUB clock parent and rate (git-fixes)
- arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes)
- ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes).
- ASoC: meson: spdifin: start hw on dai probe (git-fixes).
- ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes).
- ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes).
- ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes).
- ata: pata_falcon: fix IO base selection for Q40 (git-fixes).
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes).
- ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes).
- backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes).
- blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986).
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992).
- block/mq-deadline: use correct way to throttling write requests (bsc#1214993).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes).
- bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322).
- bpf: Clear the probe_addr for uprobe (git-fixes).
- btrfs: do not hold CPU for too long when defragging a file (bsc#1214988).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM (git-fixes).
- drm/amd/display: prevent potential division by zero errors (git-fixes).
- drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808).
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes).
- drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes).
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes).
- drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes).
- ext4: avoid potential data overflow in next_linear_group (bsc#1214951).
- ext4: correct inline offset when handling xattrs in inode body (bsc#1214950).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943).
- ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944).
- ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942).
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941).
- ext4: Remove ext4 locking of moved directory (bsc#1214957).
- ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940).
- fs: do not update freeing inode i_io_list (bsc#1214813).
- fs: Establish locking order for unrelated directories (bsc#1214958).
- fs: Lock moved directories (bsc#1214959).
- fs: lockd: avoid possible wrong NULL parameter (git-fixes).
- fs: no need to check source (bsc#1215752).
- fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813).
- fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581).
- gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479).
- gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479).
- gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).
- gve: Changes to add new TX queues (bsc#1214479).
- gve: Control path for DQO-QPL (bsc#1214479).
- gve: fix frag_list chaining (bsc#1214479).
- gve: Fix gve interrupt names (bsc#1214479).
- gve: RX path for DQO-QPL (bsc#1214479).
- gve: trivial spell fix Recive to Receive (bsc#1214479).
- gve: Tx path for DQO-QPL (bsc#1214479).
- gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479).
- gve: use vmalloc_array and vcalloc (bsc#1214479).
- gve: XDP support GQI-QPL: helper function changes (bsc#1214479).
- hwrng: virtio - add an internal buffer (git-fixes).
- hwrng: virtio - always add a pending request (git-fixes).
- hwrng: virtio - do not wait on cleanup (git-fixes).
- hwrng: virtio - do not waste entropy (git-fixes).
- hwrng: virtio - Fix race on data_avail and actual data (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes).
- i3c: master: svc: fix probe failure when no i3c device exist (git-fixes).
- idr: fix param name in idr_alloc_cyclic() doc (git-fixes).
- Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes).
- iommu/virtio: Detach domain on endpoint release (git-fixes).
- jbd2: check 'jh-&gt;b_transaction' before removing it from checkpoint (bsc#1214953).
- jbd2: correct the end of the journal recovery scan range (bsc#1214955).
- jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949).
- jbd2: fix checkpoint cleanup performance regression (bsc#1214952).
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948).
- jbd2: recheck chechpointing non-dirty buffer (bsc#1214945).
- jbd2: remove journal_clean_one_cp_list() (bsc#1214947).
- jbd2: remove t_checkpoint_io_list (bsc#1214946).
- jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946).
- kabi/severities: ignore mlx4 internal symbols
- kconfig: fix possible buffer overflow (git-fixes).
- kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template.
- kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist.
- kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes).
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915).
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896).
- KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916).
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894).
- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895).
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911).
- KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes).
- KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes).
- KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes).
- KVM: x86/mmu: Include mmu.h in spte.h (git-fixes).
- loop: Fix use-after-free issues (bsc#1214991).
- loop: loop_set_status_from_info() check before assignment (bsc#1214990).
- mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236).
- mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236).
- mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236).
- mlx4: Delete custom device management logic (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236).
- mlx4: Move the bond work to the core driver (bsc#1187236).
- mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236).
- mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236).
- mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236).
- mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236).
- module: Expose module_init_layout_section() (git-fixes)
- net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes).
- net: mana: Add page pool for RX buffers (bsc#1214040).
- net: mana: Configure hwc timeout from hardware (bsc#1214037).
- net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes).
- net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes).
- net/mlx4: Remove many unnecessary NULL values (bsc#1187236).
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes).
- NFS/blocklayout: Use the passed in gfp flags (git-fixes).
- NFS/pNFS: Fix assignment of xprtdata.cred (git-fixes).
- NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes).
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes).
- NFSD: fix change_info in NFSv4 RENAME replies (git-fixes).
- NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes).
- NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes).
- NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes).
- NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes).
- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes).
- NFSv4/pNFS: minor fix for cleanup path in nfs4_get_device_info (git-fixes).
- ntb: Clean up tx tail index on link down (git-fixes).
- ntb: Drop packets when qp link is down (git-fixes).
- ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes).
- nvme-auth: use chap-&gt;s2 to indicate bidirectional authentication (bsc#1214543).
- nvme-tcp: add recovery_delay to sysfs (bsc#1201284).
- nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284).
- nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284).
- nvme-tcp: make 'err_work' a delayed work (bsc#1201284).
- PCI: Free released resource after coalescing (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes).
- platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes).
- platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes).
- platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes).
- platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes).
- powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582).
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/xics: Remove unnecessary endian conversion (bsc#1065729).
- printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875).
- pwm: lpc32xx: Remove handling of PWM channels (git-fixes).
- quota: add new helper dquot_active() (bsc#1214998).
- quota: factor out dquot_write_dquot() (bsc#1214995).
- quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963).
- quota: fix warning in dqgrab() (bsc#1214962).
- quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961).
- quota: rename dquot_active() to inode_quota_active() (bsc#1214997).
- s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes).
- s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes).
- scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes).
- scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes).
- scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes).
- scsi: lpfc: Remove reftag check in DIF paths (git-fixes).
- scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928).
- scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928).
- scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928).
- scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928).
- scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928).
- scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928).
- scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928).
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928).
- scsi: qla2xxx: Remove unused declarations (bsc#1214928).
- scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).
- scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928).
- scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Handle additional SRB status values (git-fixes).
- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941).
- selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes).
- SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes).
- tcpm: Avoid soft reset when partner does not support get_status (git-fixes).
- tracing: Fix race issue between cpu buffer write and swap (git-fixes).
- tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes).
- tracing: Remove unnecessary copying of tr-&gt;current_trace (git-fixes).
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes).
- udf: Fix extension of the last extent in the file (bsc#1214964).
- udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965).
- udf: Fix off-by-one error when discarding preallocation (bsc#1214966).
- udf: Fix uninitialized array access for some pathnames (bsc#1214967).
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes).
- usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes).
- usb: ehci: move new member has_ci_pec_bug into hole (git-fixes).
- usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes).
- usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes).
- usb: typec: tcpci: clear the fault status bit (git-fixes).
- usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes).
- vhost_vdpa: fix the crash in unmap a large memory (git-fixes).
- vhost-scsi: unbreak any layout for response (git-fixes).
- vhost: allow batching hint without size (git-fixes).
- vhost: fix hung thread due to erroneous iotlb entries (git-fixes).
- vhost: handle error while adding split ranges to iotlb (git-fixes).
- virtio_net: add checking sq is full inside xdp xmit (git-fixes).
- virtio_net: Fix probe failed when modprobe virtio_net (git-fixes).
- virtio_net: reorder some funcs (git-fixes).
- virtio_net: separate the logic of checking whether sq is full (git-fixes).
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes).
- virtio-mmio: do not break lifecycle of vm_dev (git-fixes).
- virtio-net: fix race between set queues and probe (git-fixes).
- virtio-net: set queues after driver_ok (git-fixes).
- virtio-rng: make device ready before making request (git-fixes).
- virtio: acknowledge all features before access (git-fixes).
- vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582).
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes).
- word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729).
- x86/alternative: Fix race in try_get_desc() (git-fixes).
- x86/boot/e820: Fix typo in e820.c comment (git-fixes).
- x86/bugs: Reset speculation control settings on init (git-fixes).
- x86/cpu: Add Lunar Lake M (git-fixes).
- x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes).
- x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes).
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes).
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes).
- x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes).
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes).
- x86/mce: Retrieve poison range from hardware (git-fixes).
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes).
- x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes).
- x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes).
- x86/purgatory: remove PGO flags (git-fixes).
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes).
- x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes).
- x86/resctl: fix scheduler confusion with 'current' (git-fixes).
- x86/resctrl: Fix task CLOSID/RMID update race (git-fixes).
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes).
- x86/rtc: Remove __init for runtime functions (git-fixes).
- x86/sgx: Reduce delay and interference of enclave release (git-fixes).
- x86/srso: Do not probe microcode in a guest (git-fixes).
- x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes).
- x86/srso: Fix srso_show_state() side effect (git-fixes).
- x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes).
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes).
- xen: remove a confusing comment on auto-translated guest I/O (git-fixes).
- xprtrdma: Remap Receive buffers after a reconnect (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.92.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.92.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.92.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.92.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.92.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.92.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.92.1.150400.24.42.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.92.1.150400.24.42.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.92.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.92.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.92.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.92.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.92.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.92.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.92.1.150400.24.42.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.92.1.150400.24.42.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4059</id>
    <title>Security update for samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697097888"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4154" id="CVE-2023-4154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4154" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4091" id="CVE-2023-4091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42669" id="CVE-2023-42669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42669" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215908" id="1215908" title="VUL-0: EMBARGOED: CVE-2023-4154: samba: dirsync allows SYSTEM access with only &quot;GUID_DRS_GET_CHANGES&quot; right, not &quot;GUID_DRS_GET_ALL_CHANGES&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213940" id="1213940" title="samba-client-libs has dependency on libcluster-samba4.so which isn't provided by anything — ref:_00D1igLOd._5005qUNQqN:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215905" id="1215905" title="VUL-0: EMBARGOED: CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215904" id="1215904" title="VUL-0: EMBARGOED: CVE-2023-4091: samba: Client can truncate file with read-only permissions" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904)
- CVE-2023-42669: Fixed a bug in &quot;rpcecho&quot; development server which allows Denial of Service via sleep() call on AD DC. (bso#1215905)
- CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only &quot;GUID_DRS_GET_CHANGES&quot; right. (bsc#1215908)
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="src" src="src/samba-4.15.13+git.691.3d3cea0641-150400.3.31.1.src.rpm">
          <filename>samba-4.15.13+git.691.3d3cea0641-150400.3.31.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="x86_64" src="x86_64/samba-client-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.x86_64.rpm">
          <filename>samba-client-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.x86_64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="x86_64" src="x86_64/samba-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.x86_64.rpm">
          <filename>samba-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="s390x" src="s390x/samba-client-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.s390x.rpm">
          <filename>samba-client-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.s390x.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="s390x" src="s390x/samba-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.s390x.rpm">
          <filename>samba-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="aarch64" src="aarch64/samba-client-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.aarch64.rpm">
          <filename>samba-client-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.aarch64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.691.3d3cea0641" release="150400.3.31.1" arch="aarch64" src="aarch64/samba-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.aarch64.rpm">
          <filename>samba-libs-4.15.13+git.691.3d3cea0641-150400.3.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4602</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701243693"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170267" id="1170267" title="[SUSEConnect] does not display a EULA Dialog even when a EULA URL is available" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214781" id="1214781" title="zypper migration doesn't recognize -l option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212799" id="1212799" title="suseconnect-ng update 29622 introduces dependency conflicts in Maintenance Updates" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3179" id="PED-3179" title="https://jira.suse.com/browse/PED-3179" type="jira"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.4.0~git0.b0f7c25bfdfa
- Added EULA display for addons (bsc#1170267)
- Fix zypper argument for auto-agreeing licenses (bsc#1214781)
- Enable building on SLE12 SP5 (jsc#PED-3179)
- Fixed `provides` to work with yast2-registration on SLE15 SP4 (bsc#1212799)
- Improve error message if product set more than once
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150400.3.16.1" arch="src" src="src/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.src.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150400.3.16.1" arch="x86_64" src="x86_64/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.x86_64.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150400.3.16.1" arch="s390x" src="s390x/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.s390x.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.4.0~git0.b0f7c25bfdfa" release="150400.3.16.1" arch="aarch64" src="aarch64/suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.aarch64.rpm">
          <filename>suseconnect-ng-1.4.0~git0.b0f7c25bfdfa-150400.3.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4087</id>
    <title>Recommended update for s390-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697453400"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205528" id="1205528" title="zdump - Trying to seek past file end.  ref:_00D1igLOd._5005qFg9IA:ref" type="bugzilla"/>
    </references>
    <description>This update for s390-tools fixes the following issues:

- zgetdump: Trying to seek past file end &quot;/dev/crash&quot; (bsc#1205528)
</description>
    <pkglist>
      <collection>
        <package name="libekmfweb1" epoch="0" version="2.19.0" release="150400.7.24.1" arch="s390x" src="s390x/libekmfweb1-2.19.0-150400.7.24.1.s390x.rpm">
          <filename>libekmfweb1-2.19.0-150400.7.24.1.s390x.rpm</filename>
        </package>
        <package name="libkmipclient1" epoch="0" version="2.19.0" release="150400.7.24.1" arch="s390x" src="s390x/libkmipclient1-2.19.0-150400.7.24.1.s390x.rpm">
          <filename>libkmipclient1-2.19.0-150400.7.24.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.19.0" release="150400.7.24.1" arch="s390x" src="s390x/s390-tools-2.19.0-150400.7.24.1.s390x.rpm">
          <filename>s390-tools-2.19.0-150400.7.24.1.s390x.rpm</filename>
        </package>
        <package name="s390-tools" epoch="0" version="2.19.0" release="150400.7.24.1" arch="src" src="src/s390-tools-2.19.0-150400.7.24.1.src.rpm">
          <filename>s390-tools-2.19.0-150400.7.24.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4093</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697529042"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202845" id="1202845" title="PVT:1020:XM:Everest: After running switch up stream error injection on switch drc, HTX devices state changed from RN to DD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213808" id="1213808" title="Unexpected DP dual mode adaptor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214928" id="1214928" title="qla2xxx: update driver to 10.02.09.100-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214940" id="1214940" title="[PATCH] ext4: set goal start correctly in ext4_mb_normalize_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214941" id="1214941" title="[PATCH] ext4: reflect error codes from ext4_multi_mount_protect() to  its callers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214942" id="1214942" title="[PATCH] ext4: get block from bh in ext4_free_blocks for fast commit  replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214943" id="1214943" title="[PATCH] ext4: fix wrong unit use in ext4_mb_clear_bb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214944" id="1214944" title="[PATCH] ext4: fix wrong unit use in ext4_mb_new_blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214950" id="1214950" title="[PATCH] ext4: correct inline offset when handling xattrs in inode  body" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214951" id="1214951" title="[PATCH] ext4: avoid potential data overflow in next_linear_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214954" id="1214954" title="[PATCH] ext4: fix memory leaks in  ext4_fname_{setup_filename,prepare_lookup}" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214957" id="1214957" title="[PATCH] ext4: Remove ext4 locking of moved directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214986" id="1214986" title="[PATCH] blk-iocost: fix divide by 0 error in calc_lcoefs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214988" id="1214988" title="btrfs-cleaner hangs and: watchdog: BUG: soft lockup - CPU#8 stuck for" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214992" id="1214992" title="[PATCH] blk-iocost: use spin_lock_irqsave in  adjust_inuse_and_calc_cost" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214993" id="1214993" title="[PATCH] block/mq-deadline: use correct way to throttling write  requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215322" id="1215322" title="PVT:1050:XM:ITC: SLES SP5 LPAR is not responding when we do Fatal Injection on 4 Port ethernet Adapter (Shiner - 14E4 168A 1014 0493)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215877" id="1215877" title="[PATCH] workqueue: clean up WORK_* constant types, clarify masking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215894" id="1215894" title="KVM: s390: vsie: Fix the initialization of the epoch extension (epdx)  field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215895" id="1215895" title="KVM: s390: vsie: fix the length of APCB bitmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215896" id="1215896" title="KVM: s390: interrupt: use READ_ONCE() before cmpxchg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215911" id="1215911" title="KVM: s390/diag: fix racy access of physical cpu number in diag 9c  handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215915" id="1215915" title="KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215916" id="1215916" title="KVM: s390: pv: fix external interruption loop not always detected" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" id="CVE-2023-39194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" id="CVE-2023-39192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" id="CVE-2023-42754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" id="CVE-2023-4389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" id="CVE-2023-5345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5345" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" id="CVE-2023-42753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" id="CVE-2023-1206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" id="CVE-2023-4622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" id="CVE-2023-4623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4623" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" id="CVE-2023-4155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4155" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" id="CVE-2023-1859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" id="CVE-2023-2177" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2177" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" id="CVE-2023-4563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" id="CVE-2023-1192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1192" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
- CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
- CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
- CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467).
- CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351).
- CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899)
- CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
- CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275).
- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117).
- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).
- CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022)
- CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643).
- CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).

The following non-security bugs were fixed:

- ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes).
- ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes).
- ARM: pxa: remove use of symbol_get() (git-fixes).
- arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes).
- arm64: module-plts: inline linux/moduleloader.h (git-fixes)
- arm64: module: Use module_init_layout_section() to spot init sections (git-fixes)
- arm64: sdei: abort running SDEI handlers during crash (git-fixes)
- arm64: tegra: Update AHUB clock parent and rate (git-fixes)
- arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes)
- ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes).
- ASoC: meson: spdifin: start hw on dai probe (git-fixes).
- ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes).
- ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes).
- ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes).
- ata: pata_falcon: fix IO base selection for Q40 (git-fixes).
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes).
- ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes).
- backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes).
- blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986).
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992).
- block/mq-deadline: use correct way to throttling write requests (bsc#1214993).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes).
- bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322).
- bpf: Clear the probe_addr for uprobe (git-fixes).
- btrfs: do not hold CPU for too long when defragging a file (bsc#1214988).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM (git-fixes).
- drm/amd/display: prevent potential division by zero errors (git-fixes).
- drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808).
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes).
- drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes).
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes).
- drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes).
- ext4: avoid potential data overflow in next_linear_group (bsc#1214951).
- ext4: correct inline offset when handling xattrs in inode body (bsc#1214950).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943).
- ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944).
- ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942).
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941).
- ext4: Remove ext4 locking of moved directory (bsc#1214957).
- ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940).
- fs: do not update freeing inode i_io_list (bsc#1214813).
- fs: Establish locking order for unrelated directories (bsc#1214958).
- fs: Lock moved directories (bsc#1214959).
- fs: lockd: avoid possible wrong NULL parameter (git-fixes).
- fs: no need to check source (bsc#1215752).
- fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813).
- fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581).
- gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479).
- gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479).
- gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).
- gve: Changes to add new TX queues (bsc#1214479).
- gve: Control path for DQO-QPL (bsc#1214479).
- gve: fix frag_list chaining (bsc#1214479).
- gve: Fix gve interrupt names (bsc#1214479).
- gve: RX path for DQO-QPL (bsc#1214479).
- gve: trivial spell fix Recive to Receive (bsc#1214479).
- gve: Tx path for DQO-QPL (bsc#1214479).
- gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479).
- gve: use vmalloc_array and vcalloc (bsc#1214479).
- gve: XDP support GQI-QPL: helper function changes (bsc#1214479).
- hwrng: virtio - add an internal buffer (git-fixes).
- hwrng: virtio - always add a pending request (git-fixes).
- hwrng: virtio - do not wait on cleanup (git-fixes).
- hwrng: virtio - do not waste entropy (git-fixes).
- hwrng: virtio - Fix race on data_avail and actual data (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes).
- i3c: master: svc: fix probe failure when no i3c device exist (git-fixes).
- idr: fix param name in idr_alloc_cyclic() doc (git-fixes).
- Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes).
- iommu/virtio: Detach domain on endpoint release (git-fixes).
- jbd2: check 'jh-&gt;b_transaction' before removing it from checkpoint (bsc#1214953).
- jbd2: correct the end of the journal recovery scan range (bsc#1214955).
- jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949).
- jbd2: fix checkpoint cleanup performance regression (bsc#1214952).
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948).
- jbd2: recheck chechpointing non-dirty buffer (bsc#1214945).
- jbd2: remove journal_clean_one_cp_list() (bsc#1214947).
- jbd2: remove t_checkpoint_io_list (bsc#1214946).
- jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946).
- kabi/severities: ignore mlx4 internal symbols
- kconfig: fix possible buffer overflow (git-fixes).
- kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template.
- kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist.
- kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes).
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915).
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896).
- KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916).
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894).
- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895).
- KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911).
- KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes).
- KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes).
- KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes).
- KVM: x86/mmu: Include mmu.h in spte.h (git-fixes).
- loop: Fix use-after-free issues (bsc#1214991).
- loop: loop_set_status_from_info() check before assignment (bsc#1214990).
- mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236).
- mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236).
- mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236).
- mlx4: Delete custom device management logic (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236).
- mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236).
- mlx4: Move the bond work to the core driver (bsc#1187236).
- mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236).
- mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236).
- mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236).
- mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236).
- net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes).
- net: mana: Add page pool for RX buffers (bsc#1214040).
- net: mana: Configure hwc timeout from hardware (bsc#1214037).
- net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes).
- net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes).
- net/mlx4: Remove many unnecessary NULL values (bsc#1187236).
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes).
- NFS/blocklayout: Use the passed in gfp flags (git-fixes).
- NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes).
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes).
- NFSD: fix change_info in NFSv4 RENAME replies (git-fixes).
- NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes).
- NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes).
- NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes).
- NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes).
- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes).
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes).
- ntb: Clean up tx tail index on link down (git-fixes).
- ntb: Drop packets when qp link is down (git-fixes).
- ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes).
- nvme-auth: use chap-&gt;s2 to indicate bidirectional authentication (bsc#1214543).
- nvme-tcp: add recovery_delay to sysfs (bsc#1201284).
- nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284).
- nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284).
- nvme-tcp: make 'err_work' a delayed work (bsc#1201284).
- PCI: Free released resource after coalescing (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes).
- platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes).
- platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes).
- platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes).
- platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes).
- pNFS: Fix assignment of xprtdata.cred (git-fixes).
- powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582).
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/xics: Remove unnecessary endian conversion (bsc#1065729).
- printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875).
- pwm: lpc32xx: Remove handling of PWM channels (git-fixes).
- quota: add new helper dquot_active() (bsc#1214998).
- quota: factor out dquot_write_dquot() (bsc#1214995).
- quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963).
- quota: fix warning in dqgrab() (bsc#1214962).
- quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961).
- quota: rename dquot_active() to inode_quota_active() (bsc#1214997).
- s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes).
- scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes).
- scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes).
- scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes).
- scsi: lpfc: Remove reftag check in DIF paths (git-fixes).
- scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928).
- scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928).
- scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928).
- scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928).
- scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928).
- scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928).
- scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928).
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928).
- scsi: qla2xxx: Remove unused declarations (bsc#1214928).
- scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).
- scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928).
- scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Handle additional SRB status values (git-fixes).
- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941).
- selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes).
- SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes).
- tcpm: Avoid soft reset when partner does not support get_status (git-fixes).
- tracing: Fix race issue between cpu buffer write and swap (git-fixes).
- tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes).
- tracing: Remove unnecessary copying of tr-&gt;current_trace (git-fixes).
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes).
- udf: Fix extension of the last extent in the file (bsc#1214964).
- udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965).
- udf: Fix off-by-one error when discarding preallocation (bsc#1214966).
- udf: Fix uninitialized array access for some pathnames (bsc#1214967).
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes).
- usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes).
- usb: ehci: move new member has_ci_pec_bug into hole (git-fixes).
- usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes).
- usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes).
- usb: typec: tcpci: clear the fault status bit (git-fixes).
- usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes).
- vhost_vdpa: fix the crash in unmap a large memory (git-fixes).
- vhost-scsi: unbreak any layout for response (git-fixes).
- vhost: allow batching hint without size (git-fixes).
- vhost: fix hung thread due to erroneous iotlb entries (git-fixes).
- vhost: handle error while adding split ranges to iotlb (git-fixes).
- virtio_net: add checking sq is full inside xdp xmit (git-fixes).
- virtio_net: Fix probe failed when modprobe virtio_net (git-fixes).
- virtio_net: reorder some funcs (git-fixes).
- virtio_net: separate the logic of checking whether sq is full (git-fixes).
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes).
- virtio-mmio: do not break lifecycle of vm_dev (git-fixes).
- virtio-net: fix race between set queues and probe (git-fixes).
- virtio-net: set queues after driver_ok (git-fixes).
- virtio-rng: make device ready before making request (git-fixes).
- virtio: acknowledge all features before access (git-fixes).
- vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582).
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes).
- word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729).
- x86/alternative: Fix race in try_get_desc() (git-fixes).
- x86/boot/e820: Fix typo in e820.c comment (git-fixes).
- x86/bugs: Reset speculation control settings on init (git-fixes).
- x86/cpu: Add Lunar Lake M (git-fixes).
- x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes).
- x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes).
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes).
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes).
- x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes).
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes).
- x86/mce: Retrieve poison range from hardware (git-fixes).
- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes).
- x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes).
- x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes).
- x86/purgatory: remove PGO flags (git-fixes).
- x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes).
- x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes).
- x86/resctl: fix scheduler confusion with 'current' (git-fixes).
- x86/resctrl: Fix task CLOSID/RMID update race (git-fixes).
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes).
- x86/rtc: Remove __init for runtime functions (git-fixes).
- x86/sgx: Reduce delay and interference of enclave release (git-fixes).
- x86/srso: Do not probe microcode in a guest (git-fixes).
- x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes).
- x86/srso: Fix srso_show_state() side effect (git-fixes).
- x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes).
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes).
- xen: remove a confusing comment on auto-translated guest I/O (git-fixes).
- xprtrdma: Remap Receive buffers after a reconnect (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.56.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.56.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.56.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.56.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.56.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.56.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4056</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697097448"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207205" id="1207205" title="VUL-0: CVE-2023-0330: kvm,qemu: lsi53c895a: DMA reentrancy issue leads to stack overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212850" id="1212850" title="VUL-0: CVE-2023-3354: qemu,kvm: improper I/O watch removal in VNC TLS handshake can lead to remote unauthenticated denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213925" id="1213925" title="VUL-0: CVE-2023-3180: qemu,kvm: virtio-crypto: heap buffer overflow in virtio_crypto_sym_op_helper()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190011" id="1190011" title="VUL-0: CVE-2021-3750: kvm,qemu: hcd-ehci: DMA reentrancy issue leads to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181740" id="1181740" title="SLES11SP4 Guest don´t run on XEN SLES15SP2 [ ref:_00D1igLOd._5001iXgV9M:ref ]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188609" id="1188609" title="VUL-1: CVE-2021-3638: qemu: ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215311" id="1215311" title="qemu will stop compiling when binutils update is released (toolchain update 2023)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213663" id="1213663" title="KVM crashes during migration with --copy-storage-all" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179993" id="1179993" title="[XEN][hvm]HDIO_GET_IDENTITY failed when install an SLE11SP4 hvm domU" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3354" id="CVE-2023-3354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3354" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3638" id="CVE-2021-3638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3638" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3750" id="CVE-2021-3750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3750" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0330" id="CVE-2023-0330" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0330" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3180" id="CVE-2023-3180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3180" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2023-3180: Fixed a buffer overflow in the virtio-crypto device
  (bsc#1213925).
- CVE-2021-3750: Fixed a DMA reentrancy in the USB EHCI device that
  could lead to use-after-free (bsc#1190011).
- CVE-2021-3638: Fixed a buffer overflow in the ati-vga device
  (bsc#1188609).
- CVE-2023-3354: Fixed an issue when performing a TLS handshake that
  could lead to remote denial of service via VNC connection
  (bsc#1212850).
- CVE-2023-0330: Fixed a DMA reentrancy issue in the lsi53c895a device
  that could lead to a stack overflow (bsc#1207205).

Non-security fixes:

- Fixed a potential build issue in the librm subcomponent
  (bsc#1215311).
- Fixed a potential crash during VM migration (bsc#1213663).
- Fixed potential issues during installation on a Xen host
  (bsc#1179993, bsc#1181740).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="src" src="src/qemu-6.2.0-150400.37.23.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.23.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.23.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.23.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.23.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.23.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.23.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.23.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.23.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.23.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.23.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.23.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.23.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.23.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.23.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.23.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.23.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.23.1" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.23.1.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.23.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.23.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.23.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4108</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697622786"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43804" id="CVE-2023-43804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43804" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215968" id="1215968" title="VUL-0: CVE-2023-43804: python-urllib3: cookie request header isn't stripped during cross-origin redirects" type="bugzilla"/>
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if
  the user manually set the corresponding header (bsc#1215968).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="1.25.10" release="150300.4.6.1" arch="src" src="src/python-urllib3-1.25.10-150300.4.6.1.src.rpm">
          <filename>python-urllib3-1.25.10-150300.4.6.1.src.rpm</filename>
        </package>
        <package name="python3-urllib3" epoch="0" version="1.25.10" release="150300.4.6.1" arch="noarch" src="noarch/python3-urllib3-1.25.10-150300.4.6.1.noarch.rpm">
          <filename>python3-urllib3-1.25.10-150300.4.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-98</id>
    <title>Recommended update for gegl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705046517"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6351" id="PED-6351" title="https://jira.suse.com/browse/PED-6351" type="jira"/>
    </references>
    <description>This update for gegl and its dependencies fixes the following issues:

gegl:
  
- Allow building against a newer libraw (0.21) (jsc#PED-6351)

celt, fdk-aac-free, ffmpeg-4, ilmbase, ldacBT, lensfun, libass, libbluray, libbs2b,
libcdio-paranoia, libcdio, libdc1394, libgsm, libmfx, libopenmpt, libraw1394, libraw,
libspiro, libva, libvdpau, lilv, metis, openexr, pipewire, pulseaudio, rtkit, SDL2,
serd, sord, sratom, suitesparse, webrtc-audio-processing, wireplumber:

- Deliver missing direct and indirect dependencies of gegl
  to SUSE Package Hub 15 SP{4,5} for aarch64, ppc64le, s390x and x86_64
- There are NO code changes
</description>
    <pkglist>
      <collection>
        <package name="pulseaudio" epoch="0" version="15.0" release="150400.4.4.1" arch="src" src="src/pulseaudio-15.0-150400.4.4.1.src.rpm">
          <filename>pulseaudio-15.0-150400.4.4.1.src.rpm</filename>
        </package>
        <package name="system-user-pulse" epoch="0" version="15.0" release="150400.4.4.1" arch="noarch" src="noarch/system-user-pulse-15.0-150400.4.4.1.noarch.rpm">
          <filename>system-user-pulse-15.0-150400.4.4.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4055</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697097105"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215744" id="1215744" title="VUL-0: EMBARGOED: CVE-2023-34323: xen: xenstored: A transaction conflict can crash C Xenstored (XSA-440)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215748" id="1215748" title="VUL-0: EMBARGOED: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD: Debug Mask handling (XSA-444)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215746" id="1215746" title="VUL-0: EMBARGOED: CVE-2023-34326: xen: x86/AMD: missing IOMMU TLB flushing (XSA-442)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215747" id="1215747" title="VUL-0: EMBARGOED: CVE-2023-34325: xen: Multiple vulnerabilities in libfsimage disk handling (XSA-443)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" id="CVE-2023-34327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" id="CVE-2023-34328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" id="CVE-2023-34326" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34323" id="CVE-2023-34323" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34323" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" id="CVE-2023-34325" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-34323: A transaction conflict can crash C Xenstored (XSA-440, bsc#1215744)
- CVE-2023-34326: Missing IOMMU TLB flushing (XSA-442, bsc#1215746)
- CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443, bsc#1215747)
- CVE-2023-34327: Debug Mask handling (XSA-444, bsc#1215748)
- CVE-2023-34328: Debug Mask handling (XSA-444, bsc#1215748)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_06" release="150400.4.37.1" arch="src" src="src/xen-4.16.5_06-150400.4.37.1.src.rpm">
          <filename>xen-4.16.5_06-150400.4.37.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_06" release="150400.4.37.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_06-150400.4.37.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_06-150400.4.37.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4126</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697701196"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216006" id="1216006" title="VUL-0: cni,cni-plugins: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>
This update of cni fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.16.1" arch="src" src="src/cni-0.7.1-150100.3.16.1.src.rpm">
          <filename>cni-0.7.1-150100.3.16.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.16.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.16.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.16.1" arch="s390x" src="s390x/cni-0.7.1-150100.3.16.1.s390x.rpm">
          <filename>cni-0.7.1-150100.3.16.1.s390x.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.16.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.16.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4127</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697701484"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212475" id="1212475" title="go1.21 release tracking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216006" id="1216006" title="VUL-0: cni,cni-plugins: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>
This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.20.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.20.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.20.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.20.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.20.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.20.1" arch="s390x" src="s390x/cni-plugins-0.8.6-150100.3.20.1.s390x.rpm">
          <filename>cni-plugins-0.8.6-150100.3.20.1.s390x.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.20.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.20.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4089</id>
    <title>Security update for opensc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697455067"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40661" id="CVE-2023-40661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40660" id="CVE-2023-40660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40660" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215762" id="1215762" title="VUL-0: CVE-2023-40660: opensc: PIN bypass when card tracks its own login state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215761" id="1215761" title="VUL-0: CVE-2023-40661: opensc: multiple memory issues with pkcs15-init (enrollment tool)" type="bugzilla"/>
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-40660: Fixed a PIN bypass that could be triggered when
  cards tracked their own login state (bsc#1215762).
- CVE-2023-40661: Fixed several memory safety issues that could happen
  during the card enrollment process using pkcs15-init (bsc#1215761).
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="src" src="src/opensc-0.22.0-150400.3.6.1.src.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="x86_64" src="x86_64/opensc-0.22.0-150400.3.6.1.x86_64.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="s390x" src="s390x/opensc-0.22.0-150400.3.6.1.s390x.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.6.1" arch="aarch64" src="aarch64/opensc-0.22.0-150400.3.6.1.aarch64.rpm">
          <filename>opensc-0.22.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4122</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697696975"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215215" id="1215215" title="openssl-1_1 no longer displays &quot;fips&quot; in the version string as of SLES 15.2+" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- Displays &quot;fips&quot; in the version string (bsc#1215215)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.57.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.57.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.57.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.57.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.57.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.57.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.57.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.57.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.57.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.57.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.57.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.57.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.57.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.57.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.57.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.57.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.57.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.57.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.57.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.57.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.57.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.57.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.57.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.57.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.57.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.57.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.57.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4388</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699497392"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213293" id="1213293" title="Highstate fails on SLE Micro 5.4 - AttributeError: 'str' object has no attribute 'get'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213518" id="1213518" title="SUSE Manager Server 4.3: SLSPATH / TPLPATH variable in Salt broken after updating to salt-3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214477" id="1214477" title="Salt key auto acceptance based on grains seems to fail with numeric values or boolean values" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215157" id="1215157" title="VUL-0: salt: arbitrary code execution via symlink attack" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" id="CVE-2023-34049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" type="cve"/>
      <reference href="https://jira.suse.com/browse/MSQA-706" id="MSQA-706" title="https://jira.suse.com/browse/MSQA-706" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)

Bugs fixed:

- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Allow all primitive grain types for autosign_grains (bsc#1214477)
</description>
    <pkglist>
      <collection>
        <package name="python-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="src" src="src/python-simplejson-3.17.2-150300.3.4.1.src.rpm">
          <filename>python-simplejson-3.17.2-150300.3.4.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="x86_64" src="x86_64/python3-simplejson-3.17.2-150300.3.4.1.x86_64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.4.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="s390x" src="s390x/python3-simplejson-3.17.2-150300.3.4.1.s390x.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.4.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-simplejson" epoch="0" version="3.17.2" release="150300.3.4.1" arch="aarch64" src="aarch64/python3-simplejson-3.17.2-150300.3.4.1.aarch64.rpm">
          <filename>python3-simplejson-3.17.2-150300.3.4.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4387</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699497247"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213518" id="1213518" title="SUSE Manager Server 4.3: SLSPATH / TPLPATH variable in Salt broken after updating to salt-3006" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213293" id="1213293" title="Highstate fails on SLE Micro 5.4 - AttributeError: 'str' object has no attribute 'get'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214477" id="1214477" title="Salt key auto acceptance based on grains seems to fail with numeric values or boolean values" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215157" id="1215157" title="VUL-0: salt: arbitrary code execution via symlink attack" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" id="CVE-2023-34049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34049" type="cve"/>
      <reference href="https://jira.suse.com/browse/MSQA-706" id="MSQA-706" title="https://jira.suse.com/browse/MSQA-706" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157)

Bugs fixed:

- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Allow all primitive grain types for autosign_grains (bsc#1214477)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.49.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.49.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="src" src="src/salt-3006.0-150400.8.49.2.src.rpm">
          <filename>salt-3006.0-150400.8.49.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="x86_64" src="x86_64/salt-3006.0-150400.8.49.2.x86_64.rpm">
          <filename>salt-3006.0-150400.8.49.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.49.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.49.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.49.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.49.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.49.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.49.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.49.2.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.49.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="s390x" src="s390x/salt-3006.0-150400.8.49.2.s390x.rpm">
          <filename>salt-3006.0-150400.8.49.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.49.2" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.49.2.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.49.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.49.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.49.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.49.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.49.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.49.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.49.2" arch="aarch64" src="aarch64/salt-3006.0-150400.8.49.2.aarch64.rpm">
          <filename>salt-3006.0-150400.8.49.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.49.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.49.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.49.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.49.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.49.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.49.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4936</id>
    <title>Security update for docker, rootlesskit</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703089143"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210141" id="1210141" title="docker.socket systemd configurations dosn't exist" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215323" id="1215323" title="[trackerbug] docker 24.0.6-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213229" id="1213229" title="VUL-0: CVE-2023-29406: go1.19,go1.20: net/http: insufficient sanitization of Host header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217513" id="1217513" title="VUL-0: docker: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213500" id="1213500" title="[trackerbug] docker 24.0.4-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170415" id="1170415" title="VUL-0: CVE-2020-8694: kernel-source: Intel RAPL sidechannel aka PLATYPUS attack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170446" id="1170446" title="VUL-0: CVE-2020-8695: ucode-intel: Intel RAPL sidechannel (SGX part)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178760" id="1178760" title="VUL-0: CVE-2020-12912: kernel-source: AMD: unprivileged access to RAPL allows for side channel attacks" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-6180" id="PED-6180" title="https://jira.suse.com/browse/PED-6180" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694" id="CVE-2020-8694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695" id="CVE-2020-8695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12912" id="CVE-2020-12912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12912" type="cve"/>
    </references>
    <description>This update for docker, rootlesskit fixes the following issues:

docker:

- Update to Docker 24.0.7-ce. See upstream changelong online at
  https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
    - CVE-2020-8694 bsc#1170415
    - CVE-2020-8695 bsc#1170446
    - CVE-2020-12912 bsc#1178760

- Update to Docker 24.0.6-ce. See upstream changelong online at

  	https://docs.docker.com/engine/release-notes/24.0/#2406 . bsc#1215323

- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141

- Update to Docker 24.0.5-ce. See upstream changelong online at

	https://docs.docker.com/engine/release-notes/24.0/#2405 . bsc#1213229

This update ships docker-rootless support in the docker-rootless-extra package. (jsc#PED-6180)

rootlesskit:

- new package, for docker rootless support. (jsc#PED-6180)

</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="src" src="src/docker-24.0.7_ce-150000.190.4.src.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="x86_64" src="x86_64/docker-24.0.7_ce-150000.190.4.x86_64.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="s390x" src="s390x/docker-24.0.7_ce-150000.190.4.s390x.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.190.4" arch="aarch64" src="aarch64/docker-24.0.7_ce-150000.190.4.aarch64.rpm">
          <filename>docker-24.0.7_ce-150000.190.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4139</id>
    <title>Recommended update for containerd, runc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697789264"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215323" id="1215323" title="[trackerbug] docker 24.0.6-ce update" type="bugzilla"/>
    </references>
    <description>This update for containerd, runc fixes the following issues:

runc was updated to v1.1.9. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.1.9

containerd was updated to containerd v1.7.7 for Docker v24.0.6-ce. Upstream release notes:

- https://github.com/containerd/containerd/releases/tag/v1.7.7
- https://github.com/containerd/containerd/releases/tag/v1.7.6 bsc#1215323
- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="src" src="src/containerd-1.7.7-150000.100.1.src.rpm">
          <filename>containerd-1.7.7-150000.100.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="x86_64" src="x86_64/containerd-1.7.7-150000.100.1.x86_64.rpm">
          <filename>containerd-1.7.7-150000.100.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="src" src="src/runc-1.1.9-150000.52.2.src.rpm">
          <filename>runc-1.1.9-150000.52.2.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="x86_64" src="x86_64/runc-1.1.9-150000.52.2.x86_64.rpm">
          <filename>runc-1.1.9-150000.52.2.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="s390x" src="s390x/containerd-1.7.7-150000.100.1.s390x.rpm">
          <filename>containerd-1.7.7-150000.100.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="s390x" src="s390x/runc-1.1.9-150000.52.2.s390x.rpm">
          <filename>runc-1.1.9-150000.52.2.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.7" release="150000.100.1" arch="aarch64" src="aarch64/containerd-1.7.7-150000.100.1.aarch64.rpm">
          <filename>containerd-1.7.7-150000.100.1.aarch64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.9" release="150000.52.2" arch="aarch64" src="aarch64/runc-1.1.9-150000.52.2.aarch64.rpm">
          <filename>runc-1.1.9-150000.52.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4538</id>
    <title>Recommended update for screen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700731397"/>
    <references>
      <reference href="https://jira.suse.com/browse/SMO-279" id="SMO-279" title="https://jira.suse.com/browse/SMO-279" type="jira"/>
    </references>
    <description>
This update for screen fixes the following issue:

- screen is shipped to SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5.

  </description>
    <pkglist>
      <collection>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="src" src="src/screen-4.6.2-150000.5.5.1.src.rpm">
          <filename>screen-4.6.2-150000.5.5.1.src.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="x86_64" src="x86_64/screen-4.6.2-150000.5.5.1.x86_64.rpm">
          <filename>screen-4.6.2-150000.5.5.1.x86_64.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="s390x" src="s390x/screen-4.6.2-150000.5.5.1.s390x.rpm">
          <filename>screen-4.6.2-150000.5.5.1.s390x.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="ppc64le" src="ppc64le/screen-4.6.2-150000.5.5.1.ppc64le.rpm">
          <filename>screen-4.6.2-150000.5.5.1.ppc64le.rpm</filename>
        </package>
        <package name="screen" epoch="0" version="4.6.2" release="150000.5.5.1" arch="aarch64" src="aarch64/screen-4.6.2-150000.5.5.1.aarch64.rpm">
          <filename>screen-4.6.2-150000.5.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4268</id>
    <title>Recommended update for pciutils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698681153"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215265" id="1215265" title="Partner-L3: lspci -tv utility crashes when too many PCI devices" type="bugzilla"/>
    </references>
    <description>This update for pciutils fixes the following issues:

- Buffer overflow error that would cause lspci to crash on systems with complex topologies (bsc#1215265)
</description>
    <pkglist>
      <collection>
        <package name="libpci3" epoch="0" version="3.5.6" release="150300.13.6.1" arch="x86_64" src="x86_64/libpci3-3.5.6-150300.13.6.1.x86_64.rpm">
          <filename>libpci3-3.5.6-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="src" src="src/pciutils-3.5.6-150300.13.6.1.src.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.src.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="x86_64" src="x86_64/pciutils-3.5.6-150300.13.6.1.x86_64.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="libpci3" epoch="0" version="3.5.6" release="150300.13.6.1" arch="s390x" src="s390x/libpci3-3.5.6-150300.13.6.1.s390x.rpm">
          <filename>libpci3-3.5.6-150300.13.6.1.s390x.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="s390x" src="s390x/pciutils-3.5.6-150300.13.6.1.s390x.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.s390x.rpm</filename>
        </package>
        <package name="libpci3" epoch="0" version="3.5.6" release="150300.13.6.1" arch="aarch64" src="aarch64/libpci3-3.5.6-150300.13.6.1.aarch64.rpm">
          <filename>libpci3-3.5.6-150300.13.6.1.aarch64.rpm</filename>
        </package>
        <package name="pciutils" epoch="0" version="3.5.6" release="150300.13.6.1" arch="aarch64" src="aarch64/pciutils-3.5.6-150300.13.6.1.aarch64.rpm">
          <filename>pciutils-3.5.6-150300.13.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4135</id>
    <title>Security update for suse-module-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1697717683"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205767" id="1205767" title="VUL-0: kernel: protocol problems in RNDIS drivers" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-5731" id="PED-5731" title="https://jira.suse.com/browse/PED-5731" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" id="CVE-2023-23559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23559" type="cve"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Updated to version 15.4.18:

  - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier
    module (bsc#1210335).
  - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules
    (bsc#1205767, jsc#PED-5731).
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.4.18" release="150400.3.14.1" arch="src" src="src/suse-module-tools-15.4.18-150400.3.14.1.src.rpm">
          <filename>suse-module-tools-15.4.18-150400.3.14.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.18" release="150400.3.14.1" arch="x86_64" src="x86_64/suse-module-tools-15.4.18-150400.3.14.1.x86_64.rpm">
          <filename>suse-module-tools-15.4.18-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.18" release="150400.3.14.1" arch="s390x" src="s390x/suse-module-tools-15.4.18-150400.3.14.1.s390x.rpm">
          <filename>suse-module-tools-15.4.18-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.18" release="150400.3.14.1" arch="aarch64" src="aarch64/suse-module-tools-15.4.18-150400.3.14.1.aarch64.rpm">
          <filename>suse-module-tools-15.4.18-150400.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4192</id>
    <title>Recommended update for libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698222935"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7040" id="PED-7040" title="https://jira.suse.com/browse/PED-7040" type="jira"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]

Update to 1.11.0:

  * Enhancements and bugfixes

    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake &quot;unity&quot; builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: now parses attribute extensions if they exist
    - SFTP: no longer will busy loop if SFTP fails to initialize
    - SFTP: now clear various errors as expected
    - SFTP: no longer skips files if the line buffer is too small
    - SCP: add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed &quot;old gex&quot; build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files

- Bump to version 1.10.0

  * Enhancements and bugfixes:

      * support ECDSA certificate authentication
      * fix detailed _libssh2_error being overwritten by generic errors
      * unified error handling
      * fix _libssh2_random() silently discarding errors
      * don't error if using keys without RSA
      * avoid OpenSSL latent error in FIPS mode
      * fix EVP_Cipher interface change in openssl 3
      * fix potential overwrite of buffer when reading stdout of command
      * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
      * correct a typo which may lead to stack overflow
      * fix random big number generation to match openssl
      * added key exchange group16-sha512 and group18-sha512.
      * add support for an OSS Fuzzer fuzzing target
      * adds support for ECDSA for both key exchange and host key algorithms
      * clean up curve25519 code
      * update the min, preferred and max DH group values based on RFC 8270.
      * changed type of LIBSSH2_FX_* constants to unsigned long
      * added diffie-hellman-group14-sha256 kex
      * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
      * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
      * fixes crash with delayed compression option using Bitvise server.
      * adds support for PKIX key reading
      * use new API to parse data in packet_x11_open() for better bounds checking.
      * double the static buffer size when reading and writing known hosts
      * improved bounds checking in packet_queue_listener
      * improve message parsing (CVE-2019-17498)
      * improve bounds checking in kex_agree_methods()
      * adding SSH agent forwarding.
      * fix agent forwarding message, updated example.
      * added integration test code and cmake target. Added example to cmake list.
      * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
      * add an EWOULDBLOCK check for better portability
      * fix off by one error when loading public keys with no id
      * fix use-after-free crash on reinitialization of openssl backend
      * preserve error info from agent_list_identities()
      * make sure the error code is set in _libssh2_channel_open()
      * fixed misspellings
      * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
      * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.19.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.19.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.19.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.19.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.19.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.19.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.19.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.19.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.19.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.19.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4189</id>
    <title>Security update for openssl-3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698201264"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216163" id="1216163" title="VUL-0: EMBARGOED: CVE-2023-5363: openssl: Incorrect cipher key and IV length processing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213853" id="1213853" title="VUL-0: CVE-2023-3817: openssl: Excessive time spent checking DH q parameter value" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5363" id="CVE-2023-5363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5363" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" id="CVE-2023-3817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" type="cve"/>
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2023-5363: Incorrect cipher key and IV length processing. (bsc#1216163)
- CVE-2023-3817: Add test of DH_check() with q = p + 1. (bsc#1213853)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.37.1" arch="x86_64" src="x86_64/libopenssl3-3.0.8-150400.4.37.1.x86_64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.0.8" release="150400.4.37.1" arch="src" src="src/openssl-3-3.0.8-150400.4.37.1.src.rpm">
          <filename>openssl-3-3.0.8-150400.4.37.1.src.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.37.1" arch="s390x" src="s390x/libopenssl3-3.0.8-150400.4.37.1.s390x.rpm">
          <filename>libopenssl3-3.0.8-150400.4.37.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.37.1" arch="ppc64le" src="ppc64le/libopenssl3-3.0.8-150400.4.37.1.ppc64le.rpm">
          <filename>libopenssl3-3.0.8-150400.4.37.1.ppc64le.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.37.1" arch="aarch64" src="aarch64/libopenssl3-3.0.8-150400.4.37.1.aarch64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4897</id>
    <title>Optional update for openslp</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702970730"/>
    <references/>
    <description>This update for openslp bumps the version number to ensure a clean upgrade path from SLE-12 to SLE-15.

This is a no-change rebuild of the packages already available in SLE-15.
</description>
    <pkglist>
      <collection>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="src" src="src/openslp-2.0.0-150000.6.17.1.src.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.src.rpm</filename>
        </package>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="x86_64" src="x86_64/openslp-2.0.0-150000.6.17.1.x86_64.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.x86_64.rpm</filename>
        </package>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="s390x" src="s390x/openslp-2.0.0-150000.6.17.1.s390x.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.s390x.rpm</filename>
        </package>
        <package name="openslp" epoch="0" version="2.0.0" release="150000.6.17.1" arch="aarch64" src="aarch64/openslp-2.0.0-150000.6.17.1.aarch64.rpm">
          <filename>openslp-2.0.0-150000.6.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4200</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698228526"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216123" id="1216123" title="VUL-0: CVE-2023-44487: TRACKER-BUG: HTTP/2 Rapid Reset Attack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216174" id="1216174" title="VUL-0: nghttp2: Rapid reset attack impact" type="bugzilla"/>
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.12.1" arch="x86_64" src="x86_64/libnghttp2-14-1.40.0-150200.12.1.x86_64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.12.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.40.0" release="150200.12.1" arch="src" src="src/nghttp2-1.40.0-150200.12.1.src.rpm">
          <filename>nghttp2-1.40.0-150200.12.1.src.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.12.1" arch="s390x" src="s390x/libnghttp2-14-1.40.0-150200.12.1.s390x.rpm">
          <filename>libnghttp2-14-1.40.0-150200.12.1.s390x.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.12.1" arch="aarch64" src="aarch64/libnghttp2-14-1.40.0-150200.12.1.aarch64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4225</id>
    <title>Security update for zchunk</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698397382"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46228" id="CVE-2023-46228" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46228" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216268" id="1216268" title="VUL-0: CVE-2023-46228: zchunk: overflow fixes in git" type="bugzilla"/>
    </references>
    <description>This update for zchunk fixes the following issues:

- CVE-2023-46228: Fixed a handle overflow errors in malformed zchunk files. (bsc#1216268)
</description>
    <pkglist>
      <collection>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.7.1" arch="x86_64" src="x86_64/libzck1-1.1.16-150400.3.7.1.x86_64.rpm">
          <filename>libzck1-1.1.16-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="zchunk" epoch="0" version="1.1.16" release="150400.3.7.1" arch="src" src="src/zchunk-1.1.16-150400.3.7.1.src.rpm">
          <filename>zchunk-1.1.16-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.7.1" arch="s390x" src="s390x/libzck1-1.1.16-150400.3.7.1.s390x.rpm">
          <filename>libzck1-1.1.16-150400.3.7.1.s390x.rpm</filename>
        </package>
        <package name="libzck1" epoch="0" version="1.1.16" release="150400.3.7.1" arch="aarch64" src="aarch64/libzck1-1.1.16-150400.3.7.1.aarch64.rpm">
          <filename>libzck1-1.1.16-150400.3.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4217</id>
    <title>Security update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698315661"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853" id="CVE-2023-45853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216378" id="1216378" title="VUL-0: CVE-2023-45853: zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6" type="bugzilla"/>
    </references>
    <description>This update for zlib fixes the following issues:

- CVE-2023-45853: Fixed an integer overflow that would lead to a
  buffer overflow in the minizip subcomponent (bsc#1216378).
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.48.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.48.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.48.1" arch="src" src="src/zlib-1.2.11-150000.3.48.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.48.1.src.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.48.1" arch="x86_64" src="x86_64/zlib-devel-1.2.11-150000.3.48.1.x86_64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.48.1.x86_64.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.48.1" arch="s390x" src="s390x/libz1-1.2.11-150000.3.48.1.s390x.rpm">
          <filename>libz1-1.2.11-150000.3.48.1.s390x.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.48.1" arch="s390x" src="s390x/zlib-devel-1.2.11-150000.3.48.1.s390x.rpm">
          <filename>zlib-devel-1.2.11-150000.3.48.1.s390x.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.48.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.48.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.48.1.aarch64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.11" release="150000.3.48.1" arch="aarch64" src="aarch64/zlib-devel-1.2.11-150000.3.48.1.aarch64.rpm">
          <filename>zlib-devel-1.2.11-150000.3.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-23</id>
    <title>Recommended update for libica, openssl-ibmca</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704298115"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207472" id="1207472" title="SLES 15 SP4 - openssl-3 : segmentation faults seen for different commands when ibmca engine is configured into /etc/ssl/openssl3.cnf" type="bugzilla"/>
    </references>
    <description>This update for libica, openssl-ibmca fixes the following issues:

Changes in libica:

- Added library in openssl3 flavor [bsc#1207472]

Changes in openssl-ibmca:

- Add a additional openssl engine for openssl 3 [bsc#1207472]
</description>
    <pkglist>
      <collection>
        <package name="libica" epoch="0" version="4.2.1" release="150400.3.11.8" arch="src" src="src/libica-4.2.1-150400.3.11.8.src.rpm">
          <filename>libica-4.2.1-150400.3.11.8.src.rpm</filename>
        </package>
        <package name="libica-tools" epoch="0" version="4.2.1" release="150400.3.11.8" arch="s390x" src="s390x/libica-tools-4.2.1-150400.3.11.8.s390x.rpm">
          <filename>libica-tools-4.2.1-150400.3.11.8.s390x.rpm</filename>
        </package>
        <package name="libica4" epoch="0" version="4.2.1" release="150400.3.11.8" arch="s390x" src="s390x/libica4-4.2.1-150400.3.11.8.s390x.rpm">
          <filename>libica4-4.2.1-150400.3.11.8.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.16.1" arch="s390x" src="s390x/openssl-ibmca-2.4.0-150400.4.16.1.s390x.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.16.1" arch="src" src="src/openssl-ibmca-2.4.0-150400.4.16.1.src.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.16.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4937</id>
    <title>Recommended update for sg3_utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703091282"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215720" id="1215720" title="L3-Question: rescan-scsi-bus.sh resize not detected - ref:_00D1igLOd._5005qWgpGs:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216355" id="1216355" title="Packman Discord package upgrade lockout defeat inoperative." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215772" id="1215772" title="sg3_utils package doesn't rebuild initrd" type="bugzilla"/>
      <reference href="https://github.com/doug-gilbert/sg3_utils#44" id="doug-gilbert/sg3_utils#44" title="rescan-scsi-bus.sh: improve cleanup on exit" type="github"/>
    </references>
    <description>This update for sg3_utils fixes the following issues:

- Update to version 1.47+15.b6898b8
- L3-Question: rescan-scsi-bus.sh resize not detected (bsc#1215720).
- Packman Discord package upgrade lockout defeat inoperative (bsc#1216355).
- sg3_utils package doesn't rebuild initrd (bsc#1215772).
- rescan-scsi-bus.sh: improve cleanup on exit (gh#doug-gilbert/sg3_utils#44)
</description>
    <pkglist>
      <collection>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="x86_64" src="x86_64/libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm">
          <filename>libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="src" src="src/sg3_utils-1.47+15.b6898b8-150400.3.11.1.src.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="x86_64" src="x86_64/sg3_utils-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="s390x" src="s390x/libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.s390x.rpm">
          <filename>libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="s390x" src="s390x/sg3_utils-1.47+15.b6898b8-150400.3.11.1.s390x.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="aarch64" src="aarch64/libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm">
          <filename>libsgutils2-1_47-2-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+15.b6898b8" release="150400.3.11.1" arch="aarch64" src="aarch64/sg3_utils-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm">
          <filename>sg3_utils-1.47+15.b6898b8-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4310</id>
    <title>Recommended update for libtirpc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698757878"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196647" id="1196647" title="libtirpc protocol order in SLE 15 SP3 breaks kubernetes inter-cluster pod communication  [ref:_00D1igLOd._5001ir4UX4:ref]" type="bugzilla"/>
    </references>
    <description>This Update for libtirpc to 1.3.4, fixing the following issues:
    
Update to 1.3.4 (bsc#1199467)

 * binddynport.c honor ip_local_reserved_ports
   - replaces: binddynport-honor-ip_local_reserved_ports.patch
 * gss-api: expose gss major/minor error in authgss_refresh()
 * rpcb_clnt.c: Eliminate double frees in delete_cache()
 * rpcb_clnt.c: memory leak in destroy_addr
 * portmapper: allow TCP-only portmapper
 * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
 * clnt_raw.c: fix a possible null pointer dereference
 * bindresvport.c: fix a potential resource leakage

Update to 1.3.3:

* Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
* _rpc_dtablesize: use portable system call
* libtirpc: Fix use-after-free accessing the error number
* Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
* rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
* Eliminate deadlocks in connects with an MT environment
* clnt_dg_freeres() uncleared set active state may deadlock
* thread safe clnt destruction
* SUNRPC: mutexed access blacklist_read state variable
* SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c

Update to 1.3.2:

* Replace the final SunRPC licenses with BSD licenses
* blacklist: Add a few more well known ports
* libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS

Update to 1.3.1:

* Remove AUTH_DES interfaces from auth_des.h
  The unsupported  AUTH_DES authentication has be
  compiled out since commit d918e41d889 (Wed Oct 9 2019)
  replaced by API routines that return errors.
* svc_dg: Free xp_netid during destroy
* Fix memory management issues of fd locks
* libtirpc: replace array with list for per-fd locks
* __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
* __rpc_dtbsize: rlim_cur instead of rlim_max
* pkg-config: use the correct replacements for libdir/includedir
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.3.4" release="150300.3.20.1" arch="src" src="src/libtirpc-1.3.4-150300.3.20.1.src.rpm">
          <filename>libtirpc-1.3.4-150300.3.20.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.20.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.3.4-150300.3.20.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.20.1" arch="x86_64" src="x86_64/libtirpc3-1.3.4-150300.3.20.1.x86_64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.20.1" arch="s390x" src="s390x/libtirpc-netconfig-1.3.4-150300.3.20.1.s390x.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.20.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.20.1" arch="s390x" src="s390x/libtirpc3-1.3.4-150300.3.20.1.s390x.rpm">
          <filename>libtirpc3-1.3.4-150300.3.20.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.20.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.3.4-150300.3.20.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.20.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.20.1" arch="aarch64" src="aarch64/libtirpc3-1.3.4-150300.3.20.1.aarch64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4227</id>
    <title>Security update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698398811"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216433" id="1216433" title="VUL-0: EMBARGOED: CVE-2023-34059: open-vm-tools: file descriptor hijack vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216432" id="1216432" title="VUL-0: EMBARGOED: CVE-2023-34058: open-vm-tools: SAML token signature bypass vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34058" id="CVE-2023-34058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34058" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34059" id="CVE-2023-34059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34059" type="cve"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- CVE-2023-34058: Fixed a SAML token signature bypass issue
  (bsc#1216432).
- CVE-2023-34059: Fixed a privilege escalation issue through
  vmware-user-suid-wrapper (bsc#1216433).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.0" release="150300.43.1" arch="x86_64" src="x86_64/libvmtools0-12.3.0-150300.43.1.x86_64.rpm">
          <filename>libvmtools0-12.3.0-150300.43.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.43.1" arch="src" src="src/open-vm-tools-12.3.0-150300.43.1.src.rpm">
          <filename>open-vm-tools-12.3.0-150300.43.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.0" release="150300.43.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.0-150300.43.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.0-150300.43.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-60</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704710537"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215878" id="1215878" title="[SLEMicro][5.3][CC] CC script sets umask 077, which causes /etc  folder to be recreated with mode 700" type="bugzilla"/>
    </references>
    <description>Version 4.1.6, this update for transactional-update fixes the following issues:

- Use permissions of real /etc dir when creating overlay
- Add support for configuration file snippets
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.6" release="150400.3.3.2" arch="noarch" src="noarch/dracut-transactional-update-4.1.6-150400.3.3.2.noarch.rpm">
          <filename>dracut-transactional-update-4.1.6-150400.3.3.2.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.6" release="150400.3.3.2" arch="x86_64" src="x86_64/libtukit4-4.1.6-150400.3.3.2.x86_64.rpm">
          <filename>libtukit4-4.1.6-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150400.3.3.2" arch="src" src="src/transactional-update-4.1.6-150400.3.3.2.src.rpm">
          <filename>transactional-update-4.1.6-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150400.3.3.2" arch="x86_64" src="x86_64/transactional-update-4.1.6-150400.3.3.2.x86_64.rpm">
          <filename>transactional-update-4.1.6-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.6" release="150400.3.3.2" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.6-150400.3.3.2.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.6-150400.3.3.2.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.6" release="150400.3.3.2" arch="x86_64" src="x86_64/tukit-4.1.6-150400.3.3.2.x86_64.rpm">
          <filename>tukit-4.1.6-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.6" release="150400.3.3.2" arch="x86_64" src="x86_64/tukitd-4.1.6-150400.3.3.2.x86_64.rpm">
          <filename>tukitd-4.1.6-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.6" release="150400.3.3.2" arch="s390x" src="s390x/libtukit4-4.1.6-150400.3.3.2.s390x.rpm">
          <filename>libtukit4-4.1.6-150400.3.3.2.s390x.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150400.3.3.2" arch="s390x" src="s390x/transactional-update-4.1.6-150400.3.3.2.s390x.rpm">
          <filename>transactional-update-4.1.6-150400.3.3.2.s390x.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.6" release="150400.3.3.2" arch="s390x" src="s390x/tukit-4.1.6-150400.3.3.2.s390x.rpm">
          <filename>tukit-4.1.6-150400.3.3.2.s390x.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.6" release="150400.3.3.2" arch="s390x" src="s390x/tukitd-4.1.6-150400.3.3.2.s390x.rpm">
          <filename>tukitd-4.1.6-150400.3.3.2.s390x.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.6" release="150400.3.3.2" arch="aarch64" src="aarch64/libtukit4-4.1.6-150400.3.3.2.aarch64.rpm">
          <filename>libtukit4-4.1.6-150400.3.3.2.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.6" release="150400.3.3.2" arch="aarch64" src="aarch64/transactional-update-4.1.6-150400.3.3.2.aarch64.rpm">
          <filename>transactional-update-4.1.6-150400.3.3.2.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.6" release="150400.3.3.2" arch="aarch64" src="aarch64/tukit-4.1.6-150400.3.3.2.aarch64.rpm">
          <filename>tukit-4.1.6-150400.3.3.2.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.6" release="150400.3.3.2" arch="aarch64" src="aarch64/tukitd-4.1.6-150400.3.3.2.aarch64.rpm">
          <filename>tukitd-4.1.6-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4583</id>
    <title>Feature update for python-psutil</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701076616"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199282" id="1199282" title="Update azure SDK and cli to support aarch64 image creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184753" id="1184753" title="salt-minion conflicts with busybox-hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1176785" id="1176785" title="[Trackerbug] Update Azure CLI packages to latest version in SLE-15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1111622" id="1111622" title="VUL-0: CVE-2018-18074: python-requests: The Requests package sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1170175" id="1170175" title="python-requests fails in test with updated python-pytest-httpbin" type="bugzilla"/>
      <reference href="https://github.com/giampaolo/psutil#2043" id="giampaolo/psutil#2043" title="5.9.0: pytest is failing" type="github"/>
      <reference href="https://jira.suse.com/browse/ECO-3105" id="ECO-3105" title="https://jira.suse.com/browse/ECO-3105" type="jira"/>
      <reference href="https://jira.suse.com/browse/PM-2352" id="PM-2352" title="https://jira.suse.com/browse/PM-2352" type="jira"/>
      <reference href="https://jira.suse.com/browse/PM-3243" id="PM-3243" title="https://jira.suse.com/browse/PM-3243" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7192" id="PED-7192" title="ECO: Maint: Version update of python-requests" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24629" id="SLE-24629" title="https://jira.suse.com/browse/SLE-24629" type="jira"/>
    </references>
    <description>This update for python-psutil, python-requests fixes the following issues:

- update python-psutil to 5.9.1 (bsc#1199282, bsc#1184753, jsc#SLE-24629, jsc#PM-3243, gh#giampaolo/psutil#2043)
- Fix tests: setuptools changed the builddir library path and does not find the
  module from it. Use the installed platlib instead and exclude psutil.tests only later.
- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS

- Update python-requests to 2.25.1 (bsc#1176785, bsc#1170175, jsc#ECO-3105, jsc#PM-2352, jsc#PED-7192)
- Fixed bug with unintended Authorization header stripping for redirects using default ports (bsc#1111622).

</description>
    <pkglist>
      <collection>
        <package name="python-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="src" src="src/python-psutil-5.9.1-150300.3.6.1.src.rpm">
          <filename>python-psutil-5.9.1-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="python-requests" epoch="0" version="2.25.1" release="150300.3.6.1" arch="src" src="src/python-requests-2.25.1-150300.3.6.1.src.rpm">
          <filename>python-requests-2.25.1-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="x86_64" src="x86_64/python3-psutil-5.9.1-150300.3.6.1.x86_64.rpm">
          <filename>python3-psutil-5.9.1-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.25.1" release="150300.3.6.1" arch="noarch" src="noarch/python3-requests-2.25.1-150300.3.6.1.noarch.rpm">
          <filename>python3-requests-2.25.1-150300.3.6.1.noarch.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="s390x" src="s390x/python3-psutil-5.9.1-150300.3.6.1.s390x.rpm">
          <filename>python3-psutil-5.9.1-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.9.1" release="150300.3.6.1" arch="aarch64" src="aarch64/python3-psutil-5.9.1-150300.3.6.1.aarch64.rpm">
          <filename>python3-psutil-5.9.1-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4534</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700723782"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1041742" id="1041742" title="transfiletriggerin and transfiletriggerpostun are not executed by libzypp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212422" id="1212422" title="bad word selection in warning message from executing zypper up on Tumbleweed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216091" id="1216091" title="openQA failures with the update of zypper to 1.14.65 and libzypp  to 17.31.21" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203760" id="1203760" title="dbAccess issues when switching targets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215979" id="1215979" title="Typo in [EN] /etc/zypp/zypp.conf - custom repo variable section" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091)
- Fix comment typo on zypp.conf (bsc#1215979)
- Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742)
- Make sure the old target is deleted before a new one is created (bsc#1203760)
- Return 104 also if info suggests near matches
- Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422)
- commit: Insert a headline to separate output of different rpm scripts (bsc#1041742)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="src" src="src/libzypp-17.31.22-150400.3.43.1.src.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="x86_64" src="x86_64/libzypp-17.31.22-150400.3.43.1.x86_64.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="src" src="src/zypper-1.14.66-150400.3.35.1.src.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="x86_64" src="x86_64/zypper-1.14.66-150400.3.35.1.x86_64.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.66" release="150400.3.35.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.66-150400.3.35.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.66-150400.3.35.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="s390x" src="s390x/libzypp-17.31.22-150400.3.43.1.s390x.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="s390x" src="s390x/zypper-1.14.66-150400.3.35.1.s390x.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.22" release="150400.3.43.1" arch="aarch64" src="aarch64/libzypp-17.31.22-150400.3.43.1.aarch64.rpm">
          <filename>libzypp-17.31.22-150400.3.43.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.66" release="150400.3.35.1" arch="aarch64" src="aarch64/zypper-1.14.66-150400.3.35.1.aarch64.rpm">
          <filename>zypper-1.14.66-150400.3.35.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4649</id>
    <title>Security update for openssl-3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701857052"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207472" id="1207472" title="SLES 15 SP4 - openssl-3 : segmentation faults seen for different commands when ibmca engine is configured into /etc/ssl/openssl3.cnf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194187" id="1194187" title="openssl  broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216922" id="1216922" title="VUL-0: CVE-2023-5678: openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" id="CVE-2023-5678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" type="cve"/>
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).

Bug fixes:

- The default /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Create the two new necessary directores for the above. [bsc#1194187, bsc#1207472]
</description>
    <pkglist>
      <collection>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.42.1" arch="x86_64" src="x86_64/libopenssl3-3.0.8-150400.4.42.1.x86_64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.42.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.0.8" release="150400.4.42.1" arch="src" src="src/openssl-3-3.0.8-150400.4.42.1.src.rpm">
          <filename>openssl-3-3.0.8-150400.4.42.1.src.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.42.1" arch="s390x" src="s390x/libopenssl3-3.0.8-150400.4.42.1.s390x.rpm">
          <filename>libopenssl3-3.0.8-150400.4.42.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.42.1" arch="ppc64le" src="ppc64le/libopenssl3-3.0.8-150400.4.42.1.ppc64le.rpm">
          <filename>libopenssl3-3.0.8-150400.4.42.1.ppc64le.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.42.1" arch="aarch64" src="aarch64/libopenssl3-3.0.8-150400.4.42.1.aarch64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.42.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4467</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700153904"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803" id="CVE-2023-45803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216377" id="1216377" title="VUL-0: CVE-2023-45803: python-urllib3,python36-urllib3:  Request body not stripped after redirect from 303 status changes request method to GET" type="bugzilla"/>
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2023-45803: Fix a request body leak that could occur when
  receiving a 303 HTTP response (bsc#1216377).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="1.25.10" release="150300.4.9.1" arch="src" src="src/python-urllib3-1.25.10-150300.4.9.1.src.rpm">
          <filename>python-urllib3-1.25.10-150300.4.9.1.src.rpm</filename>
        </package>
        <package name="python3-urllib3" epoch="0" version="1.25.10" release="150300.4.9.1" arch="noarch" src="noarch/python3-urllib3-1.25.10-150300.4.9.1.noarch.rpm">
          <filename>python3-urllib3-1.25.10-150300.4.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4644</id>
    <title>Recommended update for psmisc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701780403"/>
    <references/>
    <description>This update for psmisc fixes the following issues:

- Fix version number when building the package
</description>
    <pkglist>
      <collection>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="src" src="src/psmisc-23.0-150000.6.25.1.src.rpm">
          <filename>psmisc-23.0-150000.6.25.1.src.rpm</filename>
        </package>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="x86_64" src="x86_64/psmisc-23.0-150000.6.25.1.x86_64.rpm">
          <filename>psmisc-23.0-150000.6.25.1.x86_64.rpm</filename>
        </package>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="s390x" src="s390x/psmisc-23.0-150000.6.25.1.s390x.rpm">
          <filename>psmisc-23.0-150000.6.25.1.s390x.rpm</filename>
        </package>
        <package name="psmisc" epoch="0" version="23.0" release="150000.6.25.1" arch="aarch64" src="aarch64/psmisc-23.0-150000.6.25.1.aarch64.rpm">
          <filename>psmisc-23.0-150000.6.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4378</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699278945"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208788" id="1208788" title="K8S container crashes after kernel update from 4.12.14-122.144 to 4.12.14-122.147" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210778" id="1210778" title="VUL-0: CVE-2023-31085: kernel: drivers/mtd/ubi/cdev.c has a divide-by-zero error in do_div(sz,mtd-&gt;erasesize)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211307" id="1211307" title="L3: SLES15 SP4: &quot;seq_file: buggy .next function kernfs_seq_next did not update position index&quot; messages still logged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212423" id="1212423" title="Backport linux kernel patches required to support TPU V5lite in Cloud" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212649" id="1212649" title="VUL-0: CVE-2023-46813: kernel: SEV-ES local priv escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213705" id="1213705" title="Kernel update 29917 breaks k3s on 15-SP4 and 15-SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213772" id="1213772" title="Automatic IBRS support still requires STIBP mitigation support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214842" id="1214842" title="kernel NULL pointer dereference from nvme_fc_io_getuuid+0xc/0x30 [nvme_fc]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215104" id="1215104" title="VUL-0: CVE-2023-4015: kernel-source,kernel-source-azure,kernel-source-rt: netfilter: nf_tables use-after-free via nft_immediate_deactivate()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215518" id="1215518" title="VUL-0: CVE-2023-2163: kernel-source-rt,kernel-source-azure,kernel-source: Incorrect verifier pruning in BPF in Linux Kernel &gt;=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memor" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215955" id="1215955" title="sched/cpuset: Bring back cpuset_mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215956" id="1215956" title="SLES 15 SP4 - kernel: fix elf platform string for z16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215957" id="1215957" title="SLES 15 SP5 - kernel: fix elf platform string for z16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215986" id="1215986" title="[MSFT][MANA] mana: Fix some TX processing bugs (CQE Errors , TS0 Bytes, SGe0 GS0 Packet)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216062" id="1216062" title="blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed  before init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216345" id="1216345" title="L3: Packet handling latencies observed with udp traffic ref:_00D1igLOd._5005qXsI8J:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216510" id="1216510" title="s390/cio: fix a memleak in css_alloc_subchannel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216511" id="1216511" title="s390/pci: fix iommu bitmap allocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216512" id="1216512" title="KVM: s390: fix gisa destroy operation might lead to cpu stalls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216621" id="1216621" title="[PATCH] quota: Fix slow quotaoff" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215095" id="1215095" title="VUL-0: CVE-2023-3777: kernel-source-azure,kernel-source,kernel-source-rt: netfilter: nf_tables use-after-free via nf_tables_delrule()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" id="CVE-2023-31085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" id="CVE-2023-39193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" id="CVE-2023-5178" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" id="CVE-2023-2163" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" id="CVE-2023-34324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" id="CVE-2023-39189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" id="CVE-2023-3777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518)
- CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).
- CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046)
- CVE-2023-5178: Fixed an UAF in queue intialization setup.  (bsc#1215768)
- CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd-&gt;erasesize) that could cause a local DoS. (bsc#1210778)
- CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095)

The following non-security bugs were fixed:

- 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes).
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes).
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes).
- ALSA: hda/realtek: Change model for Intel RVP board (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes).
- ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- ata: libata-core: Do not register PM operations for SAS ports (git-fixes).
- ata: libata-core: Fix ata_port_request_pm() locking (git-fixes).
- ata: libata-core: Fix port and device removal (git-fixes).
- ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes).
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes).
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062).
- blk-cgroup: support to track if policy is online (bsc#1216062).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes).
- Bluetooth: Reject connection with the device which has same BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- bpf: propagate precision in ALU/ALU64 operations (git-fixes).
- bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes).
- bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git-fixes).
- cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307).
- cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955).
- clk: tegra: fix error return case for recalc_rate (git-fixes).
- counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git-fixes).
- crypto: qat - add fw_counters debugfs file (PED-6401).
- crypto: qat - add heartbeat counters check (PED-6401).
- crypto: qat - add heartbeat feature (PED-6401).
- crypto: qat - add internal timer for qat 4xxx (PED-6401).
- crypto: qat - add measure clock frequency (PED-6401).
- crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401).
- crypto: qat - add qat_zlib_deflate (PED-6401).
- crypto: qat - add support for 402xx devices (PED-6401).
- crypto: qat - change value of default idle filter (PED-6401).
- crypto: qat - delay sysfs initialization (PED-6401).
- crypto: qat - do not export adf_init_admin_pm() (PED-6401).
- crypto: qat - drop log level of msg in get_instance_node() (PED-6401).
- crypto: qat - drop obsolete heartbeat interface (PED-6401).
- crypto: qat - drop redundant adf_enable_aer() (PED-6401).
- crypto: qat - expose pm_idle_enabled through sysfs (PED-6401).
- crypto: qat - extend buffer list logic interface (PED-6401).
- crypto: qat - extend configuration for 4xxx (PED-6401).
- crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401).
- crypto: qat - fix concurrency issue when device state changes (PED-6401).
- crypto: qat - fix crypto capability detection for 4xxx (PED-6401).
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401).
- crypto: qat - Include algapi.h for low-level Crypto API (PED-6401).
- crypto: qat - make fw images name constant (PED-6401).
- crypto: qat - make state machine functions static (PED-6401).
- crypto: qat - move dbgfs init to separate file (PED-6401).
- crypto: qat - move returns to default case (PED-6401).
- crypto: qat - refactor device restart logic (PED-6401).
- crypto: qat - refactor fw config logic for 4xxx (PED-6401).
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401).
- crypto: qat - Remove unused function declarations (PED-6401).
- crypto: qat - replace state machine calls (PED-6401).
- crypto: qat - replace the if statement with min() (PED-6401).
- crypto: qat - set deprecated capabilities as reserved (PED-6401).
- crypto: qat - unmap buffer before free for DH (PED-6401).
- crypto: qat - unmap buffers before free for RSA (PED-6401).
- crypto: qat - update slice mask for 4xxx devices (PED-6401).
- crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401).
- dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git-fixes).
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes).
- dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes).
- Documentation: qat: change kernel version (PED-6401).
- Documentation: qat: rewrite description (PED-6401).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git-fixes).
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes).
- drm/amd/display: Do not check registers, if using AUX BL control (git-fixes).
- drm/amd/display: Do not set dpms_off for seamless boot (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers (git-fixes).
- drm/msm/dp: do not reinitialize phy unless retry during link training (git-fixes).
- drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git-fixes).
- drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes).
- drm/msm/dsi: skip the wait for video mode done if not applicable (git-fixes).
- drm/vmwgfx: fix typo of sizeof argument (git-fixes).
- firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes).
- firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes).
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git-fixes).
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes).
- gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes).
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git-fixes).
- HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes).
- HID: sony: Fix a potential memory leak in sony_probe() (git-fixes).
- HID: sony: remove duplicate NULL check before calling usb_free_urb() (git-fixes).
- i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes).
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git-fixes).
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git-fixes).
- i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes).
- i2c: mux: gpio: Replace custom acpi_get_local_address() (git-fixes).
- i2c: npcm7xx: Fix callback completion ordering (git-fixes).
- IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes)
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes).
- iio: pressure: bmp280: Fix NULL pointer exception (git-fixes).
- iio: pressure: dps310: Adjust Timeout Settings (git-fixes).
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count == 1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- Input: powermate - fix use-after-free in powermate_config_complete (git-fixes).
- Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- kabi: blkcg_policy_data fix KABI (bsc#1216062).
- kabi: workaround for enum nft_trans_phase (bsc#1215104).
- kprobes: Prohibit probing on CFI preamble symbol (git-fixes).
- KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512).
- KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git-fixes).
- KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772).
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes).
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772).
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772).
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772).
- KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes).
- KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes).
- leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes).
- mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705).
- mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status (git-fixes).
- net: mana: Fix oversized sge0 for GSO packets (bsc#1215986).
- net: mana: Fix TX CQE error handling (bsc#1215986).
- net: nfc: llcp: Add lock when modifying device list (git-fixes).
- net: rfkill: gpio: prevent value glitch during probe (git-fixes).
- net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345).
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345).
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git-fixes).
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git-fixes).
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes).
- net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git-fixes).
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes).
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes).
- nfc: nci: assert requested protocol is valid (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git-fixes).
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes).
- nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842).
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes).
- pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes).
- platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git-fixes).
- platform/x86: think-lmi: Fix reference leak (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes).
- power: supply: ucs1002: fix error code in ucs1002_get_property() (git-fixes).
- r8152: check budget for r8152_poll() (git-fixes).
- RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes)
- RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes)
- RDMA/core: Require admin capabilities to set system parameters (git-fixes)
- RDMA/cxgb4: Check skb value for failure to allocate (git-fixes)
- RDMA/mlx5: Fix NULL string error (git-fixes)
- RDMA/siw: Fix connection failure handling (git-fixes)
- RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes)
- RDMA/uverbs: Fix typo of sizeof argument (git-fixes)
- regmap: fix NULL deref on lookup (git-fixes).
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes).
- ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes).
- ring-buffer: Do not attempt to read past &quot;commit&quot; (git-fixes).
- ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes).
- ring-buffer: Update &quot;shortest_full&quot; in polling (git-fixes).
- s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957).
- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510).
- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- sched/cpuset: Bring back cpuset_mutex (bsc#1215955).
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)).
- sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)).
- serial: 8250_port: Check IRQ data before use (git-fixes).
- soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git-fixes).
- spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes).
- spi: stm32: add a delay before SPI disable (git-fixes).
- spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes).
- spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes).
- tracing: Have current_trace inc the trace array ref count (git-fixes).
- tracing: Have event inject files inc the trace array ref count (git-fixes).
- tracing: Have option files inc the trace array ref count (git-fixes).
- tracing: Have tracing_max_latency inc the trace array ref count (git-fixes).
- tracing: Increase trace array ref count on enable and filter files (git-fixes).
- tracing: Make trace_marker{,_raw} stream-like (git-fixes).
- usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes).
- usb: dwc3: Soft reset phy on probe for host (git-fixes).
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git-fixes).
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes).
- usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes).
- usb: musb: Modify the &quot;HWVers&quot; register address (git-fixes).
- usb: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes).
- usb: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes).
- usb: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git-fixes).
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes).
- vmbus_testing: fix wrong python syntax for integer value comparison (git-fixes).
- vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes).
- watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes).
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (git-fixes).
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes).
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git-fixes).
- wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes).
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772).
- x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772).
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772).
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772).
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772).
- x86/cpu: Support AMD Automatic IBRS (bsc#1213772).
- x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649).
- x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649).
- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- xen-netback: use default TX queue size for vifs (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.97.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.97.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.97.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.97.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.97.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.97.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.97.1.150400.24.44.2" arch="src" src="src/kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.97.1.150400.24.44.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.97.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.97.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.97.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.97.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.97.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.97.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.97.1.150400.24.44.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4503</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700569611"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38473" id="CVE-2023-38473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38473" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38470" id="CVE-2023-38470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38470" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216419" id="1216419" title="VUL-0: CVE-2023-38473: avahi,avahi-glib2,avahi-qt5: Reachable assertion in avahi_alternative_host_name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215947" id="1215947" title="VUL-0: CVE-2023-38470: avahi: Reachable assertion in avahi_escape_label" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947).
- CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="src" src="src/avahi-0.8-150400.7.10.1.src.rpm">
          <filename>avahi-0.8-150400.7.10.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.10.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.10.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.10.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.10.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.10.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.10.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/avahi-0.8-150400.7.10.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.10.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.10.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.10.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.10.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.10.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.10.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.10.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.10.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.10.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.10.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4591</id>
    <title>Security update for squashfs</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701091972"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4646" id="CVE-2015-4646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4646" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4645" id="CVE-2015-4645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4645" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41072" id="CVE-2021-41072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41072" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40153" id="CVE-2021-40153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40153" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189936" id="1189936" title="VUL-0: CVE-2021-40153: squashfs: unvalidated filepaths allow writing outside of destination" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190531" id="1190531" title="VUL-0: CVE-2021-41072: squashfs: unvalidated symlinks allow writing outside of destination" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=935380" id="935380" title="VUL-1: CVE-2015-4645,CVE-2015-4646: squashfs: Multiple stack overflows in squashfs-tools" type="bugzilla"/>
    </references>
    <description>This update for squashfs fixes the following issues:

- CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools (bsc#935380)
- CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination (bsc#1189936)
- CVE-2021-41072: Fixed an issue where an attacker might have been
  able to write a file outside the destination directory via a
  symlink (bsc#1190531).

update to 4.6.1:

  * Race condition which can cause corruption of the &quot;fragment
    table&quot; fixed.  This is a regression introduced in August 2022,
    and it has been seen when tailend packing is used (-tailends option).
  * Fix build failure when the tools are being built without
    extended attribute (XATTRs) support.
  * Fix XATTR error message when an unrecognised prefix is
    found
  * Fix incorrect free of pointer when an unrecognised XATTR
    prefix is found.
  * Major improvements in extended attribute handling,
    pseudo file handling, and miscellaneous new options and
    improvements
  * Extended attribute handling improved in Mksquashfs and
    Sqfstar
  * New Pseudo file xattr definition to add extended
    attributes to files.
  * New xattrs-add Action to add extended attributes to files
  * Extended attribute handling improved in Unsquashfs
  * Other major improvements
  * Unsquashfs can now output Pseudo files to standard out.
  * Mksquashfs can now input Pseudo files from standard in.
  * Squashfs filesystems can now be converted (different
    block size compression etc) without unpacking to an
    intermediate filesystem or mounting, by piping the output of
    Unsquashfs to Mksquashfs.
  * Pseudo files are now supported by Sqfstar.
  * &quot;Non-anchored&quot; excludes are now supported by Unsquashfs.

update to 4.5.1 (bsc#1190531, CVE-2021-41072):

  * This release adds Manpages for Mksquashfs(1), Unsquashfs(1),
    Sqfstar(1) and Sqfscat(1).
  * The -help text output from the utilities has been improved
    and extended as well (but the Manpages are now more
    comprehensive).
  * CVE-2021-41072 which is a writing outside of destination
    exploit, has been fixed.
  * The number of hard-links in the filesystem is now also
    displayed by Mksquashfs in the output summary.
  * The number of hard-links written by Unsquashfs is now
    also displayed in the output summary.
  * Unsquashfs will now write to a pre-existing destination
    directory, rather than aborting.
  * Unsquashfs now allows &quot;.&quot; to used as the destination, to
    extract to the current directory.
  * The Unsquashfs progress bar now tracks empty files and
    hardlinks, in addition to data blocks.
  * -no-hardlinks option has been implemented for Sqfstar.
  * More sanity checking for &quot;corrupted&quot; filesystems, including
    checks for multiply linked directories and directory loops.
  * Options that may cause filesystems to be unmountable have
    been moved into a new &quot;experts&quot; category in the Mksquashfs
    help text (and Manpage).
  * Maximum cpiostyle filename limited to PATH_MAX.  This
    prevents attempts to overflow the stack, or cause system
    calls to fail with a too long pathname.
  * Don't always use &quot;max open file limit&quot; when calculating
    length of queues, as a very large file limit can cause
    Unsquashfs to abort.  Instead use the smaller of max open
    file limit and cache size.
  * Fix Mksquashfs silently ignoring Pseudo file definitions
    when appending.
  * Don't abort if no XATTR support has been built in, and
    there's XATTRs in the filesystem.  This is a regression
    introduced in 2019 in Version 4.4.
  * Fix duplicate check when the last file block is sparse.

update to 4.5:

  * Mksquashfs now supports &quot;Actions&quot;.
  * New sqfstar command which will create a Squashfs image from a tar archive.
  * Tar style handling of source pathnames in Mksquashfs.
  * Cpio style handling of source pathnames in Mksquashfs.
  * New option to throttle the amount of CPU and I/O.
  * Mksquashfs now allows no source directory to be specified.
  * New Pseudo file &quot;R&quot; definition which allows a Regular file
    o be created with data stored within the Pseudo file.
  * Symbolic links are now followed in extract files
  * Unsquashfs now supports &quot;exclude&quot; files.
  * Max depth traversal option added.
  * Unsquashfs can now output a &quot;Pseudo file&quot; representing the
    input Squashfs filesystem.
  * New -one-file-system option in Mksquashfs.
  * New -no-hardlinks option in Mksquashfs.
  * Exit code in Unsquashfs changed to distinguish between
    non-fatal errors (exit 2), and fatal errors (exit 1).
  * Xattr id count added in Unsquashfs &quot;-stat&quot; output.
  * Unsquashfs &quot;write outside directory&quot; exploit fixed.
  * Error handling in Unsquashfs writer thread fixed.
  * Fix failure to truncate destination if appending aborted.
  * Prevent Mksquashfs reading the destination file. 
</description>
    <pkglist>
      <collection>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="src" src="src/squashfs-4.6.1-150300.3.3.1.src.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="x86_64" src="x86_64/squashfs-4.6.1-150300.3.3.1.x86_64.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="s390x" src="s390x/squashfs-4.6.1-150300.3.3.1.s390x.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.s390x.rpm</filename>
        </package>
        <package name="squashfs" epoch="0" version="4.6.1" release="150300.3.3.1" arch="aarch64" src="aarch64/squashfs-4.6.1-150300.3.3.1.aarch64.rpm">
          <filename>squashfs-4.6.1-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4357</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699009501"/>
    <references/>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

kubevirt is rebuilt against the current GO security release.

- Set cache mode on hotplugged disks
- Delete VMI prior to NFS server pod in tests
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.23.1" arch="src" src="src/kubevirt-0.54.0-150400.3.23.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.23.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.23.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.23.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.23.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.23.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.23.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4440</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699989191"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215278" id="1215278" title="VUL-0: EMBARGOED: CVE-2023-23583: ucode-intel: Intel CPU can be made to deadlock or privilege escalate" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" id="CVE-2023-23583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278)
- CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20231113" release="150200.32.1" arch="src" src="src/ucode-intel-20231113-150200.32.1.src.rpm">
          <filename>ucode-intel-20231113-150200.32.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20231113" release="150200.32.1" arch="x86_64" src="x86_64/ucode-intel-20231113-150200.32.1.x86_64.rpm">
          <filename>ucode-intel-20231113-150200.32.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4370</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699260710"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2908" id="CVE-2023-2908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2908" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18768" id="CVE-2020-18768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18768" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433" id="CVE-2023-25433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26966" id="CVE-2023-26966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" id="CVE-2023-38288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3316" id="CVE-2023-3316" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3316" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3576" id="CVE-2023-3576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38289" id="CVE-2023-38289" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38289" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3618" id="CVE-2023-3618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3618" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213589" id="1213589" title="VUL-0: CVE-2023-38289: tiff: integer overflow in tiffcp.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214574" id="1214574" title="VUL-0: CVE-2020-18768: tiff: heap buffer overflow in _TIFFmemcpy in tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212888" id="1212888" title="VUL-0: CVE-2023-2908: tiff: null pointer dereference in tif_dir.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212535" id="1212535" title="VUL-0: CVE-2023-3316: tiff: null pointer dereference in TIFFClose()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213273" id="1213273" title="VUL-1: CVE-2023-3576: tiff: memory leak in tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213274" id="1213274" title="VUL-0: CVE-2023-3618: tiff: NULL pointer dereference in Fax3Encode() in libtiff/tif_fax3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213590" id="1213590" title="VUL-0: CVE-2023-38288: tiff: potential integer overflow in raw2tiff.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212881" id="1212881" title="VUL-0: CVE-2023-26966: tiff: Buffer Overflow in uv_encode()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212883" id="1212883" title="VUL-0: CVE-2023-25433: tiff: Buffer Overflow via /libtiff/tools/tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff
  (bsc#1213589).
- CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590).
- CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273).
- CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574).
- CVE-2023-26966: Fixed an out of bounds read when transforming a
  little-endian file to a big-endian output (bsc#1212881)
- CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3
  files (bsc#1213274).
- CVE-2023-2908: Fixed an undefined behavior issue when doing pointer
  arithmetic on a NULL pointer (bsc#1212888).
- CVE-2023-3316: Fixed a NULL pointer dereference while opening a file
  in an inaccessible path (bsc#1212535).
- CVE-2023-25433: Fixed a buffer overflow in tiffcrop (bsc#1212883).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.32.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.32.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.32.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.32.1" arch="src" src="src/tiff-4.0.9-150000.45.32.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.32.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.32.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.32.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.32.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.32.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.32.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4446</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700029240"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216670" id="1216670" title="open-vm-tools 12.3.5 has been released - please rebase" type="bugzilla"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Update to 12.3.5 (bsc#1216670)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.3.5" release="150300.46.1" arch="x86_64" src="x86_64/libvmtools0-12.3.5-150300.46.1.x86_64.rpm">
          <filename>libvmtools0-12.3.5-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.5" release="150300.46.1" arch="src" src="src/open-vm-tools-12.3.5-150300.46.1.src.rpm">
          <filename>open-vm-tools-12.3.5-150300.46.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.3.5" release="150300.46.1" arch="x86_64" src="x86_64/open-vm-tools-12.3.5-150300.46.1.x86_64.rpm">
          <filename>open-vm-tools-12.3.5-150300.46.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4416</id>
    <title>Security update for containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1699893727"/>
    <references/>
    <description>
This update for containerized-data-importer fixes the following issue:

- rebuild with current go compiler
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.20.2" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.20.2.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.20.2.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.20.2" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.20.2.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.20.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4351</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1698941496"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211307" id="1211307" title="SLES15 SP4: &quot;seq_file: buggy .next function kernfs_seq_next did not update position index&quot; messages still logged" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212423" id="1212423" title="Backport linux kernel patches required to support TPU V5lite in Cloud" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213772" id="1213772" title="Automatic IBRS support still requires STIBP mitigation support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215955" id="1215955" title="sched/cpuset: Bring back cpuset_mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216062" id="1216062" title="blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed  before init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216512" id="1216512" title="KVM: s390: fix gisa destroy operation might lead to cpu stalls" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" id="CVE-2023-3777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3777" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46813" id="CVE-2023-46813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46813" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" id="CVE-2023-31085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45862" id="CVE-2023-45862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" id="CVE-2023-5178" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5178" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" id="CVE-2023-2163" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2163" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" id="CVE-2023-34324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" id="CVE-2023-39189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39189" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095)
- CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1212649).
- CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd-&gt;erasesize) that could cause a local DoS. (bsc#1210778)
- CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051)
- CVE-2023-5178: Fixed an UAF in queue intialization setup.  (bsc#1215768)
- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518)
- CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).
- CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046)

The following non-security bugs were fixed:

- 9p: virtio: make sure 'offs' is initialized in zc_request (git-fixes).
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (git-fixes).
- ALSA: hda/realtek: Change model for Intel RVP board (git-fixes).
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (git-fixes).
- ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn (git-fixes).
- Bluetooth: Reject connection with the device which has same BD_ADDR (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- Documentation: qat: change kernel version (PED-6401).
- Documentation: qat: rewrite description (PED-6401).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (git-fixes).
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (git-fixes).
- Fix metadata references
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (git-fixes).
- HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (git-fixes).
- HID: sony: Fix a potential memory leak in sony_probe() (git-fixes).
- HID: sony: remove duplicate NULL check before calling usb_free_urb() (git-fixes).
- IB/mlx4: Fix the size of a buffer in add_port_entries() (git-fixes)
- Input: goodix - ensure int GPIO is in input for gpio_count == 1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- Input: powermate - fix use-after-free in powermate_config_complete (git-fixes).
- Input: psmouse - fix fast_reconnect function for PS/2 mode (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- KVM: SVM: Do not kill SEV guest if SMAP erratum triggers in usermode (git-fixes).
- KVM: s390: fix gisa destroy operation might lead to cpu stalls (git-fixes bsc#1216512).
- KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs is changed (git-fixes).
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid() (git-fixes).
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (bsc#1213772).
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (bsc#1213772).
- KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772).
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful (bsc#1213772).
- KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes).
- RDMA/cma: Fix truncation compilation warning in make_cma_ports (git-fixes)
- RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (git-fixes)
- RDMA/core: Require admin capabilities to set system parameters (git-fixes)
- RDMA/cxgb4: Check skb value for failure to allocate (git-fixes)
- RDMA/mlx5: Fix NULL string error (git-fixes)
- RDMA/siw: Fix connection failure handling (git-fixes)
- RDMA/srp: Do not call scsi_done() from srp_abort() (git-fixes)
- RDMA/uverbs: Fix typo of sizeof argument (git-fixes)
- Revert &quot;pinctrl: avoid unsafe code pattern in find_pinctrl()&quot; (git-fixes).
- Revert &quot;tty: n_gsm: fix UAF in gsm_cleanup_mux&quot; (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes).
- ata: libata-core: Do not register PM operations for SAS ports (git-fixes).
- ata: libata-core: Fix ata_port_request_pm() locking (git-fixes).
- ata: libata-core: Fix port and device removal (git-fixes).
- ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes).
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (git-fixes).
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (bsc#1216062).
- blk-cgroup: support to track if policy is online (bsc#1216062).
- bpf: propagate precision in ALU/ALU64 operations (git-fixes).
- bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes).
- bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (git-fixes).
- cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (bsc#1215955).
- cgroup: Remove duplicates in cgroup v1 tasks file (bsc#1211307).
- clk: tegra: fix error return case for recalc_rate (git-fixes).
- counter: microchip-tcb-capture: Fix the use of internal GCLK logic (git-fixes).
- crypto: qat - Include algapi.h for low-level Crypto API (PED-6401).
- crypto: qat - Remove unused function declarations (PED-6401).
- crypto: qat - add fw_counters debugfs file (PED-6401).
- crypto: qat - add heartbeat counters check (PED-6401).
- crypto: qat - add heartbeat feature (PED-6401).
- crypto: qat - add internal timer for qat 4xxx (PED-6401).
- crypto: qat - add measure clock frequency (PED-6401).
- crypto: qat - add missing function declaration in adf_dbgfs.h (PED-6401).
- crypto: qat - add qat_zlib_deflate (PED-6401).
- crypto: qat - add support for 402xx devices (PED-6401).
- crypto: qat - change value of default idle filter (PED-6401).
- crypto: qat - delay sysfs initialization (PED-6401).
- crypto: qat - do not export adf_init_admin_pm() (PED-6401).
- crypto: qat - drop log level of msg in get_instance_node() (PED-6401).
- crypto: qat - drop obsolete heartbeat interface (PED-6401).
- crypto: qat - drop redundant adf_enable_aer() (PED-6401).
- crypto: qat - expose pm_idle_enabled through sysfs (PED-6401).
- crypto: qat - extend buffer list logic interface (PED-6401).
- crypto: qat - extend configuration for 4xxx (PED-6401).
- crypto: qat - fix apply custom thread-service mapping for dc service (PED-6401).
- crypto: qat - fix concurrency issue when device state changes (PED-6401).
- crypto: qat - fix crypto capability detection for 4xxx (PED-6401).
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (PED-6401).
- crypto: qat - make fw images name constant (PED-6401).
- crypto: qat - make state machine functions static (PED-6401).
- crypto: qat - move dbgfs init to separate file (PED-6401).
- crypto: qat - move returns to default case (PED-6401).
- crypto: qat - refactor device restart logic (PED-6401).
- crypto: qat - refactor fw config logic for 4xxx (PED-6401).
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (PED-6401).
- crypto: qat - replace state machine calls (PED-6401).
- crypto: qat - replace the if statement with min() (PED-6401).
- crypto: qat - set deprecated capabilities as reserved (PED-6401).
- crypto: qat - unmap buffer before free for DH (PED-6401).
- crypto: qat - unmap buffers before free for RSA (PED-6401).
- crypto: qat - update slice mask for 4xxx devices (PED-6401).
- crypto: qat - use kfree_sensitive instead of memset/kfree() (PED-6401).
- dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq (git-fixes).
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (git-fixes).
- dmaengine: stm32-mdma: abort resume if no ongoing transfer (git-fixes).
- drm/amd/display: Do not check registers, if using AUX BL control (git-fixes).
- drm/amd/display: Do not set dpms_off for seamless boot (git-fixes).
- drm/amdgpu: Handle null atom context in VBIOS info ioctl (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers (git-fixes).
- drm/msm/dp: do not reinitialize phy unless retry during link training (git-fixes).
- drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (git-fixes).
- drm/msm/dsi: fix irq_of_parse_and_map() error checking (git-fixes).
- drm/msm/dsi: skip the wait for video mode done if not applicable (git-fixes).
- drm/vmwgfx: fix typo of sizeof argument (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (git-fixes).
- firmware: arm_ffa: Do not set the memory region attributes for MEM_LEND (git-fixes).
- firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (git-fixes).
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (git-fixes).
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (git-fixes).
- gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes).
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- i2c: i801: unregister tco_pdev in i801_probe() error path (git-fixes).
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (git-fixes).
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (git-fixes).
- i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes).
- i2c: mux: gpio: Replace custom acpi_get_local_address() (git-fixes).
- i2c: npcm7xx: Fix callback completion ordering (git-fixes).
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe (git-fixes).
- iio: pressure: bmp280: Fix NULL pointer exception (git-fixes).
- iio: pressure: dps310: Adjust Timeout Settings (git-fixes).
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (git-fixes).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- kabi: blkcg_policy_data fix KABI (bsc#1216062).
- kabi: workaround for enum nft_trans_phase (bsc#1215104).
- kprobes: Prohibit probing on CFI preamble symbol (git-fixes).
- leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes).
- mm, memcg: reconsider kmem.limit_in_bytes deprecation (bsc#1208788 bsc#1213705).
- mmc: core: Capture correct oemid-bits for eMMC cards (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are successful (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status (git-fixes).
- net/sched: fix netdevice reference leaks in attach_default_qdiscs() (git-fixes).
- net: mana: Fix TX CQE error handling (bsc#1215986).
- net: mana: Fix oversized sge0 for GSO packets (bsc#1215986).
- net: nfc: llcp: Add lock when modifying device list (git-fixes).
- net: rfkill: gpio: prevent value glitch during probe (git-fixes).
- net: sched: add barrier to fix packet stuck problem for lockless qdisc (bsc#1216345).
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1216345).
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (git-fixes).
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (git-fixes).
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (git-fixes).
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails (git-fixes).
- nfc: nci: assert requested protocol is valid (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (git-fixes).
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (git-fixes).
- nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842).
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl() (git-fixes).
- pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes).
- platform/surface: platform_profile: Propagate error if profile registration fails (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events (git-fixes).
- platform/x86: think-lmi: Fix reference leak (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B (git-fixes).
- power: supply: ucs1002: fix error code in ucs1002_get_property() (git-fixes).
- quota: Fix slow quotaoff (bsc#1216621).
- r8152: check budget for r8152_poll() (git-fixes).
- regmap: fix NULL deref on lookup (git-fixes).
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node (git-fixes).
- ring-buffer: Avoid softlockup in ring_buffer_resize() (git-fixes).
- ring-buffer: Do not attempt to read past &quot;commit&quot; (git-fixes).
- ring-buffer: Fix bytes info in per_cpu buffer stats (git-fixes).
- ring-buffer: Update &quot;shortest_full&quot; in polling (git-fixes).
- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes bsc#1216510).
- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956 LTC#203788 bsc#1215957).
- sched/cpuset: Bring back cpuset_mutex (bsc#1215955).
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (git fixes (sched)).
- sched/rt: Fix live lock between select_fallback_rq() and RT push (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes (sched)).
- serial: 8250_port: Check IRQ data before use (git-fixes).
- soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (git-fixes).
- spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes).
- spi: stm32: add a delay before SPI disable (git-fixes).
- spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (git-fixes).
- spi: sun6i: reduce DMA RX transfer width to single byte (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge (git-fixes).
- tracing: Have current_trace inc the trace array ref count (git-fixes).
- tracing: Have event inject files inc the trace array ref count (git-fixes).
- tracing: Have option files inc the trace array ref count (git-fixes).
- tracing: Have tracing_max_latency inc the trace array ref count (git-fixes).
- tracing: Increase trace array ref count on enable and filter files (git-fixes).
- tracing: Make trace_marker{,_raw} stream-like (git-fixes).
- usb: cdnsp: Fixes issue with dequeuing not queued requests (git-fixes).
- usb: dwc3: Soft reset phy on probe for host (git-fixes).
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (git-fixes).
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes).
- usb: musb: Get the musb_qh poniter after musb_giveback (git-fixes).
- usb: musb: Modify the &quot;HWVers&quot; register address (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd low when exiting mode (git-fixes).
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes).
- vmbus_testing: fix wrong python syntax for integer value comparison (git-fixes).
- vringh: do not use vringh_kiov_advance() in vringh_iov_xfer() (git-fixes).
- watchdog: iTCO_wdt: No need to stop the timer in probe (git-fixes).
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes).
- wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (git-fixes).
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (git-fixes).
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (git-fixes).
- wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len (git-fixes).
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772).
- x86/cpu, kvm: Add the Null Selector Clears Base feature (bsc#1213772).
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature (bsc#1213772).
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (bsc#1213772).
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (bsc#1213772).
- x86/cpu: Support AMD Automatic IBRS (bsc#1213772).
- x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1212649).
- x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1212649).
- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- xen-netback: use default TX queue size for vifs (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.59.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.59.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.59.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.59.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.59.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.59.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4477</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700212905"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216010" id="1216010" title="grub2 fails to identify recent ext4 filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216253" id="1216253" title="SLES15sp5: fadump is not working with 1GB/2GB/4GB LMB[P10]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216075" id="1216075" title="[SLES16-ALP][Agama]: unable to enter passphrase with LVM and encryption enabled, getting error at grub&quot;error: ../../grub-core/disk/ieee1275/ofdisk.c:971:failure reading sector&quot;" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix failure to identify recent ext4 filesystem (bsc#1216010)
- Fix reading files from btrfs with &quot;implicit&quot; holes
- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) 
- Fix detection of encrypted disk's uuid in powerpc (bsc#1216075)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.41.1" arch="src" src="src/grub2-2.06-150400.11.41.1.src.rpm">
          <filename>grub2-2.06-150400.11.41.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.41.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.41.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.41.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.41.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.41.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.41.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.41.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.41.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.41.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.41.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.41.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.41.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.41.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.41.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.41.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.41.1" arch="s390x" src="s390x/grub2-2.06-150400.11.41.1.s390x.rpm">
          <filename>grub2-2.06-150400.11.41.1.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150400.11.41.1" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150400.11.41.1.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150400.11.41.1.s390x.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.41.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.41.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.41.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.41.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.41.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.41.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4445</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700029164"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216060" id="1216060" title="SELinux preventing Keepalived stats file - &quot;Unable to change file permission of /tmp/keepalived.stats - errno 13 (Permission denied)&quot;" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Update to version 20230511+git5.54d165ea
- Allow keepalived to manage its tmp files (bsc#1216060)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git5.54d165ea" release="150400.4.15.1" arch="noarch" src="noarch/selinux-policy-20230511+git5.54d165ea-150400.4.15.1.noarch.rpm">
          <filename>selinux-policy-20230511+git5.54d165ea-150400.4.15.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git5.54d165ea" release="150400.4.15.1" arch="src" src="src/selinux-policy-20230511+git5.54d165ea-150400.4.15.1.src.rpm">
          <filename>selinux-policy-20230511+git5.54d165ea-150400.4.15.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git5.54d165ea" release="150400.4.15.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git5.54d165ea-150400.4.15.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git5.54d165ea-150400.4.15.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git5.54d165ea" release="150400.4.15.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git5.54d165ea-150400.4.15.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git5.54d165ea-150400.4.15.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4726</id>
    <title>Recommended update for podman</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702379487"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210299" id="1210299" title="VUL-0: podman: go1.18 is EOL" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

- Build against latest stable Go version (bsc#1210299)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.19.1" arch="src" src="src/podman-4.4.4-150400.4.19.1.src.rpm">
          <filename>podman-4.4.4-150400.4.19.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.19.1" arch="x86_64" src="x86_64/podman-4.4.4-150400.4.19.1.x86_64.rpm">
          <filename>podman-4.4.4-150400.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="podman-cni-config" epoch="0" version="4.4.4" release="150400.4.19.1" arch="noarch" src="noarch/podman-cni-config-4.4.4-150400.4.19.1.noarch.rpm">
          <filename>podman-cni-config-4.4.4-150400.4.19.1.noarch.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.19.1" arch="s390x" src="s390x/podman-4.4.4-150400.4.19.1.s390x.rpm">
          <filename>podman-4.4.4-150400.4.19.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.19.1" arch="aarch64" src="aarch64/podman-4.4.4-150400.4.19.1.aarch64.rpm">
          <filename>podman-4.4.4-150400.4.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4458</id>
    <title>Security update for gcc13</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700142018"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216664" id="1216664" title="L3: SAP ASE DB crash after libstdc++6 update (libstdc++6-13.2.1+git7813-150000.1.3.3.x86_64)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215427" id="1215427" title="GCC13 fails to compile some packages with error: unrecognizable insn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214052" id="1214052" title="VUL-0: CVE-2023-4039: gcc: stack protector does not protect C99 VLAs on Aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212101" id="1212101" title="Firefox 114.0 and 114.0.1 immediately crashes at startup." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214460" id="1214460" title="s390x crosscompiler does not seem functional, missing -lgcc, impeding upstream QEMU work (tcg tests)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213915" id="1213915" title="ppc64le Kernel panic - illegal instruction (4) at 7fffb6a4f874 nip 7fffb6a4f874 lr 7fffb6a4380c code 1 in ld64.so.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211427" id="1211427" title="gcc: have libstdc++6-devel-gccZZ own directories it populates" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210557" id="1210557" title="compilation of network/psi+ is stuck in cc1plus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206480" id="1206480" title="GCC13 fails on armv6/7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206684" id="1206684" title="Segmentation fault with zypper-1.14.58-1.2.aarch64" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" id="CVE-2023-4039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-153" id="PED-153" title="https://jira.suse.com/browse/PED-153" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-252" id="PED-252" title="https://jira.suse.com/browse/PED-252" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-253" id="PED-253" title="https://jira.suse.com/browse/PED-253" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2005" id="PED-2005" title="https://jira.suse.com/browse/PED-2005" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6584" id="PED-6584" title="https://jira.suse.com/browse/PED-6584" type="jira"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP4 and SP5, and provided in the &quot;Development Tools&quot; module.

The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.

To use gcc13 compilers use:

- install &quot;gcc13&quot; or &quot;gcc13-c++&quot; or one of the other &quot;gcc13-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

        https://gcc.gnu.org/gcc-13/changes.html


Detailed changes:


* CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable
  length stack allocations.  (bsc#1214052)

- Work around third party app crash during C++ standard library initialization.  [bsc#1216664]
- Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427)
- Bump included newlib to version 4.3.0.
- Update to GCC trunk head (r13-5254-g05b9868b182bb9)
- Redo floatn fixinclude pick-up to simply keep what is there.
- Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

- Also handle -static-pie in the default-PIE specs
- Fixed missed optimization in Skia resulting in Firefox crashes when
  building with LTO.  [bsc#1212101]
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]
- Add new x86-related intrinsics (amxcomplexintrin.h).
- RISC-V: Add support for inlining subword atomic operations
- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.
- Add cross-bpf packages.  See https://gcc.gnu.org/wiki/BPFBackEnd
  for the general state of BPF with GCC.
- Add bootstrap conditional to allow --without=bootstrap to be
  specified to speed up local builds for testing.
- Bump included newlib to version 4.3.0. 
- Also package libhwasan_preinit.o on aarch64.
- Configure external timezone database provided by the timezone
  package.  Make libstdc++6 recommend timezone to get a fully
  working std::chrono.  Install timezone when running the testsuite.
- Package libhwasan_preinit.o on x86_64.
- Fixed unwinding on aarch64 with pointer signing.  [bsc#1206684]
- Enable PRU flavour for gcc13
- update floatn fixinclude pickup to check each header separately (bsc#1206480)
- Redo floatn fixinclude pick-up to simply keep what is there. 
- Bump libgo SONAME to libgo22.
- Do not package libhwasan for biarch (32-bit architecture)
  as the extension depends on 64-bit pointers.
- Adjust floatn fixincludes guard to work with SLE12 and earlier
  SLE15.
- Depend on at least LLVM 13 for GCN cross compiler.
- Update embedded newlib to version 4.2.0
- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="src" src="src/gcc13-13.2.1+git7813-150000.1.6.1.src.rpm">
          <filename>gcc13-13.2.1+git7813-150000.1.6.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="x86_64" src="x86_64/libgcc_s1-13.2.1+git7813-150000.1.6.1.x86_64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.6.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="x86_64" src="x86_64/libstdc++6-13.2.1+git7813-150000.1.6.1.x86_64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.6.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="s390x" src="s390x/libgcc_s1-13.2.1+git7813-150000.1.6.1.s390x.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.6.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="s390x" src="s390x/libstdc++6-13.2.1+git7813-150000.1.6.1.s390x.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.6.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="aarch64" src="aarch64/libgcc_s1-13.2.1+git7813-150000.1.6.1.aarch64.rpm">
          <filename>libgcc_s1-13.2.1+git7813-150000.1.6.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git7813" release="150000.1.6.1" arch="aarch64" src="aarch64/libstdc++6-13.2.1+git7813-150000.1.6.1.aarch64.rpm">
          <filename>libstdc++6-13.2.1+git7813-150000.1.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4476</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700204753"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215747" id="1215747" title="VUL-0: CVE-2023-34325: xen: Multiple vulnerabilities in libfsimage disk handling (XSA-443)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215145" id="1215145" title="VUL-0: CVE-2023-34322: xen: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216654" id="1216654" title="VUL-0: EMBARGOED: CVE-2023-46835: xen: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215748" id="1215748" title="VUL-0: CVE-2023-34327,CVE-2023-34328: xen: x86/AMD: Debug Mask handling (XSA-444)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216807" id="1216807" title="VUL-0: EMBARGOED: CVE-2023-46836: xen: x86: BTC/SRSO fixes not fully effective (XSA-446)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215746" id="1215746" title="VUL-0: CVE-2023-34326: xen: x86/AMD: missing IOMMU TLB flushing (XSA-442)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215474" id="1215474" title="VUL-0: CVE-2023-20588: xen: AMD CPU transitional execution leak via division by zero" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" id="CVE-2023-34325" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34325" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46836" id="CVE-2023-46836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46836" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34322" id="CVE-2023-34322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34322" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46835" id="CVE-2023-46835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" id="CVE-2023-34327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" id="CVE-2023-20588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" id="CVE-2023-34328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" id="CVE-2023-34326" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34326" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474).
- CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145).
- CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747).
- CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746).
- CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748).
- CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654).
- CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). 

- Upstream bug fixes (bsc#1027519) 
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_08" release="150400.4.40.1" arch="src" src="src/xen-4.16.5_08-150400.4.40.1.src.rpm">
          <filename>xen-4.16.5_08-150400.4.40.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_08" release="150400.4.40.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_08-150400.4.40.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_08-150400.4.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4705</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702275731"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192986" id="1192986" title="The name of net interface are shown like &quot;renameX&quot; and will be changed after system reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217031" id="1217031" title="Missing CPU microcode with 6.6+ kernel" type="bugzilla"/>
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 055+suse.351.g30f0cda6
- Fix network device naming in udev-rules (bsc#1192986)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="src" src="src/dracut-055+suse.351.g30f0cda6-150400.3.31.1.src.rpm">
          <filename>dracut-055+suse.351.g30f0cda6-150400.3.31.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="x86_64" src="x86_64/dracut-055+suse.351.g30f0cda6-150400.3.31.1.x86_64.rpm">
          <filename>dracut-055+suse.351.g30f0cda6-150400.3.31.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="x86_64" src="x86_64/dracut-fips-055+suse.351.g30f0cda6-150400.3.31.1.x86_64.rpm">
          <filename>dracut-fips-055+suse.351.g30f0cda6-150400.3.31.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="x86_64" src="x86_64/dracut-mkinitrd-deprecated-055+suse.351.g30f0cda6-150400.3.31.1.x86_64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.351.g30f0cda6-150400.3.31.1.x86_64.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="s390x" src="s390x/dracut-055+suse.351.g30f0cda6-150400.3.31.1.s390x.rpm">
          <filename>dracut-055+suse.351.g30f0cda6-150400.3.31.1.s390x.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="s390x" src="s390x/dracut-fips-055+suse.351.g30f0cda6-150400.3.31.1.s390x.rpm">
          <filename>dracut-fips-055+suse.351.g30f0cda6-150400.3.31.1.s390x.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="s390x" src="s390x/dracut-mkinitrd-deprecated-055+suse.351.g30f0cda6-150400.3.31.1.s390x.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.351.g30f0cda6-150400.3.31.1.s390x.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="aarch64" src="aarch64/dracut-055+suse.351.g30f0cda6-150400.3.31.1.aarch64.rpm">
          <filename>dracut-055+suse.351.g30f0cda6-150400.3.31.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="aarch64" src="aarch64/dracut-fips-055+suse.351.g30f0cda6-150400.3.31.1.aarch64.rpm">
          <filename>dracut-fips-055+suse.351.g30f0cda6-150400.3.31.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-mkinitrd-deprecated" epoch="0" version="055+suse.351.g30f0cda6" release="150400.3.31.1" arch="aarch64" src="aarch64/dracut-mkinitrd-deprecated-055+suse.351.g30f0cda6-150400.3.31.1.aarch64.rpm">
          <filename>dracut-mkinitrd-deprecated-055+suse.351.g30f0cda6-150400.3.31.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4537</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700728642"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45322" id="CVE-2023-45322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45322" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216129" id="1216129" title="VUL-0: CVE-2023-45322: libxml2,python-libxml2: use-after-free in xmlUnlinkNode() in tree.c" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.25.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.25.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="src" src="src/libxml2-2.9.14-150400.5.25.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.25.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.25.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.25.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.25.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.25.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.25.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.25.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.25.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.25.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="s390x" src="s390x/libxml2-2-2.9.14-150400.5.25.1.s390x.rpm">
          <filename>libxml2-2-2.9.14-150400.5.25.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.25.1" arch="s390x" src="s390x/libxml2-tools-2.9.14-150400.5.25.1.s390x.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.25.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="s390x" src="s390x/python3-libxml2-2.9.14-150400.5.25.1.s390x.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.25.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.25.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.25.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.25.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.25.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.25.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.25.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.25.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4723</id>
    <title>Recommended update for libtirpc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702371534"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216862" id="1216862" title="libtirpc-devel  pkg-config file has broken include path" type="bugzilla"/>
    </references>
    <description>This update for libtirpc fixes the following issue:

- fix sed parsing in specfile (bsc#1216862)
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.3.4" release="150300.3.23.1" arch="src" src="src/libtirpc-1.3.4-150300.3.23.1.src.rpm">
          <filename>libtirpc-1.3.4-150300.3.23.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.23.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.3.4-150300.3.23.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.23.1" arch="x86_64" src="x86_64/libtirpc3-1.3.4-150300.3.23.1.x86_64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.23.1" arch="s390x" src="s390x/libtirpc-netconfig-1.3.4-150300.3.23.1.s390x.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.23.1" arch="s390x" src="s390x/libtirpc3-1.3.4-150300.3.23.1.s390x.rpm">
          <filename>libtirpc3-1.3.4-150300.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.3.4" release="150300.3.23.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.3.4-150300.3.23.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.3.4-150300.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.3.4" release="150300.3.23.1" arch="aarch64" src="aarch64/libtirpc3-1.3.4-150300.3.23.1.aarch64.rpm">
          <filename>libtirpc3-1.3.4-150300.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4620</id>
    <title>Recommended update for libhugetlbfs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701339267"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216576" id="1216576" title="libhugetlbfs; ERROR: Line too long when parsing mounts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213639" id="1213639" title="L3-Question: Google Kubernetes engine CSI driver and nvme udev" type="bugzilla"/>
    </references>
    <description>This update for libhugetlbfs fixes the following issue:

- Add patch for upstream issue (bsc#1216576, bsc#1213639) 
</description>
    <pkglist>
      <collection>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="src" src="src/libhugetlbfs-2.20-150000.3.8.1.src.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.src.rpm</filename>
        </package>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="x86_64" src="x86_64/libhugetlbfs-2.20-150000.3.8.1.x86_64.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="s390x" src="s390x/libhugetlbfs-2.20-150000.3.8.1.s390x.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libhugetlbfs" epoch="0" version="2.20" release="150000.3.8.1" arch="aarch64" src="aarch64/libhugetlbfs-2.20-150000.3.8.1.aarch64.rpm">
          <filename>libhugetlbfs-2.20-150000.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4517</id>
    <title>Security update for python3-setuptools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700584462"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897" id="CVE-2022-40897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206667" id="1206667" title="VUL-0: CVE-2022-40897: python27-setuptools,python36-setuptools,python310-setuptools,python-setuptools,python39-setuptools: ReDos in setuptools" type="bugzilla"/>
    </references>
    <description>This update for python3-setuptools fixes the following issues:

- CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667).
</description>
    <pkglist>
      <collection>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.6.1" arch="noarch" src="noarch/python3-setuptools-44.1.1-150400.9.6.1.noarch.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.6.1.noarch.rpm</filename>
        </package>
        <package name="python3-setuptools" epoch="0" version="44.1.1" release="150400.9.6.1" arch="src" src="src/python3-setuptools-44.1.1-150400.9.6.1.src.rpm">
          <filename>python3-setuptools-44.1.1-150400.9.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4524</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700585609"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216922" id="1216922" title="VUL-0: CVE-2023-5678: openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" id="CVE-2023-5678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.60.2.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.60.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.60.2.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.60.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.60.2.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.60.2.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.60.2.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.60.2.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.60.2.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.60.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.60.2.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.60.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.60.2.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.60.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.60.2.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.60.2.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.60.2.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.60.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.60.2.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.60.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.60.2.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.60.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.60.2.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.60.2.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.60.2" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.60.2.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.60.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4500</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700564672"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215278" id="1215278" title="VUL-0: CVE-2023-23583: ucode-intel: Intel CPU can be made to deadlock or privilege escalate" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" id="CVE-2023-23583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20231114 release. (bsc#1215278)
- CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20231114" release="150200.35.1" arch="src" src="src/ucode-intel-20231114-150200.35.1.src.rpm">
          <filename>ucode-intel-20231114-150200.35.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20231114" release="150200.35.1" arch="x86_64" src="x86_64/ucode-intel-20231114-150200.35.1.x86_64.rpm">
          <filename>ucode-intel-20231114-150200.35.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4549</id>
    <title>Security update for fdo-client</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1700813550"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216293" id="1216293" title="VUL-0: fdo-client: package ships private keys" type="bugzilla"/>
    </references>
    <description>This update for fdo-client fixes the following issues:

- Removed build key via utils/keys_gen.sh. (bsc#1216293)
</description>
    <pkglist>
      <collection>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="src" src="src/fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.src.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="x86_64" src="x86_64/fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.x86_64.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="fdo-client-devel" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="x86_64" src="x86_64/fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1.x86_64.rpm">
          <filename>fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="s390x" src="s390x/fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.s390x.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="fdo-client-devel" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="s390x" src="s390x/fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1.s390x.rpm">
          <filename>fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="fdo-client" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="aarch64" src="aarch64/fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.aarch64.rpm">
          <filename>fdo-client-1.0.0+git20210816.baa09b5-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="fdo-client-devel" epoch="0" version="1.0.0+git20210816.baa09b5" release="150400.3.3.1" arch="aarch64" src="aarch64/fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1.aarch64.rpm">
          <filename>fdo-client-devel-1.0.0+git20210816.baa09b5-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4672</id>
    <title>Security update for suse-build-key</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701869920"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217215" id="1217215" title="rpm -V suse-build-key-12.0-150000.8.34.1.noarch reports changed file modes for suse-build-key-12.0-150000.8.34.1-import-suse-build-key.sh" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216410" id="1216410" title="L3: Installation suse-build-key fails , if /var is mounted with noexec on SLES15 SP5" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update runs a import-suse-build-key script.

The previous libzypp-post-script based installation is replaced
with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777).
  - suse-build-key-import.service
  - suse-build-key-import.timer

It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys.
After successful import the timer is disabled.

To manually import them you can also run:

# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.37.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.37.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.37.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.37.1" arch="src" src="src/suse-build-key-12.0-150000.8.37.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.37.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4619</id>
    <title>Security update for sqlite3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701335709"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210660" id="1210660" title="VUL-0: CVE-2023-2137: sqlite2,sqlite3: Heap buffer overflow in sqlite" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2137" id="CVE-2023-2137" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2137" type="cve"/>
    </references>
    <description>This update for sqlite3 fixes the following issues:

- CVE-2023-2137: Fixed heap buffer overflow (bsc#1210660).
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.44.0" release="150000.3.23.1" arch="x86_64" src="x86_64/libsqlite3-0-3.44.0-150000.3.23.1.x86_64.rpm">
          <filename>libsqlite3-0-3.44.0-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.44.0" release="150000.3.23.1" arch="src" src="src/sqlite3-3.44.0-150000.3.23.1.src.rpm">
          <filename>sqlite3-3.44.0-150000.3.23.1.src.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.44.0" release="150000.3.23.1" arch="x86_64" src="x86_64/sqlite3-tcl-3.44.0-150000.3.23.1.x86_64.rpm">
          <filename>sqlite3-tcl-3.44.0-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0" epoch="0" version="3.44.0" release="150000.3.23.1" arch="s390x" src="s390x/libsqlite3-0-3.44.0-150000.3.23.1.s390x.rpm">
          <filename>libsqlite3-0-3.44.0-150000.3.23.1.s390x.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.44.0" release="150000.3.23.1" arch="s390x" src="s390x/sqlite3-tcl-3.44.0-150000.3.23.1.s390x.rpm">
          <filename>sqlite3-tcl-3.44.0-150000.3.23.1.s390x.rpm</filename>
        </package>
        <package name="libsqlite3-0" epoch="0" version="3.44.0" release="150000.3.23.1" arch="aarch64" src="aarch64/libsqlite3-0-3.44.0-150000.3.23.1.aarch64.rpm">
          <filename>libsqlite3-0-3.44.0-150000.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="sqlite3-tcl" epoch="0" version="3.44.0" release="150000.3.23.1" arch="aarch64" src="aarch64/sqlite3-tcl-3.44.0-150000.3.23.1.aarch64.rpm">
          <filename>sqlite3-tcl-3.44.0-150000.3.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4587</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701091617"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216001" id="1216001" title="VUL-0: CVE-2023-5441: vim: segfault in exmode when redrawing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215940" id="1215940" title="VUL-0: CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216696" id="1216696" title="VUL-0: CVE-2023-46246: vim: Integer Overflow in :history command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216167" id="1216167" title="VUL-0: CVE-2023-5535: vim: use-after-free from buf_contents_changed()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5441" id="CVE-2023-5441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5344" id="CVE-2023-5344" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5344" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46246" id="CVE-2023-46246" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46246" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5535" id="CVE-2023-5535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5535" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940)                                                                                                             
- CVE-2023-5441: segfault in exmode when redrawing (bsc#1216001)                                                                                                                               
- CVE-2023-5535: use-after-free from buf_contents_changed() (bsc#1216167)                                                                                                                      
- CVE-2023-46246: Integer Overflow in :history command (bsc#1216696)                                                                                                                           
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.2103" release="150000.5.57.1" arch="src" src="src/vim-9.0.2103-150000.5.57.1.src.rpm">
          <filename>vim-9.0.2103-150000.5.57.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.2103" release="150000.5.57.1" arch="noarch" src="noarch/vim-data-common-9.0.2103-150000.5.57.1.noarch.rpm">
          <filename>vim-data-common-9.0.2103-150000.5.57.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.2103" release="150000.5.57.1" arch="x86_64" src="x86_64/vim-small-9.0.2103-150000.5.57.1.x86_64.rpm">
          <filename>vim-small-9.0.2103-150000.5.57.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.2103" release="150000.5.57.1" arch="s390x" src="s390x/vim-small-9.0.2103-150000.5.57.1.s390x.rpm">
          <filename>vim-small-9.0.2103-150000.5.57.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.2103" release="150000.5.57.1" arch="aarch64" src="aarch64/vim-small-9.0.2103-150000.5.57.1.aarch64.rpm">
          <filename>vim-small-9.0.2103-150000.5.57.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4699</id>
    <title>Recommended update for gpg2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702274556"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217212" id="1217212" title="[SECURITY][FIPS] dirmngr --validate broken for DER encoded files" type="bugzilla"/>
    </references>
    <description>This update for gpg2 fixes the following issues:

- `dirmngr-client --validate` is broken for DER-encoded files (bsc#1217212)
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="src" src="src/gpg2-2.2.27-150300.3.8.1.src.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="x86_64" src="x86_64/gpg2-2.2.27-150300.3.8.1.x86_64.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="s390x" src="s390x/gpg2-2.2.27-150300.3.8.1.s390x.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.s390x.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.8.1" arch="aarch64" src="aarch64/gpg2-2.2.27-150300.3.8.1.aarch64.rpm">
          <filename>gpg2-2.2.27-150300.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4970</id>
    <title>Recommended update for icu73_2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703494145"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217354" id="1217354" title="add 32bit library packages for icu_73_2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217479" id="1217479" title="icu73_2 no longer builds - testsuite failure in TestHebrewCalendarInTemporalLeapYear" type="bugzilla"/>
    </references>
    <description>
This update for icu73_2 fixes the following issue:

- ships 32bit icu library on SLES 15 SP3 to complement the ICU 69 32bit libraries.
</description>
    <pkglist>
      <collection>
        <package name="icu73_2" epoch="0" version="73.2" release="150000.1.7.1" arch="src" src="src/icu73_2-73.2-150000.1.7.1.src.rpm">
          <filename>icu73_2-73.2-150000.1.7.1.src.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.7.1" arch="x86_64" src="x86_64/libicu73_2-73.2-150000.1.7.1.x86_64.rpm">
          <filename>libicu73_2-73.2-150000.1.7.1.x86_64.rpm</filename>
        </package>
        <package name="libicu73_2-ledata" epoch="0" version="73.2" release="150000.1.7.1" arch="noarch" src="noarch/libicu73_2-ledata-73.2-150000.1.7.1.noarch.rpm">
          <filename>libicu73_2-ledata-73.2-150000.1.7.1.noarch.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.7.1" arch="s390x" src="s390x/libicu73_2-73.2-150000.1.7.1.s390x.rpm">
          <filename>libicu73_2-73.2-150000.1.7.1.s390x.rpm</filename>
        </package>
        <package name="libicu73_2-bedata" epoch="0" version="73.2" release="150000.1.7.1" arch="noarch" src="noarch/libicu73_2-bedata-73.2-150000.1.7.1.noarch.rpm">
          <filename>libicu73_2-bedata-73.2-150000.1.7.1.noarch.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.7.1" arch="ppc64le" src="ppc64le/libicu73_2-73.2-150000.1.7.1.ppc64le.rpm">
          <filename>libicu73_2-73.2-150000.1.7.1.ppc64le.rpm</filename>
        </package>
        <package name="libicu73_2" epoch="0" version="73.2" release="150000.1.7.1" arch="aarch64" src="aarch64/libicu73_2-73.2-150000.1.7.1.aarch64.rpm">
          <filename>libicu73_2-73.2-150000.1.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4615</id>
    <title>Recommended update for icu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701286562"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217472" id="1217472" title="nothing provides 'libicuuc.so.suse65.1' needed by libxerces-c-3_1-32bit-3.1.4-10.5.1.x86_64" type="bugzilla"/>
    </references>
    <description>
This update of icu fixes the following issue:

- missing 32bit libraries in SLES 15 SP3 were added, required by xerces-c 32bit.
</description>
    <pkglist>
      <collection>
        <package name="icu" epoch="0" version="65.1" release="150200.4.10.1" arch="src" src="src/icu-65.1-150200.4.10.1.src.rpm">
          <filename>icu-65.1-150200.4.10.1.src.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.10.1" arch="x86_64" src="x86_64/libicu-suse65_1-65.1-150200.4.10.1.x86_64.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libicu65_1-ledata" epoch="0" version="65.1" release="150200.4.10.1" arch="noarch" src="noarch/libicu65_1-ledata-65.1-150200.4.10.1.noarch.rpm">
          <filename>libicu65_1-ledata-65.1-150200.4.10.1.noarch.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.10.1" arch="s390x" src="s390x/libicu-suse65_1-65.1-150200.4.10.1.s390x.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.10.1.s390x.rpm</filename>
        </package>
        <package name="libicu65_1-bedata" epoch="0" version="65.1" release="150200.4.10.1" arch="noarch" src="noarch/libicu65_1-bedata-65.1-150200.4.10.1.noarch.rpm">
          <filename>libicu65_1-bedata-65.1-150200.4.10.1.noarch.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.10.1" arch="aarch64" src="aarch64/libicu-suse65_1-65.1-150200.4.10.1.aarch64.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-88</id>
    <title>Recommended update for libsolv, zypper, libzypp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704964131"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217873" id="1217873" title="Reboot needed not persistent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215294" id="1215294" title="libzypp needs update for boost 1.83.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216412" id="1216412" title="warning: Found NDB Packages.db database while attempting bdb backend: using ndb backend." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217593" id="1217593" title="L3: New version of zypper breaks our deployment in SLES15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218291" id="1218291" title="Does `zypper ps -s ` work correctly ?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212160" id="1212160" title="$releasever does not expand correctly when downloading repo file" type="bugzilla"/>
    </references>
    <description>This update for libsolv, zypper, libzypp fixes the following issues:

- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
- Fix search/info commands ignoring --ignore-unknown (bsc#1217593)
- CheckAccessDeleted: fix 'running in container' filter (bsc#1218291)
- Open rpmdb just once during execution of %posttrans scripts (bsc#1216412)
- Make sure reboot-needed is remembered until next boot (bsc#1217873)
- Stop using boost version 1 timer library (bsc#1215294)
- Updated to version 0.7.27  
- Add zstd support for the installcheck tool
- Add putinowndirpool cache to make file list handling in repo_write much faster
- Do not use deprecated headerUnload with newer rpm versions
- Support complex deps in SOLVABLE_PREREQ_IGNOREINST
- Fix minimization not prefering installed packages in some cases
- Reduce memory usage in repo_updateinfoxml
- Fix lock-step interfering with architecture selection
- Fix choice rule handing for package downgrades
- Fix complex dependencies with an &quot;else&quot; part sometimes leading to unsolved dependencies
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.27" release="150400.3.11.2" arch="src" src="src/libsolv-0.7.27-150400.3.11.2.src.rpm">
          <filename>libsolv-0.7.27-150400.3.11.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.27" release="150400.3.11.2" arch="x86_64" src="x86_64/libsolv-tools-0.7.27-150400.3.11.2.x86_64.rpm">
          <filename>libsolv-tools-0.7.27-150400.3.11.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="src" src="src/libzypp-17.31.27-150400.3.49.1.src.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="x86_64" src="x86_64/libzypp-17.31.27-150400.3.49.1.x86_64.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="src" src="src/zypper-1.14.68-150400.3.40.2.src.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="x86_64" src="x86_64/zypper-1.14.68-150400.3.40.2.x86_64.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.68" release="150400.3.40.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.68-150400.3.40.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.68-150400.3.40.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.27" release="150400.3.11.2" arch="s390x" src="s390x/libsolv-tools-0.7.27-150400.3.11.2.s390x.rpm">
          <filename>libsolv-tools-0.7.27-150400.3.11.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="s390x" src="s390x/libzypp-17.31.27-150400.3.49.1.s390x.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="s390x" src="s390x/zypper-1.14.68-150400.3.40.2.s390x.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.27" release="150400.3.11.2" arch="aarch64" src="aarch64/libsolv-tools-0.7.27-150400.3.11.2.aarch64.rpm">
          <filename>libsolv-tools-0.7.27-150400.3.11.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.27" release="150400.3.49.1" arch="aarch64" src="aarch64/libzypp-17.31.27-150400.3.49.1.aarch64.rpm">
          <filename>libzypp-17.31.27-150400.3.49.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="150400.3.40.2" arch="aarch64" src="aarch64/zypper-1.14.68-150400.3.40.2.aarch64.rpm">
          <filename>zypper-1.14.68-150400.3.40.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4604</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701243718"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215405" id="1215405" title="SELinux is preventing some services from 'read, write' accesses" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Extend module list for targeted policy
  * timedatex
  * rrdcached
  * stratisd
  * ica (bsc#1215405)
  * fedoratp
  * stalld
  * rhcd
  * wireguard
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git5.54d165ea" release="150400.4.18.1" arch="noarch" src="noarch/selinux-policy-20230511+git5.54d165ea-150400.4.18.1.noarch.rpm">
          <filename>selinux-policy-20230511+git5.54d165ea-150400.4.18.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git5.54d165ea" release="150400.4.18.1" arch="src" src="src/selinux-policy-20230511+git5.54d165ea-150400.4.18.1.src.rpm">
          <filename>selinux-policy-20230511+git5.54d165ea-150400.4.18.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git5.54d165ea" release="150400.4.18.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git5.54d165ea-150400.4.18.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git5.54d165ea" release="150400.4.18.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git5.54d165ea-150400.4.18.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4623</id>
    <title>Security update for traceroute</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701368572"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46316" id="CVE-2023-46316" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46316" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216591" id="1216591" title="VUL-0: CVE-2023-46316: traceroute: wrapper scripts do not properly parse command lines" type="bugzilla"/>
    </references>
    <description>This update for traceroute fixes the following issues:

- CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).
</description>
    <pkglist>
      <collection>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="src" src="src/traceroute-2.0.21-150000.3.3.1.src.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="x86_64" src="x86_64/traceroute-2.0.21-150000.3.3.1.x86_64.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="s390x" src="s390x/traceroute-2.0.21-150000.3.3.1.s390x.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="traceroute" epoch="0" version="2.0.21" release="150000.3.3.1" arch="aarch64" src="aarch64/traceroute-2.0.21-150000.3.3.1.aarch64.rpm">
          <filename>traceroute-2.0.21-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4693</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701966765"/>
    <references/>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

Kubevirt is rebuilt against updated dependencies to fix security issues.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.26.1" arch="src" src="src/kubevirt-0.54.0-150400.3.26.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.26.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.26.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.26.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.26.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.26.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.26.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4681</id>
    <title>Recommended update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701930959"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214367" id="1214367" title="qemu-system-i386: memory_global_dirty_log_start: Assertion `!(global_dirty_tracking &amp; flags)' failed." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216985" id="1216985" title="Live migration failed with newer qemu-x86-6.2.0-150400.37.23.1.x86_64.rpm" type="bugzilla"/>
    </references>
    <description>This update for qemu fixes the following issues:

- Fix migration issues by disabling transfer of acpi_index (bsc#1216985)
- Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
- Fix incorrect calls of log_global_start/stop (bsc#1214367)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="src" src="src/qemu-6.2.0-150400.37.26.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.26.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.26.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.26.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.26.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.26.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.26.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.26.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.26.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.26.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.26.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.26.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.26.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.26.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.26.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.26.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.26.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.26.1" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.26.1.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.26.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.26.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.26.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4689</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701938984"/>
    <references/>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

This update rebuilds containerized-data-importer and its containers against updated
GO and updated base images.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.23.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.23.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.23.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.23.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.23.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.23.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4843</id>
    <title>Security update for python3-cryptography</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702552985"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49083" id="CVE-2023-49083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49083" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217592" id="1217592" title="VUL-0: CVE-2023-49083: python-cryptography,python3-cryptography: NULL pointer dereference when loading certificates from a PKCS#7 bundle" type="bugzilla"/>
    </references>
    <description>This update for python3-cryptography fixes the following issues:

- CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).
</description>
    <pkglist>
      <collection>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="src" src="src/python3-cryptography-3.3.2-150400.23.1.src.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.src.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="x86_64" src="x86_64/python3-cryptography-3.3.2-150400.23.1.x86_64.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.x86_64.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="s390x" src="s390x/python3-cryptography-3.3.2-150400.23.1.s390x.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.s390x.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="ppc64le" src="ppc64le/python3-cryptography-3.3.2-150400.23.1.ppc64le.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.ppc64le.rpm</filename>
        </package>
        <package name="python3-cryptography" epoch="0" version="3.3.2" release="150400.23.1" arch="aarch64" src="aarch64/python3-cryptography-3.3.2-150400.23.1.aarch64.rpm">
          <filename>python3-cryptography-3.3.2-150400.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4659</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701864321"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217573" id="1217573" title="VUL-0: EMBARGOED: CVE-2023-46218: curl: cookie mixed case PSL bypass" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217574" id="1217574" title="VUL-0: EMBARGOED: CVE-2023-46219: curl: HSTS long file name clears contents" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219" id="CVE-2023-46219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218" id="CVE-2023-46218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).
- CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="src" src="src/curl-8.0.1-150400.5.36.1.src.rpm">
          <filename>curl-8.0.1-150400.5.36.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.36.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.36.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.36.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.36.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.36.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.36.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.36.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.36.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.36.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.36.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.36.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.36.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.36.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.36.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.36.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.36.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4664</id>
    <title>Security update for kernel-firmware</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701866057"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215823" id="1215823" title="VUL-0: CVE-2023-20592: kernel-firmware: AMD CPU issue with INVD instruction aka CacheWarpAttack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215831" id="1215831" title="VUL-0: kernel-firmware: various AMD CPU issues" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20526" id="CVE-2023-20526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46774" id="CVE-2021-46774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23830" id="CVE-2022-23830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23830" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23820" id="CVE-2022-23820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23820" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46766" id="CVE-2021-46766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20519" id="CVE-2023-20519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20566" id="CVE-2023-20566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20592" id="CVE-2023-20592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20592" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20521" id="CVE-2023-20521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20533" id="CVE-2023-20533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20533" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26345" id="CVE-2021-26345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26345" type="cve"/>
    </references>
    <description>This update for kernel-firmware fixes the following issues:

Update AMD ucode to 20231030 (bsc#1215831):

- CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- CVE-2021-46774: Insufficient input validation in ABL may enable a privileged attacker to perform arbitrary DRAM writes, potentially resulting in code execution and privilege escalation.
- CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker using DMA to read/write from/to invalid DRAM address potentially resulting in denial-of-service.
0 CVE-2023-20519: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.
- CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.
- CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
- CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
- CVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.
- CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
- CVE-2021-26345: Failure to validate the value in APCB may allow an attacker with physical access to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
- CVE-2023-20592: Issue with INVD instruction aka CacheWarpAttack (bsc#1215823).
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20220509" release="150400.4.25.1" arch="src" src="src/kernel-firmware-20220509-150400.4.25.1.src.rpm">
          <filename>kernel-firmware-20220509-150400.4.25.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-all-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-all-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-atheros-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-brcm-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-i915-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-i915-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-intel-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-intel-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-marvell-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-media-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-media-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-network-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-network-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-nfp-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-platform-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-platform-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-prestera-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-qcom-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-radeon-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-realtek-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-serial-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-serial-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-sound-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-sound-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-ti-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-ti-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20220509-150400.4.25.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20220509" release="150400.4.25.1" arch="noarch" src="noarch/ucode-amd-20220509-150400.4.25.1.noarch.rpm">
          <filename>ucode-amd-20220509-150400.4.25.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4647</id>
    <title>Security update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701855795"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45539" id="CVE-2023-45539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45539" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217653" id="1217653" title="VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component" type="bugzilla"/>
    </references>
    <description>This update for haproxy fixes the following issues:

- CVE-2023-45539: Fixed misinterpretation of a path_end rule with # as part of the URI component (bsc#1217653).
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="src" src="src/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.src.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="x86_64" src="x86_64/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.x86_64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="s390x" src="s390x/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.s390x.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.s390x.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.4.22+git0.f8e3218e2" release="150400.3.19.1" arch="aarch64" src="aarch64/haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.aarch64.rpm">
          <filename>haproxy-2.4.22+git0.f8e3218e2-150400.3.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4983</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703769776"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217277" id="1217277" title="VUL-0: CVE-2023-5981: gnutls: side channel attack in RSA-PSK" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5981" id="CVE-2023-5981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5981" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="src" src="src/gnutls-3.7.3-150400.4.38.1.src.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.38.1.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.38.1" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.38.1.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.38.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.38.1" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.38.1.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.38.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.38.1.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.38.1" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.38.1.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.38.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.38.1" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.38.1.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.38.1.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.38.1" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.38.1.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.38.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.38.1" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.38.1.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.38.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.38.1" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.38.1.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.38.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4902</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702987854"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217950" id="1217950" title="VUL-0: EMBARGOED: CVE-2023-48795: openssh: prefix truncation breaking ssh channel integrity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214788" id="1214788" title="[SELinux] ssh ProxyJump does not work" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950).

the following non-security bug was fixed:

- Fix the 'no route to host' error when connecting via ProxyJump
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="src" src="src/openssh-8.4p1-150300.3.27.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.27.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.27.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.27.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.27.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.27.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.27.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.27.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4670</id>
    <title>Recommended update for regionServiceClientConfigGCE</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701869482"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217538" id="1217538" title="[TRACKERBUG] Update region certs to accommodate 4096 length on GCE" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigGCE fixes the following issue:

- Update to version 4.0.1 (bsc#1217538)
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.0.1" release="150000.4.12.1" arch="noarch" src="noarch/regionServiceClientConfigGCE-4.0.1-150000.4.12.1.noarch.rpm">
          <filename>regionServiceClientConfigGCE-4.0.1-150000.4.12.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.0.1" release="150000.4.12.1" arch="src" src="src/regionServiceClientConfigGCE-4.0.1-150000.4.12.1.src.rpm">
          <filename>regionServiceClientConfigGCE-4.0.1-150000.4.12.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4669</id>
    <title>Recommended update for regionServiceClientConfigAzure</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701869389"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217537" id="1217537" title="[TRACKERBUG] Update region certs to accommodate 4096 length on Azure" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigAzure fixes the following issue:

- Update to version 2.0.1 (bsc#1217537)
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.0.1" release="150000.3.19.1" arch="noarch" src="noarch/regionServiceClientConfigAzure-2.0.1-150000.3.19.1.noarch.rpm">
          <filename>regionServiceClientConfigAzure-2.0.1-150000.3.19.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.0.1" release="150000.3.19.1" arch="src" src="src/regionServiceClientConfigAzure-2.0.1-150000.3.19.1.src.rpm">
          <filename>regionServiceClientConfigAzure-2.0.1-150000.3.19.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4668</id>
    <title>Recommended update for regionServiceClientConfigEC2</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701869281"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217536" id="1217536" title="[TRACKERBUG] Update region certs to accommodate 4096 length on EC2" type="bugzilla"/>
    </references>
    <description>This update for regionServiceClientConfigEC2 fixes the following issue:

- Update to version 4.1.1 (bsc#1217536)
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.1.1" release="150000.3.27.1" arch="noarch" src="noarch/regionServiceClientConfigEC2-4.1.1-150000.3.27.1.noarch.rpm">
          <filename>regionServiceClientConfigEC2-4.1.1-150000.3.27.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.1.1" release="150000.3.27.1" arch="src" src="src/regionServiceClientConfigEC2-4.1.1-150000.3.27.1.src.rpm">
          <filename>regionServiceClientConfigEC2-4.1.1-150000.3.27.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4671</id>
    <title>Recommended update for man</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701869673"/>
    <references/>
    <description>
This update of man fixes the following problem:

- The &quot;man&quot; commands is delivered to SUSE Linux Enterprise Micro
  to allow browsing man pages.
</description>
    <pkglist>
      <collection>
        <package name="groff" epoch="0" version="1.22.4" release="150400.5.2.1" arch="src" src="src/groff-1.22.4-150400.5.2.1.src.rpm">
          <filename>groff-1.22.4-150400.5.2.1.src.rpm</filename>
        </package>
        <package name="groff" epoch="0" version="1.22.4" release="150400.5.2.1" arch="x86_64" src="x86_64/groff-1.22.4-150400.5.2.1.x86_64.rpm">
          <filename>groff-1.22.4-150400.5.2.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-hardware" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-hardware-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-hardware-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-group-kvm" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-kvm-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-kvm-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-group-libvirt" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-libvirt-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-libvirt-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-group-wheel" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-group-wheel-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-group-wheel-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-lp" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-lp-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-lp-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-nobody" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-nobody-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-nobody-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-qemu" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-qemu-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-qemu-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-tftp" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-tftp-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-tftp-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-user-tss" epoch="0" version="20170617" release="150400.24.2.1" arch="noarch" src="noarch/system-user-tss-20170617-150400.24.2.1.noarch.rpm">
          <filename>system-user-tss-20170617-150400.24.2.1.noarch.rpm</filename>
        </package>
        <package name="system-users" epoch="0" version="20170617" release="150400.24.2.1" arch="src" src="src/system-users-20170617-150400.24.2.1.src.rpm">
          <filename>system-users-20170617-150400.24.2.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-21</id>
    <title>Recommended update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704295513"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214364" id="1214364" title="net-snmp: new release 5.9.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207697" id="1207697" title="netgroup support for net-snmp — ref:_00D1igLOd._5005qKa2bM:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206044" id="1206044" title="MIB host-resource size calculation is broken for XFS - ref:_00D1igLOd._5005qGHkGL:ref" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-6416" id="PED-6416" title="https://jira.suse.com/browse/PED-6416" type="jira"/>
      <reference href="https://fate.suse.com/316305" id="316305" title="https://fate.suse.com/316305" type="fate"/>
    </references>
    <description>This update for net-snmp fixes the following issues:

Update to net-snmp-5.9.4 (bsc#1214364).

-   libsnmp:

      - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not
        used in the Net-SNMP code base.
      - DISPLAY-HINT fixes
      - Miscellanious improvements to the transports
      - Handle multiple oldEngineID configuration lines
      - fixes for DNS names longer than 63 characters

-   agent:

      - Added a ignoremount configuration option for the HOST-MIB
      - disallow SETs with a NULL varbind
      - fix the --enable-minimalist build

-   apps:

      - snmpset: allow SET with NULL varbind for testing
      - snmptrapd: improved MySQL logging code

-   general:

      - configure: Remove -Wno-deprecated as it is no longer needed
      - miscellanious ther bug fixes, build fixes and cleanups

- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting &quot;ProtectHome=true&quot; caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="150300.15.11.1" arch="x86_64" src="x86_64/libsnmp40-5.9.4-150300.15.11.1.x86_64.rpm">
          <filename>libsnmp40-5.9.4-150300.15.11.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.4" release="150300.15.11.1" arch="src" src="src/net-snmp-5.9.4-150300.15.11.1.src.rpm">
          <filename>net-snmp-5.9.4-150300.15.11.1.src.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="150300.15.11.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.4-150300.15.11.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.4-150300.15.11.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="150300.15.11.1" arch="s390x" src="s390x/libsnmp40-5.9.4-150300.15.11.1.s390x.rpm">
          <filename>libsnmp40-5.9.4-150300.15.11.1.s390x.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="150300.15.11.1" arch="s390x" src="s390x/snmp-mibs-5.9.4-150300.15.11.1.s390x.rpm">
          <filename>snmp-mibs-5.9.4-150300.15.11.1.s390x.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="150300.15.11.1" arch="aarch64" src="aarch64/libsnmp40-5.9.4-150300.15.11.1.aarch64.rpm">
          <filename>libsnmp40-5.9.4-150300.15.11.1.aarch64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="150300.15.11.1" arch="aarch64" src="aarch64/snmp-mibs-5.9.4-150300.15.11.1.aarch64.rpm">
          <filename>snmp-mibs-5.9.4-150300.15.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-53</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704681476"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216465" id="1216465" title="dracut-kiwi-lib requires parted on all architectures" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Add `partx` to module-setup of kiwi-lib (bsc#1216465)

- Change partprobe fallback to partx (bsc#1216465):
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev

- Create live persistent storage without busy state (bsc#1216465):
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe

- Add alternative re-reading of the partition table (bsc#1216465):
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.65.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.65.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.65.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.65.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.65.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.65.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.65.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.65.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.65.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.65.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.65.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.65.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.65.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.65.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.65.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.65.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.65.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.65.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.65.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4679</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1701930845"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216747" id="1216747" title="SELinux: Regex version mismatch errors from libselinux after libpcre2 got updated" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Trigger rebuild of the policy when pcre2 gets updated to avoid regex version mismatch errors (bsc#1216747)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git5.54d165ea" release="150400.4.21.1" arch="noarch" src="noarch/selinux-policy-20230511+git5.54d165ea-150400.4.21.1.noarch.rpm">
          <filename>selinux-policy-20230511+git5.54d165ea-150400.4.21.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git5.54d165ea" release="150400.4.21.1" arch="src" src="src/selinux-policy-20230511+git5.54d165ea-150400.4.21.1.src.rpm">
          <filename>selinux-policy-20230511+git5.54d165ea-150400.4.21.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git5.54d165ea" release="150400.4.21.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git5.54d165ea-150400.4.21.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git5.54d165ea-150400.4.21.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git5.54d165ea" release="150400.4.21.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git5.54d165ea-150400.4.21.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git5.54d165ea-150400.4.21.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-50</id>
    <title>Recommended update for python-instance-billing-flavor-check</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704680472"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217695" id="1217695" title="Graceful error message when running instance-flavor-check as non-root user" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217696" id="1217696" title="Graceful error message when running instance-flavor-check as non-root user" type="bugzilla"/>
    </references>
    <description>This update for python-instance-billing-flavor-check fixes the following issues:

-  Run the command as sudo only (bsc#1217696, bsc#1217695)
-  Handle exception for Python 3.4 
</description>
    <pkglist>
      <collection>
        <package name="python-cssselect" epoch="0" version="1.0.3" release="150000.3.5.1" arch="src" src="src/python-cssselect-1.0.3-150000.3.5.1.src.rpm">
          <filename>python-cssselect-1.0.3-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="python-lxml" epoch="0" version="4.7.1" release="150200.3.12.1" arch="src" src="src/python-lxml-4.7.1-150200.3.12.1.src.rpm">
          <filename>python-lxml-4.7.1-150200.3.12.1.src.rpm</filename>
        </package>
        <package name="python3-cssselect" epoch="0" version="1.0.3" release="150000.3.5.1" arch="noarch" src="noarch/python3-cssselect-1.0.3-150000.3.5.1.noarch.rpm">
          <filename>python3-cssselect-1.0.3-150000.3.5.1.noarch.rpm</filename>
        </package>
        <package name="python3-lxml" epoch="0" version="4.7.1" release="150200.3.12.1" arch="x86_64" src="x86_64/python3-lxml-4.7.1-150200.3.12.1.x86_64.rpm">
          <filename>python3-lxml-4.7.1-150200.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="python3-lxml" epoch="0" version="4.7.1" release="150200.3.12.1" arch="aarch64" src="aarch64/python3-lxml-4.7.1-150200.3.12.1.aarch64.rpm">
          <filename>python3-lxml-4.7.1-150200.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4901</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702981715"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38472" id="CVE-2023-38472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38472" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216853" id="1216853" title="VUL-0: CVE-2023-38472: avahi: Reachable assertion in avahi_rdata_parse" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-38472: Fixed reachable assertion in avahi_rdata_parse (bsc#1216853).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="src" src="src/avahi-0.8-150400.7.13.1.src.rpm">
          <filename>avahi-0.8-150400.7.13.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.13.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.13.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.13.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.13.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.13.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.13.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/avahi-0.8-150400.7.13.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.13.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.13.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.13.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.13.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.13.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.13.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.13.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.13.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.13.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.13.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4727</id>
    <title>Security update for catatonit, containerd, runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702380509"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200528" id="1200528" title="VUL-0: CVE-2022-1996: go-restful: CORS bypass" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" id="CVE-2022-1996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" type="cve"/>
    </references>
    <description>
This update of runc and containerd fixes the following issues:

containerd:

- Update to containerd v1.7.8. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.8

    * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528)

catatonit:

- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.

- Update to catatont v0.1.7
  * This release adds the ability for catatonit to be used as the only
    process in a pause container, by passing the -P flag (in this mode no
    subprocess is spawned and thus no signal forwarding is done).

- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).

runc:

- Update to runc v1.1.10. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.10

</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="src" src="src/containerd-1.7.8-150000.103.1.src.rpm">
          <filename>containerd-1.7.8-150000.103.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="x86_64" src="x86_64/containerd-1.7.8-150000.103.1.x86_64.rpm">
          <filename>containerd-1.7.8-150000.103.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="src" src="src/runc-1.1.10-150000.55.1.src.rpm">
          <filename>runc-1.1.10-150000.55.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="x86_64" src="x86_64/runc-1.1.10-150000.55.1.x86_64.rpm">
          <filename>runc-1.1.10-150000.55.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="s390x" src="s390x/containerd-1.7.8-150000.103.1.s390x.rpm">
          <filename>containerd-1.7.8-150000.103.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="s390x" src="s390x/runc-1.1.10-150000.55.1.s390x.rpm">
          <filename>runc-1.1.10-150000.55.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.8" release="150000.103.1" arch="aarch64" src="aarch64/containerd-1.7.8-150000.103.1.aarch64.rpm">
          <filename>containerd-1.7.8-150000.103.1.aarch64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.10" release="150000.55.1" arch="aarch64" src="aarch64/runc-1.1.10-150000.55.1.aarch64.rpm">
          <filename>runc-1.1.10-150000.55.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4810</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702490385"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1084909" id="1084909" title="trackerbug: packages do not build reproducibly from hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210447" id="1210447" title="VUL-0: CVE-2023-2006: kernel: RxRPC Race Condition Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214286" id="1214286" title="L3-Question: dwc2 - dwc_otg on Raspberry Pi Compute Module 3 Plus Rev 1.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214976" id="1214976" title="SLES 15 SP5 - kernel: /sys/firmware/ipl/has_secure missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215124" id="1215124" title="SLES 15 SP5 - dasd: fix hanging device after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215292" id="1215292" title="[Dell SLES 15 SP5 Bug] - nvme-cli: nvme list does not reflect new version after performing firmware update of a NVMe device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215420" id="1215420" title="VUL-0: CVE-2023-4244: kernel-source-rt,kernel-source-azure,kernel-source: netfilter: nf_tables UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215458" id="1215458" title="Intel IDPF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215710" id="1215710" title="VUL-0: CVE-2023-5158: kernel-source,kernel-source-azure,kernel-source-rt: Possible DOS from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216058" id="1216058" title="VUL-0: CVE-2023-45863: kernel: renaming a network device can cause a buffer overflow on the kernel heap, upstream 3bb2a01caa81" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216105" id="1216105" title="s390/dasd: fix command reject error on ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216259" id="1216259" title="VUL-0: CVE-2023-45871: kernel: buffer size may not be adequate for frames larger than the MTU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216584" id="1216584" title="VUL-0: CVE-2023-5717: kernel: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216693" id="1216693" title="VUL-0: CVE-2023-46862: kernel: NULL pointer dereference in io_uring_show_fdinfo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216759" id="1216759" title="net-memcg: Fix scope of sockmem pressure indicators" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216844" id="1216844" title="Partner-L3: Heterogeneous Memory Management (HMM) Mod Urgently Needed in 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216861" id="1216861" title="Request for application of patch for kernel issue with cilium and NFS shares" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216909" id="1216909" title="Memory Allocation Failure is Not Checked in the XFS, Causing NULL Dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216959" id="1216959" title="VUL-0: CVE-2023-25775: kernel: Improper access control in the Intel(R) Ethernet Controller RDMA driver or linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216965" id="1216965" title="VUL-0: CVE-2023-39198: kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216976" id="1216976" title="VUL-0: CVE-2023-39197: kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="L3: [SLES 15 SP5] BUG: scheduling while atomic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217068" id="1217068" title="VUL-0: CVE-2023-6039: kernel-source,kernel-source-azure,kernel-source-rt: kernel: use-after-free in in lan78xx_disconnect() in lan78xx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217086" id="1217086" title="SLES 15 SP5 - kernel: possible incorrect TLB purging with cmma nodat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217124" id="1217124" title="Update Broadcom Emulex lpfc driver to 14.2.0.15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217140" id="1217140" title="Partner-L3: aplay hangs after so many iterations of playing any wav file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217195" id="1217195" title="L3: Kernel crash in tw_timer_handler — ref:_00D1igLOd._500Tr0k1ai:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217200" id="1217200" title="s390/pkey: fix/harmonize internal keyblob headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217205" id="1217205" title="s390/crashdump: fix TOD programmable field size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217332" id="1217332" title="VUL-0: CVE-2023-6176: kernel-source,kernel-source-azure,kernel-source-rt: local dos vulnerability in scatterwalk_copychunks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217366" id="1217366" title="Boot hangs due to kernel Oops on HPE DL380 Gen10 with P408i-a RAID controller [ref:_00D1igLOd._500Tr141xr:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217598" id="1217598" title="s390/dasd: use correct number of retries for ERP requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217599" id="1217599" title="s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217609" id="1217609" title="s390/cio: unregister device when the only path is gone" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217687" id="1217687" title="s390/ap: fix AP bus crash on early config change callback invocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217731" id="1217731" title="Update Broadcom Emulex lpfc driver to 14.2.0.16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217780" id="1217780" title="5e1d824f9a28 powerpc: Don't clobber f0/vs0 during fp|altivec register save" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" id="CVE-2023-6176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" id="CVE-2023-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" id="CVE-2023-39197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" id="CVE-2023-4244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" id="CVE-2023-6039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" id="CVE-2023-45863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" id="CVE-2023-5158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" id="CVE-2023-45871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" id="CVE-2023-5717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" id="CVE-2023-39198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" id="CVE-2023-25775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" id="CVE-2023-46862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3184" id="PED-3184" title="https://jira.suse.com/browse/PED-3184" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7237" id="PED-7237" title="https://jira.suse.com/browse/PED-7237" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).
- CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447).
- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068).
- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
- CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host side of a virtio ring (bsc#1215710).
- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).
- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).
- CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver (bsc#1216959).
- CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693).

The following non-security bugs were fixed:

- ACPI: FPDT: properly handle invalid FPDT subtables (git-fixes).
- ACPI: resource: Do IRQ override on TongFang GMxXGxx (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (git-fixes).
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (git-fixes).
- ALSA: hda/realtek - Add Dell ALC295 to pin fall back table (git-fixes).
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (git-fixes).
- ALSA: hda/realtek: Add quirks for HP Laptops (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 255 G10 (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 255 G8 (git-fixes).
- ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140).
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream (git-fixes).
- ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() (git-fixes).
- ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time (git-fixes).
- ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection (git-fixes).
- ALSA: info: Fix potential deadlock at disconnection (git-fixes).
- ARM: 9321/1: memset: cast the constant byte to unsigned char (git-fixes).
- ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (git-fixes).
- ASoC: ams-delta.c: use component after check (git-fixes).
- ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix (git-fixes).
- ASoC: cs35l41: Undo runtime PM changes at driver exit time (git-fixes).
- ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler (git-fixes).
- ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe (git-fixes).
- ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described (git-fixes).
- ASoC: hdmi-codec: register hpd callback on component probe (git-fixes).
- ASoC: rt5650: fix the wrong result of key button (git-fixes).
- ASoC: simple-card: fixup asoc_simple_probe() error handling (git-fixes).
- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (git-fixes).
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (git-fixes).
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (git-fixes).
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check (git-fixes).
- Drivers: hv: vmbus: Remove unused extern declaration vmbus_ontimer() (git-fixes).
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (git-fixes).
- HID: hyperv: Replace one-element array with flexible-array member (git-fixes).
- HID: hyperv: avoid struct memcpy overrun warning (git-fixes).
- HID: hyperv: remove unused struct synthhid_msg (git-fixes).
- HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround (git-fixes).
- HID: logitech-hidpp: Do not restart IO, instead defer hid_connect() only (git-fixes).
- HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() (git-fixes).
- HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk (git-fixes).
- HID: logitech-hidpp: Revert &quot;Do not restart communication if not necessary&quot; (git-fixes).
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (git-fixes).
- Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (git-fixes).
- Input: xpad - add VID for Turtle Beach controllers (git-fixes).
- PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() (git-fixes).
- PCI/sysfs: Protect driver's D3cold preference from user space (git-fixes).
- PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1215458).
- PCI: Extract ATS disabling to a helper function (bsc#1215458).
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (git-fixes).
- PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk (git-fixes).
- PCI: Use FIELD_GET() to extract Link Width (git-fixes).
- PCI: exynos: Do not discard .remove() callback (git-fixes).
- PCI: keystone: Do not discard .probe() callback (git-fixes).
- PCI: keystone: Do not discard .remove() callback (git-fixes).
- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (git-fixes).
- PM / devfreq: rockchip-dfi: Make pmu regmap mandatory (git-fixes).
- PM: hibernate: Use __get_safe_page() rather than touching the list (git-fixes).
- USB: dwc2: write HCINT with INTMASK applied (bsc#1214286).
- USB: dwc3: qcom: fix ACPI platform device leak (git-fixes).
- USB: dwc3: qcom: fix resource leaks on probe deferral (git-fixes).
- USB: dwc3: qcom: fix software node leak on probe errors (git-fixes).
- USB: dwc3: qcom: fix wakeup after probe deferral (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: add Luat Air72*U series products (git-fixes).
- USB: serial: option: do not claim interface 4 for ZTE MF290 (git-fixes).
- USB: serial: option: fix FM101R-GL defines (git-fixes).
- USB: usbip: fix stub_dev hub disconnect (git-fixes).
- arm/xen: fix xen_vcpu_info allocation alignment (git-fixes).
- arm64: Add Cortex-A520 CPU part definition (git-fixes)
- arm64: allow kprobes on EL0 handlers (git-fixes)
- arm64: armv8_deprecated move emulation functions (git-fixes)
- arm64: armv8_deprecated: fix unused-function error (git-fixes)
- arm64: armv8_deprecated: fold ops into insn_emulation (git-fixes)
- arm64: armv8_deprecated: move aarch32 helper earlier (git-fixes)
- arm64: armv8_deprecated: rework deprected instruction handling (git-fixes)
- arm64: consistently pass ESR_ELx to die() (git-fixes)
- arm64: die(): pass 'err' as long (git-fixes)
- arm64: factor insn read out of call_undef_hook() (git-fixes)
- arm64: factor out EL1 SSBS emulation hook (git-fixes)
- arm64: report EL1 UNDEFs better (git-fixes)
- arm64: rework BTI exception handling (git-fixes)
- arm64: rework EL0 MRS emulation (git-fixes)
- arm64: rework FPAC exception handling (git-fixes)
- arm64: split EL0/EL1 UNDEF handlers (git-fixes)
- ata: pata_isapnp: Add missing error check for devm_ioport_map() (git-fixes).
- atl1c: Work around the DMA RX overflow issue (git-fixes).
- atm: iphase: Do PCI error checks on own line (git-fixes).
- blk-mq: Do not clear driver tags own mapping (bsc#1217366).
- blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (bsc#1217366).
- bluetooth: Add device 0bda:887b to device tables (git-fixes).
- bluetooth: Add device 13d3:3571 to device tables (git-fixes).
- can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (git-fixes).
- can: dev: can_restart(): do not crash kernel if carrier is OK (git-fixes).
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (git-fixes).
- can: isotp: add local echo tx processing for consecutive frames (git-fixes).
- can: isotp: fix race between isotp_sendsmg() and isotp_release() (git-fixes).
- can: isotp: fix tx state handling for echo tx processing (git-fixes).
- can: isotp: handle wait_event_interruptible() return values (git-fixes).
- can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (git-fixes).
- can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (git-fixes).
- can: isotp: remove re-binding of bound socket (git-fixes).
- can: isotp: sanitize CAN ID checks in isotp_bind() (git-fixes).
- can: isotp: set max PDU size to 64 kByte (git-fixes).
- can: isotp: split tx timer into transmission and timeout (git-fixes).
- can: sja1000: Fix comment (git-fixes).
- clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (git-fixes).
- clk: imx: Select MXC_CLK for CLK_IMX8QXP (git-fixes).
- clk: imx: imx8mq: correct error handling path (git-fixes).
- clk: imx: imx8qxp: Fix elcdif_pll clock (git-fixes).
- clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (git-fixes).
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (git-fixes).
- clk: npcm7xx: Fix incorrect kfree (git-fixes).
- clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (git-fixes).
- clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM (git-fixes).
- clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks (git-fixes).
- clk: qcom: mmcc-msm8998: Do not check halt bit on some branch clks (git-fixes).
- clk: qcom: mmcc-msm8998: Fix the SMMU GDSC (git-fixes).
- clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (git-fixes).
- clk: ti: Add ti_dt_clk_name() helper to use clock-output-names (git-fixes).
- clk: ti: Update component clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: change ti_clk_register[_omap_hw]() API (git-fixes).
- clk: ti: fix double free in of_ti_divider_clk_setup() (git-fixes).
- crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (git-fixes).
- crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (git-fixes).
- crypto: hisilicon/hpre - Fix a erroneous check after snprintf() (git-fixes).
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (git-fixes).
- dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (git-fixes).
- dmaengine: stm32-mdma: correct desc prep when channel running (git-fixes).
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors (git-fixes).
- docs: net: move the probe and open/close sections of driver.rst up (bsc#1215458).
- docs: net: reformat driver.rst from a list to sections (bsc#1215458).
- docs: net: use C syntax highlight in driver.rst (bsc#1215458).
- drm/amd/display: Avoid NULL dereference of timing generator (git-fixes).
- drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox (git-fixes).
- drm/amd/display: remove useless check in should_enable_fbc() (git-fixes).
- drm/amd/display: use full update for clip size increase of large plane source (git-fixes).
- drm/amd/pm: Handle non-terminated overdrive commands (git-fixes).
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (git-fixes).
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (git-fixes).
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (git-fixes).
- drm/amdgpu: Fix potential null pointer derefernce (git-fixes).
- drm/amdgpu: do not use ATRM for external devices (git-fixes).
- drm/amdgpu: fix error handling in amdgpu_bo_list_get() (git-fixes).
- drm/amdgpu: fix software pci_unplug on some chips (git-fixes).
- drm/amdkfd: Fix a race condition of vram buffer unref in svm code (git-fixes).
- drm/amdkfd: Fix shift out-of-bounds issue (git-fixes).
- drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code (git-fixes).
- drm/bridge: Fix kernel-doc typo in desc of output_bus_cfg in drm_bridge_state (git-fixes).
- drm/bridge: lt8912b: Add missing drm_bridge_attach call (git-fixes).
- drm/bridge: lt8912b: Fix bridge_detach (git-fixes).
- drm/bridge: lt8912b: Fix crash on bridge detach (git-fixes).
- drm/bridge: lt8912b: Manually disable HPD only if it was enabled (git-fixes).
- drm/bridge: lt8912b: Register and attach our DSI device at probe (git-fixes).
- drm/bridge: lt8912b: Switch to devm MIPI-DSI helpers (git-fixes).
- drm/bridge: lt9611uxc: Register and attach our DSI device at probe (git-fixes).
- drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers (git-fixes).
- drm/bridge: lt9611uxc: fix the race in the error path (git-fixes).
- drm/bridge: tc358768: Disable non-continuous clock mode (git-fixes).
- drm/bridge: tc358768: Fix bit updates (git-fixes).
- drm/bridge: tc358768: Fix use of uninitialized variable (git-fixes).
- drm/gud: Use size_add() in call to struct_size() (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event (git-fixes).
- drm/i915: Fix potential spectre vulnerability (git-fixes).
- drm/komeda: drop all currently held locks if deadlock happens (git-fixes).
- drm/mediatek: Fix iommu fault by swapping FBs after updating plane state (git-fixes).
- drm/mediatek: Fix iommu fault during crtc enabling (git-fixes).
- drm/mipi-dsi: Create devm device attachment (git-fixes).
- drm/mipi-dsi: Create devm device registration (git-fixes).
- drm/msm/dp: skip validity check for DP CTS EDID checksum (git-fixes).
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference (git-fixes).
- drm/panel: fix a possible null pointer dereference (git-fixes).
- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (git-fixes).
- drm/panel: simple: Fix Innolux G101ICE-L01 timings (git-fixes).
- drm/panel: st7703: Pick different reset sequence (git-fixes).
- drm/qxl: prevent memory leak (git-fixes).
- drm/radeon: possible buffer overflow (git-fixes).
- drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() (git-fixes).
- drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (git-fixes).
- drm/rockchip: vop: Fix call to crtc reset helper (git-fixes).
- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (git-fixes).
- drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (git-fixes).
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (git-fixes).
- drm/vc4: fix typo (git-fixes).
- drm: vmwgfx_surface.c: copy user-array safely (git-fixes).
- dt-bindings: usb: hcd: add missing phy name to example (git-fixes).
- dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types (git-fixes).
- fbdev: fsl-diu-fb: mark wr_reg_wa() static (git-fixes).
- fbdev: imsttfb: Fix error path of imsttfb_probe() (git-fixes).
- fbdev: imsttfb: Release framebuffer and dealloc cmap on error path (git-fixes).
- fbdev: imsttfb: fix a resource leak in probe (git-fixes).
- fbdev: imsttfb: fix double free in probe() (git-fixes).
- fbdev: omapfb: Drop unused remove function (git-fixes).
- firewire: core: fix possible memory leak in create_units() (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() (git-fixes).
- gpio: mockup: fix kerneldoc (git-fixes).
- gpio: mockup: remove unused field (git-fixes).
- hid: cp2112: Fix duplicate workqueue initialization (git-fixes).
- hv: simplify sysctl registration (git-fixes).
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (git-fixes).
- hv_netvsc: Mark VF as slave before exposing it to user-mode (git-fixes).
- hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (git-fixes).
- hv_netvsc: fix race of netvsc and VF register_netdevice (git-fixes).
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- i2c: core: Run atomic i2c xfer when !preemptible (git-fixes).
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (git-fixes).
- i2c: dev: copy userspace array safely (git-fixes).
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (git-fixes).
- i2c: iproc: handle invalid slave state (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (git-fixes).
- i2c: sun6i-p2wi: Prevent potential division by zero (git-fixes).
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (git-fixes).
- i3c: master: cdns: Fix reading status register (git-fixes).
- i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data (git-fixes).
- i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen (git-fixes).
- i3c: master: svc: fix check wrong status register in irq handler (git-fixes).
- i3c: master: svc: fix ibi may not return mandatory data byte (git-fixes).
- i3c: master: svc: fix race condition in ibi work thread (git-fixes).
- i3c: master: svc: fix wrong data return when IBI happen during start frame (git-fixes).
- i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler (git-fixes).
- i915/perf: Fix NULL deref bugs with drm_dbg() calls (git-fixes).
- idpf: add RX splitq napi poll support (bsc#1215458).
- idpf: add SRIOV support and other ndo_ops (bsc#1215458).
- idpf: add TX splitq napi poll support (bsc#1215458).
- idpf: add controlq init and reset checks (bsc#1215458).
- idpf: add core init and interrupt request (bsc#1215458).
- idpf: add create vport and netdev configuration (bsc#1215458).
- idpf: add ethtool callbacks (bsc#1215458).
- idpf: add module register and probe functionality (bsc#1215458).
- idpf: add ptypes and MAC filter support (bsc#1215458).
- idpf: add singleq start_xmit and napi poll (bsc#1215458).
- idpf: add splitq start_xmit (bsc#1215458).
- idpf: cancel mailbox work in error path (bsc#1215458).
- idpf: configure resources for RX queues (bsc#1215458).
- idpf: configure resources for TX queues (bsc#1215458).
- idpf: fix potential use-after-free in idpf_tso() (bsc#1215458).
- idpf: initialize interrupts and enable vport (bsc#1215458).
- idpf: set scheduling mode for completion queue (bsc#1215458).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Do not clobber preset voltage/temperature thresholds (git-fixes).
- iio: exynos-adc: request second interupt only when touchscreen mode is used (git-fixes).
- irqchip/stm32-exti: add missing DT IRQ flag translation (git-fixes).
- leds: pwm: Do not disable the PWM when the LED should be off (git-fixes).
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (git-fixes).
- leds: turris-omnia: Do not use SMBUS calls (git-fixes).
- lsm: fix default return value for inode_getsecctx (git-fixes).
- lsm: fix default return value for vm_enough_memory (git-fixes).
- media: bttv: fix use after free error due to btv-&gt;timeout timer (git-fixes).
- media: ccs: Correctly initialise try compose rectangle (git-fixes).
- media: ccs: Fix driver quirk struct documentation (git-fixes).
- media: cedrus: Fix clock/reset sequence (git-fixes).
- media: cobalt: Use FIELD_GET() to extract Link Width (git-fixes).
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (git-fixes).
- media: i2c: max9286: Fix some redundant of_node_put() calls (git-fixes).
- media: imon: fix access to invalid resource for the second interface (git-fixes).
- media: lirc: drop trailing space from scancode transmit (git-fixes).
- media: qcom: camss: Fix VFE-17x vfe_disable_output() (git-fixes).
- media: qcom: camss: Fix missing vfe_lite clocks check (git-fixes).
- media: qcom: camss: Fix pm_domain_on sequence in probe (git-fixes).
- media: qcom: camss: Fix vfe_get() error jump (git-fixes).
- media: sharp: fix sharp encoding (git-fixes).
- media: siano: Drop unnecessary error check for debugfs_create_dir/file() (git-fixes).
- media: venus: hfi: add checks to handle capabilities from firmware (git-fixes).
- media: venus: hfi: add checks to perform sanity on queue pointers (git-fixes).
- media: venus: hfi: fix the check to handle session buffer requirement (git-fixes).
- media: venus: hfi_parser: Add check to keep the number of codecs within range (git-fixes).
- media: vidtv: mux: Add check and kfree for kstrdup (git-fixes).
- media: vidtv: psi: Add check for kstrdup (git-fixes).
- media: vivid: avoid integer overflow (git-fixes).
- mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs (git-fixes).
- mfd: core: Ensure disabled devices are skipped without aborting (git-fixes).
- mfd: dln2: Fix double put in dln2_probe (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures (git-fixes).
- misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller (git-fixes).
- mm/hmm: fault non-owner device private entries (bsc#1216844, jsc#PED-7237, git-fixes).
- mmc: block: Be sure to wait while busy in CQE error recovery (git-fixes).
- mmc: block: Do not lose cache flush during CQE error recovery (git-fixes).
- mmc: block: Retry commands in CQE error recovery (git-fixes).
- mmc: cqhci: Fix task clearing in CQE error recovery (git-fixes).
- mmc: cqhci: Increase recovery halt timeout (git-fixes).
- mmc: cqhci: Warn of halt or task clear failure (git-fixes).
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR (git-fixes).
- mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 (git-fixes).
- mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER (git-fixes).
- mmc: sdhci_am654: fix start loop index for TAP value parsing (git-fixes).
- mmc: vub300: fix an error code (git-fixes).
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (git-fixes).
- mt76: dma: use kzalloc instead of devm_kzalloc for txwi (git-fixes).
- mtd: cfi_cmdset_0001: Byte swap OTP info (git-fixes).
- mtd: rawnand: arasan: Include ECC syndrome along with in-band data while checking for ECC failure (git-fixes).
- net-memcg: Fix scope of sockmem pressure indicators (bsc#1216759).
- net: Avoid address overwrite in kernel_connect (bsc#1216861).
- net: add macro netif_subqueue_completed_wake (bsc#1215458).
- net: fix use-after-free in tw_timer_handler (bsc#1217195).
- net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (git-fixes).
- net: mana: Fix return type of mana_start_xmit() (git-fixes).
- net: piggy back on the memory barrier in bql when waking queues (bsc#1215458).
- net: provide macros for commonly copied lockless queue stop/wake code (bsc#1215458).
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg (git-fixes).
- nvme: update firmware version after commit (bsc#1215292).
- pcmcia: cs: fix possible hung task and memory leak pccardd() (git-fixes).
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (git-fixes).
- pcmcia: ds: fix refcount leak in pcmcia_device_add() (git-fixes).
- pinctrl: avoid reload of p state in list iteration (git-fixes).
- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (git-fixes).
- platform/x86: wmi: Fix opening of char device (git-fixes).
- platform/x86: wmi: Fix probe failure when failing to register WMI devices (git-fixes).
- platform/x86: wmi: remove unnecessary initializations (git-fixes).
- powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
- pwm: Fix double shift bug (git-fixes).
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (git-fixes).
- pwm: sti: Reduce number of allocations and drop usage of chip_data (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe (git-fixes).
- r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() (git-fixes).
- r8152: Check for unplug in rtl_phy_patch_request() (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec (git-fixes).
- r8152: Release firmware if we have an error in probe (git-fixes).
- r8152: Run the unload routine if we have errors during probe (git-fixes).
- regmap: Ensure range selector registers are updated after cache sync (git-fixes).
- regmap: debugfs: Fix a erroneous check after snprintf() (git-fixes).
- regmap: prevent noinc writes from clobbering cache (git-fixes).
- s390/ap: fix AP bus crash on early config change callback invocation (git-fixes bsc#1217687).
- s390/cio: unregister device when the only path is gone (git-fixes bsc#1217609).
- s390/cmma: fix detection of DAT pages (LTC#203997 bsc#1217086).
- s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir (LTC#203997 bsc#1217086).
- s390/cmma: fix initial kernel address space page table walk (LTC#203997 bsc#1217086).
- s390/crashdump: fix TOD programmable field size (git-fixes bsc#1217205).
- s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124).
- s390/dasd: protect device queue against concurrent access (git-fixes bsc#1217515).
- s390/dasd: use correct number of retries for ERP requests (git-fixes bsc#1217598).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976 git-fixes).
- s390/mm: add missing arch_set_page_dat() call to gmap allocations (LTC#203997 bsc#1217086).
- s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() (LTC#203997 bsc#1217086).
- s390/pkey: fix/harmonize internal keyblob headers (git-fixes bsc#1217200).
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (git-fixes bsc#1217599).
- sbsa_gwdt: Calculate timeout with 64-bit math (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.16 patches (bsc#1217731).
- scsi: lpfc: Correct maximum PCI function value for RAS fw logging (bsc#1217731).
- scsi: lpfc: Eliminate unnecessary relocking in lpfc_check_nlp_post_devloss() (bsc#1217731).
- scsi: lpfc: Enhance driver logging for selected discovery events (bsc#1217731).
- scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (bsc#1217731).
- scsi: lpfc: Fix possible file string name overflow when updating firmware (bsc#1217731).
- scsi: lpfc: Introduce LOG_NODE_VERBOSE messaging flag (bsc#1217124).
- scsi: lpfc: Refactor and clean up mailbox command memory free (bsc#1217731).
- scsi: lpfc: Reject received PRLIs with only initiator fcn role for NPIV ports (bsc#1217124).
- scsi: lpfc: Remove unnecessary zero return code assignment in lpfc_sli4_hba_setup (bsc#1217124).
- scsi: lpfc: Return early in lpfc_poll_eratt() when the driver is unloading (bsc#1217731).
- scsi: lpfc: Treat IOERR_SLI_DOWN I/O completion status the same as pci offline (bsc#1217124).
- scsi: lpfc: Update lpfc version to 14.2.0.15 (bsc#1217124).
- scsi: lpfc: Update lpfc version to 14.2.0.16 (bsc#1217731).
- scsi: lpfc: Validate ELS LS_ACC completion payload (bsc#1217124).
- scsi: qla2xxx: Fix double free of dsd_list during driver load (git-fixes).
- scsi: qla2xxx: Use FIELD_GET() to extract PCIe capability fields (git-fixes).
- selftests/efivarfs: create-read: fix a resource leak (git-fixes).
- selftests/pidfd: Fix ksft print formats (git-fixes).
- selftests/resctrl: Ensure the benchmark commands fits to its array (git-fixes).
- selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests (git-fixes).
- selftests/resctrl: Remove duplicate feature check from CMT test (git-fixes).
- seq_buf: fix a misleading comment (git-fixes).
- serial: exar: Revert &quot;serial: exar: Add support for Sealevel 7xxxC serial cards&quot; (git-fixes).
- serial: meson: Use platform_get_irq() to get the interrupt (git-fixes).
- soc: qcom: llcc: Handle a second device without data corruption (git-fixes).
- spi: nxp-fspi: use the correct ioremap function (git-fixes).
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (git-fixes).
- spi: tegra: Fix missing IRQ check in tegra_slink_probe() (git-fixes).
- staging: media: ipu3: remove ftrace-like logging (git-fixes).
- string.h: add array-wrappers for (v)memdup_user() (git-fixes).
- supported.conf: marked idpf supported
- thermal: core: prevent potential string overflow (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- tty/sysrq: replace smp_processor_id() with get_cpu() (git-fixes).
- tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks (git-fixes).
- tty: 8250: Add support for Brainboxes UP cards (git-fixes).
- tty: 8250: Add support for Intashield IS-100 (git-fixes).
- tty: 8250: Add support for Intashield IX cards (git-fixes).
- tty: 8250: Add support for additional Brainboxes PX cards (git-fixes).
- tty: 8250: Add support for additional Brainboxes UC cards (git-fixes).
- tty: 8250: Fix port count of PX-257 (git-fixes).
- tty: 8250: Fix up PX-803/PX-857 (git-fixes).
- tty: 8250: Remove UC-257 and UC-431 (git-fixes).
- tty: Fix uninit-value access in ppp_sync_receive() (git-fixes).
- tty: n_gsm: fix race condition in status line change on dead connections (git-fixes).
- tty: serial: meson: fix hard LOCKUP on crtscts mode (git-fixes).
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (git-fixes).
- tty: vcc: Add check for kstrdup() in vcc_probe() (git-fixes).
- usb: cdnsp: Fix deadlock issue during using NCM gadget (git-fixes).
- usb: chipidea: Fix DMA overwrite for Tegra (git-fixes).
- usb: chipidea: Simplify Tegra DMA alignment code (git-fixes).
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (git-fixes).
- usb: dwc3: Fix default mode initialization (git-fixes).
- usb: dwc3: set the dma max_seg_size (git-fixes).
- usb: gadget: f_ncm: Always set current gadget in ncm_bind() (git-fixes).
- usb: raw-gadget: properly handle interrupted requests (git-fixes).
- usb: storage: set 1.50 as the lower bcdDevice for older &quot;Super Top&quot; compatibility (git-fixes).
- usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (git-fixes).
- usb: typec: tcpm: Skip hard reset when in error recovery (git-fixes).
- virtchnl: add virtchnl version 2 ops (bsc#1215458).
- wifi: ath10k: Do not touch the CE interrupt registers after power up (git-fixes).
- wifi: ath10k: fix clang-specific fortify warning (git-fixes).
- wifi: ath11k: debugfs: fix to work with multiple PCI devices (git-fixes).
- wifi: ath11k: fix dfs radar event locking (git-fixes).
- wifi: ath11k: fix htt pktlog locking (git-fixes).
- wifi: ath11k: fix temperature event locking (git-fixes).
- wifi: ath9k: fix clang-specific fortify warnings (git-fixes).
- wifi: iwlwifi: Use FW rate for non-data frames (git-fixes).
- wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues (git-fixes).
- wifi: iwlwifi: empty overflow queue during flush (git-fixes).
- wifi: iwlwifi: honor the enable_ini value (git-fixes).
- wifi: iwlwifi: pcie: synchronize IRQs before NAPI (git-fixes).
- wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (git-fixes).
- wifi: mac80211: fix # of MSDU in A-MSDU calculation (git-fixes).
- wifi: mt76: mt7603: rework/fix rx pse hang check (git-fixes).
- wifi: rtlwifi: fix EDCA limit set by BT coexistence (git-fixes).
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- x86/alternative: Add a __alt_reloc_selftest() prototype (git-fixes).
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (git-fixes).
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (git-fixes).
- x86/hyperv: Add HV_EXPOSE_INVARIANT_TSC define (git-fixes).
- x86/hyperv: Improve code for referencing hyperv_pcpu_input_arg (git-fixes).
- x86/hyperv: Make hv_get_nmi_reason public (git-fixes).
- x86/hyperv: fix a warning in mshyperv.h (git-fixes).
- x86/sev: Do not try to parse for the CC blob on non-AMD hardware (git-fixes).
- x86/sev: Fix calculation of end address based on number of pages (git-fixes).
- x86/sev: Use the GHCB protocol when available for SNP CPUID requests (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
- xfs: add attr state machine tracepoints (git-fixes).
- xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909).
- xfs: constify btree function parameters that are not modified (git-fixes).
- xfs: convert AGF log flags to unsigned (git-fixes).
- xfs: convert AGI log flags to unsigned (git-fixes).
- xfs: convert attr type flags to unsigned (git-fixes).
- xfs: convert bmap extent type flags to unsigned (git-fixes).
- xfs: convert bmapi flags to unsigned (git-fixes).
- xfs: convert btree buffer log flags to unsigned (git-fixes).
- xfs: convert buffer flags to unsigned (git-fixes).
- xfs: convert buffer log item flags to unsigned (git-fixes).
- xfs: convert da btree operations flags to unsigned (git-fixes).
- xfs: convert dquot flags to unsigned (git-fixes).
- xfs: convert inode lock flags to unsigned (git-fixes).
- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- xfs: convert quota options flags to unsigned (git-fixes).
- xfs: convert scrub type flags to unsigned (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;blkno&quot;, &quot;block&quot;, or &quot;bno&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;count&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;len&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;offset&quot; (git-fixes).
- xfs: make the key parameters to all btree key comparison functions const (git-fixes).
- xfs: make the key parameters to all btree query range functions const (git-fixes).
- xfs: make the keys and records passed to btree inorder functions const (git-fixes).
- xfs: make the pointer passed to btree set_root functions const (git-fixes).
- xfs: make the start pointer passed to btree alloc_block functions const (git-fixes).
- xfs: make the start pointer passed to btree update_lastrec functions const (git-fixes).
- xfs: mark the record passed into btree init_key functions as const (git-fixes).
- xfs: mark the record passed into xchk_btree functions as const (git-fixes).
- xfs: remove xfs_btree_cur_t typedef (git-fixes).
- xfs: rename i_disk_size fields in ftrace output (git-fixes).
- xfs: resolve fork names in trace output (git-fixes).
- xfs: standardize AG block number formatting in ftrace output (git-fixes).
- xfs: standardize AG number formatting in ftrace output (git-fixes).
- xfs: standardize daddr formatting in ftrace output (git-fixes).
- xfs: standardize inode generation formatting in ftrace output (git-fixes).
- xfs: standardize inode number formatting in ftrace output (git-fixes).
- xfs: standardize remaining xfs_buf length tracepoints (git-fixes).
- xfs: standardize rmap owner number formatting in ftrace output (git-fixes).
- xhci: Enable RPM on controllers that support low-power states (git-fixes).
- xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.100.2" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.100.2.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.100.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.100.2" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.100.2.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.100.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.100.2.150400.24.46.2" arch="src" src="src/kernel-default-base-5.14.21-150400.24.100.2.150400.24.46.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.100.2.150400.24.46.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.100.2.150400.24.46.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.100.2.150400.24.46.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.100.2.150400.24.46.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.100.2" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.100.2.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.100.2.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.100.2" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.100.2.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.100.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.100.2.150400.24.46.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.100.2.150400.24.46.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.100.2.150400.24.46.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-11</id>
    <title>Recommended update for procps</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704198465"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-3244" id="PED-3244" title="https://jira.suse.com/browse/PED-3244" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-6369" id="PED-6369" title="https://jira.suse.com/browse/PED-6369" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-3144" id="PED-3144" title="https://jira.suse.com/browse/PED-3144" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158830" id="1158830" title="&quot;ps -C&quot; does not allow anymore an argument longer than 15 characters" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1029961" id="1029961" title="[META] Finalize UsrMerge" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206798" id="1206798" title="Deprecate the %usrmerged macro" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209122" id="1209122" title="sysctl typo in /usr/lib/sysctl.d/50-default.conf with a leading '-' in the line for -net.ipv4.ping_group_range" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issues:

- Update procps to 3.3.17 (jsc#PED-3244 jsc#PED-6369)

- For support up to 2048 CPU as well (bsc#1185417)
- Allow `-´ as leading character to ignore possible errors on systctl entries (bsc#1209122)
- Get the first CPU summary correct (bsc#1121753)
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build
- Do not truncate output of w with option -n
- Prefer logind over utmp (jsc#PED-3144)
- Don't install translated man pages for non-installed binaries
  (uptime, kill).
- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.

- Update to procps-ng-3.3.17

  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations
  * kill: Pass int to signalled process
  * pgrep: Pass int to signalled process
  * pgrep: Check sanity of SG_ARG_MAX
  * pgrep: Add older than selection
  * pidof: Quiet mode
  * pidof: show worker threads
  * ps.1: Mention stime alias
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option
  * ps: A lot more sorting available
  * pwait: New command waits for a process
  * sysctl: Match systemd directory order
  * sysctl: Document directory order
  * top: ensure config file backward compatibility
  * top: add command line 'e' for symmetry with 'E'
  * top: add '4' toggle for two abreast cpu display
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch
  * vmstat: Wide mode gives wider proc columns
  * watch: Add environment variable for interval
  * watch: Add no linewrap option
  * watch: Support more colors
  * free,uptime,slabtop: complain about extra ops

- Package translations in procps-lang.

- Fix pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.

- Enable pidof by default

- Update to procps-ng-3.3.16

  * library: Increment to 8:2:0

    No removals or functions
    Internal changes only, so revision is incremented.
    Previous version should have been 8:1:0 not 8:0:1

  * docs: Use correct symbols for -h option in free.1
  * docs: ps.1 now warns about command name length
  * docs: install translated man pages
  * pgrep: Match on runstate
  * snice: Fix matching on pid
  * top: can now exploit 256-color terminals
  * top: preserves 'other filters' in configuration file
  * top: can now collapse/expand forest view children
  * top: parent %CPU time includes collapsed children
  * top: improve xterm support for vim navigation keys
  * top: avoid segmentation fault at program termination
  * &quot;ps -C&quot; does not allow anymore an argument longer than 15 characters (bsc#1158830)
</description>
    <pkglist>
      <collection>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="x86_64" src="x86_64/libprocps8-3.3.17-150000.7.37.1.x86_64.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="src" src="src/procps-3.3.17-150000.7.37.1.src.rpm">
          <filename>procps-3.3.17-150000.7.37.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="x86_64" src="x86_64/procps-3.3.17-150000.7.37.1.x86_64.rpm">
          <filename>procps-3.3.17-150000.7.37.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="s390x" src="s390x/libprocps8-3.3.17-150000.7.37.1.s390x.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.s390x.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="s390x" src="s390x/procps-3.3.17-150000.7.37.1.s390x.rpm">
          <filename>procps-3.3.17-150000.7.37.1.s390x.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="ppc64le" src="ppc64le/libprocps8-3.3.17-150000.7.37.1.ppc64le.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.ppc64le.rpm</filename>
        </package>
        <package name="libprocps8" epoch="0" version="3.3.17" release="150000.7.37.1" arch="aarch64" src="aarch64/libprocps8-3.3.17-150000.7.37.1.aarch64.rpm">
          <filename>libprocps8-3.3.17-150000.7.37.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="150000.7.37.1" arch="aarch64" src="aarch64/procps-3.3.17-150000.7.37.1.aarch64.rpm">
          <filename>procps-3.3.17-150000.7.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4731</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702390461"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1084909" id="1084909" title="trackerbug: packages do not build reproducibly from hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210447" id="1210447" title="VUL-0: CVE-2023-2006: kernel: RxRPC Race Condition Privilege Escalation Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214286" id="1214286" title="L3-Question: dwc2 - dwc_otg on Raspberry Pi Compute Module 3 Plus Rev 1.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214976" id="1214976" title="SLES 15 SP5 - kernel: /sys/firmware/ipl/has_secure missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215124" id="1215124" title="SLES 15 SP5 - dasd: fix hanging device after request requeue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215292" id="1215292" title="[Dell SLES 15 SP5 Bug] - nvme-cli: nvme list does not reflect new version after performing firmware update of a NVMe device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215420" id="1215420" title="VUL-0: CVE-2023-4244: kernel-source-rt,kernel-source-azure,kernel-source: netfilter: nf_tables UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215458" id="1215458" title="Intel IDPF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215710" id="1215710" title="VUL-0: CVE-2023-5158: kernel-source,kernel-source-azure,kernel-source-rt: Possible DOS from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216058" id="1216058" title="VUL-0: CVE-2023-45863: kernel: renaming a network device can cause a buffer overflow on the kernel heap, upstream 3bb2a01caa81" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216105" id="1216105" title="s390/dasd: fix command reject error on ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216259" id="1216259" title="VUL-0: CVE-2023-45871: kernel: buffer size may not be adequate for frames larger than the MTU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216584" id="1216584" title="VUL-0: CVE-2023-5717: kernel: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216693" id="1216693" title="VUL-0: CVE-2023-46862: kernel: NULL pointer dereference in io_uring_show_fdinfo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216759" id="1216759" title="net-memcg: Fix scope of sockmem pressure indicators" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216761" id="1216761" title="kernel/fork: beware of __put_task_struct() calling context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216844" id="1216844" title="Partner-L3: Heterogeneous Memory Management (HMM) Mod Urgently Needed in 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216861" id="1216861" title="Request for application of patch for kernel issue with cilium and NFS shares" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216909" id="1216909" title="Memory Allocation Failure is Not Checked in the XFS, Causing NULL Dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216959" id="1216959" title="VUL-0: CVE-2023-25775: kernel: Improper access control in the Intel(R) Ethernet Controller RDMA driver or linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216965" id="1216965" title="VUL-0: CVE-2023-39198: kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216976" id="1216976" title="VUL-0: CVE-2023-39197: kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="L3: [SLES 15 SP5] BUG: scheduling while atomic" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217068" id="1217068" title="VUL-0: CVE-2023-6039: kernel-source,kernel-source-azure,kernel-source-rt: kernel: use-after-free in in lan78xx_disconnect() in lan78xx driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217086" id="1217086" title="SLES 15 SP5 - kernel: possible incorrect TLB purging with cmma nodat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217124" id="1217124" title="Update Broadcom Emulex lpfc driver to 14.2.0.15" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217140" id="1217140" title="Partner-L3: aplay hangs after so many iterations of playing any wav file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217195" id="1217195" title="L3: Kernel crash in tw_timer_handler — ref:_00D1igLOd._500Tr0k1ai:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217200" id="1217200" title="s390/pkey: fix/harmonize internal keyblob headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217205" id="1217205" title="s390/crashdump: fix TOD programmable field size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217332" id="1217332" title="VUL-0: CVE-2023-6176: kernel-source,kernel-source-azure,kernel-source-rt: local dos vulnerability in scatterwalk_copychunks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217366" id="1217366" title="Boot hangs due to kernel Oops on HPE DL380 Gen10 with P408i-a RAID controller [ref:_00D1igLOd._500Tr141xr:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217598" id="1217598" title="s390/dasd: use correct number of retries for ERP requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217599" id="1217599" title="s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217609" id="1217609" title="s390/cio: unregister device when the only path is gone" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217687" id="1217687" title="s390/ap: fix AP bus crash on early config change callback invocation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217731" id="1217731" title="Update Broadcom Emulex lpfc driver to 14.2.0.16" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217780" id="1217780" title="5e1d824f9a28 powerpc: Don't clobber f0/vs0 during fp|altivec register save" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" id="CVE-2023-6176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" id="CVE-2023-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" id="CVE-2023-39197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" id="CVE-2023-4244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4244" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" id="CVE-2023-6039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" id="CVE-2023-45863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" id="CVE-2023-5158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5158" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" id="CVE-2023-45871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" id="CVE-2023-5717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5717" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" id="CVE-2023-39198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" id="CVE-2023-25775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" id="CVE-2023-46862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46862" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3184" id="PED-3184" title="https://jira.suse.com/browse/PED-3184" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7237" id="PED-7237" title="https://jira.suse.com/browse/PED-7237" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).
- CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447).
- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068).
- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
- CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host side of a virtio ring (bsc#1215710).
- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).
- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).
- CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver (bsc#1216959).
- CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693).

The following non-security bugs were fixed:

- ACPI: FPDT: properly handle invalid FPDT subtables (git-fixes).
- ACPI: resource: Do IRQ override on TongFang GMxXGxx (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (git-fixes).
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (git-fixes).
- ALSA: hda/realtek - Add Dell ALC295 to pin fall back table (git-fixes).
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (git-fixes).
- ALSA: hda/realtek: Add quirks for HP Laptops (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 255 G10 (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 255 G8 (git-fixes).
- ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140).
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream (git-fixes).
- ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() (git-fixes).
- ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time (git-fixes).
- ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection (git-fixes).
- ALSA: info: Fix potential deadlock at disconnection (git-fixes).
- ARM: 9321/1: memset: cast the constant byte to unsigned char (git-fixes).
- ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (git-fixes).
- ASoC: ams-delta.c: use component after check (git-fixes).
- ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix (git-fixes).
- ASoC: cs35l41: Undo runtime PM changes at driver exit time (git-fixes).
- ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler (git-fixes).
- ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe (git-fixes).
- ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described (git-fixes).
- ASoC: hdmi-codec: register hpd callback on component probe (git-fixes).
- ASoC: rt5650: fix the wrong result of key button (git-fixes).
- ASoC: simple-card: fixup asoc_simple_probe() error handling (git-fixes).
- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (git-fixes).
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (git-fixes).
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (git-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (git-fixes).
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check (git-fixes).
- Disable Loongson drivers Loongson is a mips architecture, it does not make sense to build Loongson drivers on other architectures.
- Documentation: networking: correct possessive &quot;its&quot; (bsc#1215458).
- Drivers: hv: vmbus: Remove unused extern declaration vmbus_ontimer() (git-fixes).
- Ensure ia32_emulation is always enabled for kernel-obs-build If ia32_emulation is disabled by default, ensure it is enabled back for OBS kernel to allow building 32bit binaries (jsc#PED-3184) [ms: Always pass the parameter, no need to grep through the config which may not be very reliable]
- Fix termination state for idr_for_each_entry_ul() (git-fixes).
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (git-fixes).
- HID: hyperv: Replace one-element array with flexible-array member (git-fixes).
- HID: hyperv: avoid struct memcpy overrun warning (git-fixes).
- HID: hyperv: remove unused struct synthhid_msg (git-fixes).
- HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround (git-fixes).
- HID: logitech-hidpp: Do not restart IO, instead defer hid_connect() only (git-fixes).
- HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() (git-fixes).
- HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk (git-fixes).
- HID: logitech-hidpp: Revert &quot;Do not restart communication if not necessary&quot; (git-fixes).
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (git-fixes).
- Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (git-fixes).
- Input: xpad - add VID for Turtle Beach controllers (git-fixes).
- PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() (git-fixes).
- PCI/sysfs: Protect driver's D3cold preference from user space (git-fixes).
- PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1215458).
- PCI: Extract ATS disabling to a helper function (bsc#1215458).
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (git-fixes).
- PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk (git-fixes).
- PCI: Use FIELD_GET() to extract Link Width (git-fixes).
- PCI: exynos: Do not discard .remove() callback (git-fixes).
- PCI: keystone: Do not discard .probe() callback (git-fixes).
- PCI: keystone: Do not discard .remove() callback (git-fixes).
- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (git-fixes).
- PM / devfreq: rockchip-dfi: Make pmu regmap mandatory (git-fixes).
- PM: hibernate: Use __get_safe_page() rather than touching the list (git-fixes).
- USB: dwc2: write HCINT with INTMASK applied (bsc#1214286).
- USB: dwc3: qcom: fix ACPI platform device leak (git-fixes).
- USB: dwc3: qcom: fix resource leaks on probe deferral (git-fixes).
- USB: dwc3: qcom: fix software node leak on probe errors (git-fixes).
- USB: dwc3: qcom: fix wakeup after probe deferral (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: add Luat Air72*U series products (git-fixes).
- USB: serial: option: do not claim interface 4 for ZTE MF290 (git-fixes).
- USB: serial: option: fix FM101R-GL defines (git-fixes).
- USB: usbip: fix stub_dev hub disconnect (git-fixes).
- arm/xen: fix xen_vcpu_info allocation alignment (git-fixes).
- arm64: Add Cortex-A520 CPU part definition (git-fixes)
- arm64: allow kprobes on EL0 handlers (git-fixes)
- arm64: armv8_deprecated move emulation functions (git-fixes)
- arm64: armv8_deprecated: fix unused-function error (git-fixes)
- arm64: armv8_deprecated: fold ops into insn_emulation (git-fixes)
- arm64: armv8_deprecated: move aarch32 helper earlier (git-fixes)
- arm64: armv8_deprecated: rework deprected instruction handling (git-fixes)
- arm64: consistently pass ESR_ELx to die() (git-fixes)
- arm64: die(): pass 'err' as long (git-fixes)
- arm64: factor insn read out of call_undef_hook() (git-fixes)
- arm64: factor out EL1 SSBS emulation hook (git-fixes)
- arm64: report EL1 UNDEFs better (git-fixes)
- arm64: rework BTI exception handling (git-fixes)
- arm64: rework EL0 MRS emulation (git-fixes)
- arm64: rework FPAC exception handling (git-fixes)
- arm64: split EL0/EL1 UNDEF handlers (git-fixes)
- ata: pata_isapnp: Add missing error check for devm_ioport_map() (git-fixes).
- atl1c: Work around the DMA RX overflow issue (git-fixes).
- atm: iphase: Do PCI error checks on own line (git-fixes).
- blk-mq: Do not clear driver tags own mapping (bsc#1217366).
- blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (bsc#1217366).
- bluetooth: Add device 0bda:887b to device tables (git-fixes).
- bluetooth: Add device 13d3:3571 to device tables (git-fixes).
- can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (git-fixes).
- can: dev: can_restart(): do not crash kernel if carrier is OK (git-fixes).
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (git-fixes).
- can: isotp: add local echo tx processing for consecutive frames (git-fixes).
- can: isotp: fix race between isotp_sendsmg() and isotp_release() (git-fixes).
- can: isotp: fix tx state handling for echo tx processing (git-fixes).
- can: isotp: handle wait_event_interruptible() return values (git-fixes).
- can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (git-fixes).
- can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (git-fixes).
- can: isotp: remove re-binding of bound socket (git-fixes).
- can: isotp: sanitize CAN ID checks in isotp_bind() (git-fixes).
- can: isotp: set max PDU size to 64 kByte (git-fixes).
- can: isotp: split tx timer into transmission and timeout (git-fixes).
- can: sja1000: Fix comment (git-fixes).
- clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (git-fixes).
- clk: imx: Select MXC_CLK for CLK_IMX8QXP (git-fixes).
- clk: imx: imx8mq: correct error handling path (git-fixes).
- clk: imx: imx8qxp: Fix elcdif_pll clock (git-fixes).
- clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (git-fixes).
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (git-fixes).
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (git-fixes).
- clk: npcm7xx: Fix incorrect kfree (git-fixes).
- clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (git-fixes).
- clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM (git-fixes).
- clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks (git-fixes).
- clk: qcom: mmcc-msm8998: Do not check halt bit on some branch clks (git-fixes).
- clk: qcom: mmcc-msm8998: Fix the SMMU GDSC (git-fixes).
- clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (git-fixes).
- clk: ti: Add ti_dt_clk_name() helper to use clock-output-names (git-fixes).
- clk: ti: Update component clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name() (git-fixes).
- clk: ti: change ti_clk_register[_omap_hw]() API (git-fixes).
- clk: ti: fix double free in of_ti_divider_clk_setup() (git-fixes).
- crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (git-fixes).
- crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (git-fixes).
- crypto: hisilicon/hpre - Fix a erroneous check after snprintf() (git-fixes).
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (git-fixes).
- dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (git-fixes).
- dmaengine: stm32-mdma: correct desc prep when channel running (git-fixes).
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors (git-fixes).
- docs: net: move the probe and open/close sections of driver.rst up (bsc#1215458).
- docs: net: reformat driver.rst from a list to sections (bsc#1215458).
- docs: net: use C syntax highlight in driver.rst (bsc#1215458).
- drm/amd/display: Avoid NULL dereference of timing generator (git-fixes).
- drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox (git-fixes).
- drm/amd/display: remove useless check in should_enable_fbc() (git-fixes).
- drm/amd/display: use full update for clip size increase of large plane source (git-fixes).
- drm/amd/pm: Handle non-terminated overdrive commands (git-fixes).
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (git-fixes).
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (git-fixes).
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (git-fixes).
- drm/amdgpu: Fix potential null pointer derefernce (git-fixes).
- drm/amdgpu: do not use ATRM for external devices (git-fixes).
- drm/amdgpu: fix error handling in amdgpu_bo_list_get() (git-fixes).
- drm/amdgpu: fix software pci_unplug on some chips (git-fixes).
- drm/amdkfd: Fix a race condition of vram buffer unref in svm code (git-fixes).
- drm/amdkfd: Fix shift out-of-bounds issue (git-fixes).
- drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code (git-fixes).
- drm/bridge: Fix kernel-doc typo in desc of output_bus_cfg in drm_bridge_state (git-fixes).
- drm/bridge: lt8912b: Add missing drm_bridge_attach call (git-fixes).
- drm/bridge: lt8912b: Fix bridge_detach (git-fixes).
- drm/bridge: lt8912b: Fix crash on bridge detach (git-fixes).
- drm/bridge: lt8912b: Manually disable HPD only if it was enabled (git-fixes).
- drm/bridge: lt8912b: Register and attach our DSI device at probe (git-fixes).
- drm/bridge: lt8912b: Switch to devm MIPI-DSI helpers (git-fixes).
- drm/bridge: lt9611uxc: Register and attach our DSI device at probe (git-fixes).
- drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers (git-fixes).
- drm/bridge: lt9611uxc: fix the race in the error path (git-fixes).
- drm/bridge: tc358768: Disable non-continuous clock mode (git-fixes).
- drm/bridge: tc358768: Fix bit updates (git-fixes).
- drm/bridge: tc358768: Fix use of uninitialized variable (git-fixes).
- drm/gud: Use size_add() in call to struct_size() (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event (git-fixes).
- drm/i915: Fix potential spectre vulnerability (git-fixes).
- drm/komeda: drop all currently held locks if deadlock happens (git-fixes).
- drm/mediatek: Fix iommu fault by swapping FBs after updating plane state (git-fixes).
- drm/mediatek: Fix iommu fault during crtc enabling (git-fixes).
- drm/mipi-dsi: Create devm device attachment (git-fixes).
- drm/mipi-dsi: Create devm device registration (git-fixes).
- drm/msm/dp: skip validity check for DP CTS EDID checksum (git-fixes).
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference (git-fixes).
- drm/panel: fix a possible null pointer dereference (git-fixes).
- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (git-fixes).
- drm/panel: simple: Fix Innolux G101ICE-L01 timings (git-fixes).
- drm/panel: st7703: Pick different reset sequence (git-fixes).
- drm/qxl: prevent memory leak (git-fixes).
- drm/radeon: possible buffer overflow (git-fixes).
- drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() (git-fixes).
- drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (git-fixes).
- drm/rockchip: vop: Fix call to crtc reset helper (git-fixes).
- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (git-fixes).
- drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (git-fixes).
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (git-fixes).
- drm/vc4: fix typo (git-fixes).
- drm: vmwgfx_surface.c: copy user-array safely (git-fixes).
- dt-bindings: usb: hcd: add missing phy name to example (git-fixes).
- dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types (git-fixes).
- fbdev: fsl-diu-fb: mark wr_reg_wa() static (git-fixes).
- fbdev: imsttfb: Fix error path of imsttfb_probe() (git-fixes).
- fbdev: imsttfb: Release framebuffer and dealloc cmap on error path (git-fixes).
- fbdev: imsttfb: fix a resource leak in probe (git-fixes).
- fbdev: imsttfb: fix double free in probe() (git-fixes).
- fbdev: omapfb: Drop unused remove function (git-fixes).
- firewire: core: fix possible memory leak in create_units() (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() (git-fixes).
- gpio: mockup: fix kerneldoc (git-fixes).
- gpio: mockup: remove unused field (git-fixes).
- hid: cp2112: Fix duplicate workqueue initialization (git-fixes).
- hv: simplify sysctl registration (git-fixes).
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (git-fixes).
- hv_netvsc: Mark VF as slave before exposing it to user-mode (git-fixes).
- hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (git-fixes).
- hv_netvsc: fix race of netvsc and VF register_netdevice (git-fixes).
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- i2c: core: Run atomic i2c xfer when !preemptible (git-fixes).
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (git-fixes).
- i2c: dev: copy userspace array safely (git-fixes).
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (git-fixes).
- i2c: iproc: handle invalid slave state (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (git-fixes).
- i2c: sun6i-p2wi: Prevent potential division by zero (git-fixes).
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (git-fixes).
- i3c: master: cdns: Fix reading status register (git-fixes).
- i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data (git-fixes).
- i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen (git-fixes).
- i3c: master: svc: fix check wrong status register in irq handler (git-fixes).
- i3c: master: svc: fix ibi may not return mandatory data byte (git-fixes).
- i3c: master: svc: fix race condition in ibi work thread (git-fixes).
- i3c: master: svc: fix wrong data return when IBI happen during start frame (git-fixes).
- i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler (git-fixes).
- i915/perf: Fix NULL deref bugs with drm_dbg() calls (git-fixes).
- idpf: add RX splitq napi poll support (bsc#1215458).
- idpf: add SRIOV support and other ndo_ops (bsc#1215458).
- idpf: add TX splitq napi poll support (bsc#1215458).
- idpf: add controlq init and reset checks (bsc#1215458).
- idpf: add core init and interrupt request (bsc#1215458).
- idpf: add create vport and netdev configuration (bsc#1215458).
- idpf: add ethtool callbacks (bsc#1215458).
- idpf: add module register and probe functionality (bsc#1215458).
- idpf: add ptypes and MAC filter support (bsc#1215458).
- idpf: add singleq start_xmit and napi poll (bsc#1215458).
- idpf: add splitq start_xmit (bsc#1215458).
- idpf: cancel mailbox work in error path (bsc#1215458).
- idpf: configure resources for RX queues (bsc#1215458).
- idpf: configure resources for TX queues (bsc#1215458).
- idpf: fix potential use-after-free in idpf_tso() (bsc#1215458).
- idpf: initialize interrupts and enable vport (bsc#1215458).
- idpf: set scheduling mode for completion queue (bsc#1215458).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Do not clobber preset voltage/temperature thresholds (git-fixes).
- iio: exynos-adc: request second interupt only when touchscreen mode is used (git-fixes).
- irqchip/stm32-exti: add missing DT IRQ flag translation (git-fixes).
- kabi/severities: ignore kabi in rxrpc (bsc#1210447) The rxrpc module is built since SLE15-SP3 but it is not shipped as part of any SLE product, only in Leap (in kernel-*-optional).
- kernel-binary: suse-module-tools is also required when installed Requires(pre) adds dependency for the specific sciptlet. However, suse-module-tools also ships modprobe.d files which may be needed at posttrans time or any time the kernel is on the system for generating ramdisk. Add plain Requires as well.
- kernel-source: Move provides after sources
- kernel/fork: beware of __put_task_struct() calling context (bsc#1189998 (PREEMPT_RT prerequisite backports)).
- kernel/fork: beware of __put_task_struct() calling context (bsc#1216761).
- leds: pwm: Do not disable the PWM when the LED should be off (git-fixes).
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (git-fixes).
- leds: turris-omnia: Do not use SMBUS calls (git-fixes).
- lsm: fix default return value for inode_getsecctx (git-fixes).
- lsm: fix default return value for vm_enough_memory (git-fixes).
- media: bttv: fix use after free error due to btv-&gt;timeout timer (git-fixes).
- media: ccs: Correctly initialise try compose rectangle (git-fixes).
- media: ccs: Fix driver quirk struct documentation (git-fixes).
- media: cedrus: Fix clock/reset sequence (git-fixes).
- media: cobalt: Use FIELD_GET() to extract Link Width (git-fixes).
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (git-fixes).
- media: i2c: max9286: Fix some redundant of_node_put() calls (git-fixes).
- media: imon: fix access to invalid resource for the second interface (git-fixes).
- media: lirc: drop trailing space from scancode transmit (git-fixes).
- media: qcom: camss: Fix VFE-17x vfe_disable_output() (git-fixes).
- media: qcom: camss: Fix missing vfe_lite clocks check (git-fixes).
- media: qcom: camss: Fix pm_domain_on sequence in probe (git-fixes).
- media: qcom: camss: Fix vfe_get() error jump (git-fixes).
- media: sharp: fix sharp encoding (git-fixes).
- media: siano: Drop unnecessary error check for debugfs_create_dir/file() (git-fixes).
- media: venus: hfi: add checks to handle capabilities from firmware (git-fixes).
- media: venus: hfi: add checks to perform sanity on queue pointers (git-fixes).
- media: venus: hfi: fix the check to handle session buffer requirement (git-fixes).
- media: venus: hfi_parser: Add check to keep the number of codecs within range (git-fixes).
- media: vidtv: mux: Add check and kfree for kstrdup (git-fixes).
- media: vidtv: psi: Add check for kstrdup (git-fixes).
- media: vivid: avoid integer overflow (git-fixes).
- mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs (git-fixes).
- mfd: core: Ensure disabled devices are skipped without aborting (git-fixes).
- mfd: dln2: Fix double put in dln2_probe (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures (git-fixes).
- misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller (git-fixes).
- mm/hmm: fault non-owner device private entries (bsc#1216844, jsc#PED-7237, git-fixes).
- mmc: block: Be sure to wait while busy in CQE error recovery (git-fixes).
- mmc: block: Do not lose cache flush during CQE error recovery (git-fixes).
- mmc: block: Retry commands in CQE error recovery (git-fixes).
- mmc: cqhci: Fix task clearing in CQE error recovery (git-fixes).
- mmc: cqhci: Increase recovery halt timeout (git-fixes).
- mmc: cqhci: Warn of halt or task clear failure (git-fixes).
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR (git-fixes).
- mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 (git-fixes).
- mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER (git-fixes).
- mmc: sdhci_am654: fix start loop index for TAP value parsing (git-fixes).
- mmc: vub300: fix an error code (git-fixes).
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (git-fixes).
- mt76: dma: use kzalloc instead of devm_kzalloc for txwi (git-fixes).
- mtd: cfi_cmdset_0001: Byte swap OTP info (git-fixes).
- mtd: rawnand: arasan: Include ECC syndrome along with in-band data while checking for ECC failure (git-fixes).
- net-memcg: Fix scope of sockmem pressure indicators (bsc#1216759).
- net: Avoid address overwrite in kernel_connect (bsc#1216861).
- net: add macro netif_subqueue_completed_wake (bsc#1215458).
- net: fix use-after-free in tw_timer_handler (bsc#1217195).
- net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (git-fixes).
- net: mana: Fix return type of mana_start_xmit() (git-fixes).
- net: piggy back on the memory barrier in bql when waking queues (bsc#1215458).
- net: provide macros for commonly copied lockless queue stop/wake code (bsc#1215458).
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg (git-fixes).
- nvme: update firmware version after commit (bsc#1215292).
- pcmcia: cs: fix possible hung task and memory leak pccardd() (git-fixes).
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (git-fixes).
- pcmcia: ds: fix refcount leak in pcmcia_device_add() (git-fixes).
- pinctrl: avoid reload of p state in list iteration (git-fixes).
- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (git-fixes).
- platform/x86: wmi: Fix opening of char device (git-fixes).
- platform/x86: wmi: Fix probe failure when failing to register WMI devices (git-fixes).
- platform/x86: wmi: remove unnecessary initializations (git-fixes).
- powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
- pwm: Fix double shift bug (git-fixes).
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (git-fixes).
- pwm: sti: Reduce number of allocations and drop usage of chip_data (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe (git-fixes).
- r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() (git-fixes).
- r8152: Check for unplug in rtl_phy_patch_request() (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec (git-fixes).
- r8152: Release firmware if we have an error in probe (git-fixes).
- r8152: Run the unload routine if we have errors during probe (git-fixes).
- regmap: Ensure range selector registers are updated after cache sync (git-fixes).
- regmap: debugfs: Fix a erroneous check after snprintf() (git-fixes).
- regmap: prevent noinc writes from clobbering cache (git-fixes).
- s390/ap: fix AP bus crash on early config change callback invocation (git-fixes bsc#1217687).
- s390/cio: unregister device when the only path is gone (git-fixes bsc#1217609).
- s390/cmma: fix detection of DAT pages (LTC#203997 bsc#1217086).
- s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir (LTC#203997 bsc#1217086).
- s390/cmma: fix initial kernel address space page table walk (LTC#203997 bsc#1217086).
- s390/crashdump: fix TOD programmable field size (git-fixes bsc#1217205).
- s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124).
- s390/dasd: protect device queue against concurrent access (git-fixes bsc#1217515).
- s390/dasd: use correct number of retries for ERP requests (git-fixes bsc#1217598).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976 git-fixes).
- s390/mm: add missing arch_set_page_dat() call to gmap allocations (LTC#203997 bsc#1217086).
- s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() (LTC#203997 bsc#1217086).
- s390/pkey: fix/harmonize internal keyblob headers (git-fixes bsc#1217200).
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (git-fixes bsc#1217599).
- sbsa_gwdt: Calculate timeout with 64-bit math (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.16 patches (bsc#1217731).
- scsi: lpfc: Correct maximum PCI function value for RAS fw logging (bsc#1217731).
- scsi: lpfc: Eliminate unnecessary relocking in lpfc_check_nlp_post_devloss() (bsc#1217731).
- scsi: lpfc: Enhance driver logging for selected discovery events (bsc#1217731).
- scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (bsc#1217731).
- scsi: lpfc: Fix possible file string name overflow when updating firmware (bsc#1217731).
- scsi: lpfc: Introduce LOG_NODE_VERBOSE messaging flag (bsc#1217124).
- scsi: lpfc: Refactor and clean up mailbox command memory free (bsc#1217731).
- scsi: lpfc: Reject received PRLIs with only initiator fcn role for NPIV ports (bsc#1217124).
- scsi: lpfc: Remove unnecessary zero return code assignment in lpfc_sli4_hba_setup (bsc#1217124).
- scsi: lpfc: Return early in lpfc_poll_eratt() when the driver is unloading (bsc#1217731).
- scsi: lpfc: Treat IOERR_SLI_DOWN I/O completion status the same as pci offline (bsc#1217124).
- scsi: lpfc: Update lpfc version to 14.2.0.15 (bsc#1217124).
- scsi: lpfc: Update lpfc version to 14.2.0.16 (bsc#1217731).
- scsi: lpfc: Validate ELS LS_ACC completion payload (bsc#1217124).
- scsi: qla2xxx: Fix double free of dsd_list during driver load (git-fixes).
- scsi: qla2xxx: Use FIELD_GET() to extract PCIe capability fields (git-fixes).
- selftests/efivarfs: create-read: fix a resource leak (git-fixes).
- selftests/pidfd: Fix ksft print formats (git-fixes).
- selftests/resctrl: Ensure the benchmark commands fits to its array (git-fixes).
- selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests (git-fixes).
- selftests/resctrl: Remove duplicate feature check from CMT test (git-fixes).
- seq_buf: fix a misleading comment (git-fixes).
- serial: exar: Revert &quot;serial: exar: Add support for Sealevel 7xxxC serial cards&quot; (git-fixes).
- serial: meson: Use platform_get_irq() to get the interrupt (git-fixes).
- soc: qcom: llcc: Handle a second device without data corruption (git-fixes).
- spi: nxp-fspi: use the correct ioremap function (git-fixes).
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (git-fixes).
- spi: tegra: Fix missing IRQ check in tegra_slink_probe() (git-fixes).
- staging: media: ipu3: remove ftrace-like logging (git-fixes).
- string.h: add array-wrappers for (v)memdup_user() (git-fixes).
- supported.conf: marked idpf supported
- thermal: core: prevent potential string overflow (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- tty/sysrq: replace smp_processor_id() with get_cpu() (git-fixes).
- tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks (git-fixes).
- tty: 8250: Add support for Brainboxes UP cards (git-fixes).
- tty: 8250: Add support for Intashield IS-100 (git-fixes).
- tty: 8250: Add support for Intashield IX cards (git-fixes).
- tty: 8250: Add support for additional Brainboxes PX cards (git-fixes).
- tty: 8250: Add support for additional Brainboxes UC cards (git-fixes).
- tty: 8250: Fix port count of PX-257 (git-fixes).
- tty: 8250: Fix up PX-803/PX-857 (git-fixes).
- tty: 8250: Remove UC-257 and UC-431 (git-fixes).
- tty: Fix uninit-value access in ppp_sync_receive() (git-fixes).
- tty: n_gsm: fix race condition in status line change on dead connections (git-fixes).
- tty: serial: meson: fix hard LOCKUP on crtscts mode (git-fixes).
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (git-fixes).
- tty: vcc: Add check for kstrdup() in vcc_probe() (git-fixes).
- usb: cdnsp: Fix deadlock issue during using NCM gadget (git-fixes).
- usb: chipidea: Fix DMA overwrite for Tegra (git-fixes).
- usb: chipidea: Simplify Tegra DMA alignment code (git-fixes).
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (git-fixes).
- usb: dwc3: Fix default mode initialization (git-fixes).
- usb: dwc3: set the dma max_seg_size (git-fixes).
- usb: gadget: f_ncm: Always set current gadget in ncm_bind() (git-fixes).
- usb: raw-gadget: properly handle interrupted requests (git-fixes).
- usb: storage: set 1.50 as the lower bcdDevice for older &quot;Super Top&quot; compatibility (git-fixes).
- usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (git-fixes).
- usb: typec: tcpm: Skip hard reset when in error recovery (git-fixes).
- virtchnl: add virtchnl version 2 ops (bsc#1215458).
- wifi: ath10k: Do not touch the CE interrupt registers after power up (git-fixes).
- wifi: ath10k: fix clang-specific fortify warning (git-fixes).
- wifi: ath11k: debugfs: fix to work with multiple PCI devices (git-fixes).
- wifi: ath11k: fix dfs radar event locking (git-fixes).
- wifi: ath11k: fix htt pktlog locking (git-fixes).
- wifi: ath11k: fix temperature event locking (git-fixes).
- wifi: ath9k: fix clang-specific fortify warnings (git-fixes).
- wifi: iwlwifi: Use FW rate for non-data frames (git-fixes).
- wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues (git-fixes).
- wifi: iwlwifi: empty overflow queue during flush (git-fixes).
- wifi: iwlwifi: honor the enable_ini value (git-fixes).
- wifi: iwlwifi: pcie: synchronize IRQs before NAPI (git-fixes).
- wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (git-fixes).
- wifi: mac80211: fix # of MSDU in A-MSDU calculation (git-fixes).
- wifi: mt76: mt7603: rework/fix rx pse hang check (git-fixes).
- wifi: rtlwifi: fix EDCA limit set by BT coexistence (git-fixes).
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes).
- x86/alternative: Add a __alt_reloc_selftest() prototype (git-fixes).
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (git-fixes).
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (git-fixes).
- x86/hyperv: Add HV_EXPOSE_INVARIANT_TSC define (git-fixes).
- x86/hyperv: Improve code for referencing hyperv_pcpu_input_arg (git-fixes).
- x86/hyperv: Make hv_get_nmi_reason public (git-fixes).
- x86/hyperv: fix a warning in mshyperv.h (git-fixes).
- x86/sev: Do not try to parse for the CC blob on non-AMD hardware (git-fixes).
- x86/sev: Fix calculation of end address based on number of pages (git-fixes).
- x86/sev: Use the GHCB protocol when available for SNP CPUID requests (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
- xfs: add attr state machine tracepoints (git-fixes).
- xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909).
- xfs: constify btree function parameters that are not modified (git-fixes).
- xfs: convert AGF log flags to unsigned (git-fixes).
- xfs: convert AGI log flags to unsigned (git-fixes).
- xfs: convert attr type flags to unsigned (git-fixes).
- xfs: convert bmap extent type flags to unsigned (git-fixes).
- xfs: convert bmapi flags to unsigned (git-fixes).
- xfs: convert btree buffer log flags to unsigned (git-fixes).
- xfs: convert buffer flags to unsigned (git-fixes).
- xfs: convert buffer log item flags to unsigned (git-fixes).
- xfs: convert da btree operations flags to unsigned (git-fixes).
- xfs: convert dquot flags to unsigned (git-fixes).
- xfs: convert inode lock flags to unsigned (git-fixes).
- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- xfs: convert quota options flags to unsigned (git-fixes).
- xfs: convert scrub type flags to unsigned (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;blkno&quot;, &quot;block&quot;, or &quot;bno&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;count&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;len&quot; (git-fixes).
- xfs: disambiguate units for ftrace fields tagged &quot;offset&quot; (git-fixes).
- xfs: make the key parameters to all btree key comparison functions const (git-fixes).
- xfs: make the key parameters to all btree query range functions const (git-fixes).
- xfs: make the keys and records passed to btree inorder functions const (git-fixes).
- xfs: make the pointer passed to btree set_root functions const (git-fixes).
- xfs: make the start pointer passed to btree alloc_block functions const (git-fixes).
- xfs: make the start pointer passed to btree update_lastrec functions const (git-fixes).
- xfs: mark the record passed into btree init_key functions as const (git-fixes).
- xfs: mark the record passed into xchk_btree functions as const (git-fixes).
- xfs: remove xfs_btree_cur_t typedef (git-fixes).
- xfs: rename i_disk_size fields in ftrace output (git-fixes).
- xfs: resolve fork names in trace output (git-fixes).
- xfs: standardize AG block number formatting in ftrace output (git-fixes).
- xfs: standardize AG number formatting in ftrace output (git-fixes).
- xfs: standardize daddr formatting in ftrace output (git-fixes).
- xfs: standardize inode generation formatting in ftrace output (git-fixes).
- xfs: standardize inode number formatting in ftrace output (git-fixes).
- xfs: standardize remaining xfs_buf length tracepoints (git-fixes).
- xfs: standardize rmap owner number formatting in ftrace output (git-fixes).
- xhci: Enable RPM on controllers that support low-power states (git-fixes).
- xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.62.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.62.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.62.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.62.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.62.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.62.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4880</id>
    <title>Recommended update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702633433"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
    </references>
    <description>This update for xen fixes the following issues:

- Upstream bug fixes (bsc#1027519)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_10" release="150400.4.43.1" arch="src" src="src/xen-4.16.5_10-150400.4.43.1.src.rpm">
          <filename>xen-4.16.5_10-150400.4.43.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_10" release="150400.4.43.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_10-150400.4.43.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_10-150400.4.43.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-10</id>
    <title>Security update for polkit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704198108"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209282" id="1209282" title="VUL-1: polkit: Permissions on config dir makes escalation from service user to root trivial" type="bugzilla"/>
    </references>
    <description>This update for polkit fixes the following issues:

- Change permissions for rules folders (bsc#1209282)
</description>
    <pkglist>
      <collection>
        <package name="libpolkit0" epoch="0" version="0.116" release="150200.3.12.1" arch="x86_64" src="x86_64/libpolkit0-0.116-150200.3.12.1.x86_64.rpm">
          <filename>libpolkit0-0.116-150200.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="0.116" release="150200.3.12.1" arch="src" src="src/polkit-0.116-150200.3.12.1.src.rpm">
          <filename>polkit-0.116-150200.3.12.1.src.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="0.116" release="150200.3.12.1" arch="x86_64" src="x86_64/polkit-0.116-150200.3.12.1.x86_64.rpm">
          <filename>polkit-0.116-150200.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit0" epoch="0" version="0.116" release="150200.3.12.1" arch="s390x" src="s390x/libpolkit0-0.116-150200.3.12.1.s390x.rpm">
          <filename>libpolkit0-0.116-150200.3.12.1.s390x.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="0.116" release="150200.3.12.1" arch="s390x" src="s390x/polkit-0.116-150200.3.12.1.s390x.rpm">
          <filename>polkit-0.116-150200.3.12.1.s390x.rpm</filename>
        </package>
        <package name="libpolkit0" epoch="0" version="0.116" release="150200.3.12.1" arch="aarch64" src="aarch64/libpolkit0-0.116-150200.3.12.1.aarch64.rpm">
          <filename>libpolkit0-0.116-150200.3.12.1.aarch64.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="0.116" release="150200.3.12.1" arch="aarch64" src="aarch64/polkit-0.116-150200.3.12.1.aarch64.rpm">
          <filename>polkit-0.116-150200.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4869</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702567639"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40090" id="CVE-2022-40090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40090" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2731" id="CVE-2023-2731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2731" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622" id="CVE-2022-1622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26965" id="CVE-2023-26965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26965" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1916" id="CVE-2023-1916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1916" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212398" id="1212398" title="VUL-0: CVE-2023-26965: tiff: heap-based use after free via a crafted TIFF imag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214680" id="1214680" title="VUL-0: CVE-2022-40090: tiff: infinite loop via a crafted TIFF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199483" id="1199483" title="VUL-0: CVE-2022-1622: tiff: out-of-bounds read in LZWDecode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211478" id="1211478" title="VUL-0: CVE-2023-2731: tiff: null pointer deference in LZWDecode() in libtiff/tif_lzw.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210231" id="1210231" title="VUL-0: CVE-2023-1916: tiff: libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).
- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).
- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).
- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.35.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.35.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.35.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.35.1" arch="src" src="src/tiff-4.0.9-150000.45.35.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.35.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.35.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.35.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.35.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.35.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.35.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.35.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-16</id>
    <title>Recommended update for biosdevname</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704278639"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217455" id="1217455" title="Partner-L3: &quot;biosdevname -d&quot; doesn't display BIOS names when secure boot is enabled." type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-7333" id="PED-7333" title="https://jira.suse.com/browse/PED-7333" type="jira"/>
    </references>
    <description>This update for biosdevname fixes the following issues:

Update to version 0.7.3.7.g495ab76 (bsc#1217455):

* Add SMBIOS 3.x support
* Read DMI entries from /sys/firmware/dmi/tables/DMI
* Add buffer read helper using read explicitly
* man: fix all_ethN indentation
* Netronome biosdevname support (#8)
* Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
* Add support for ExaNIC network cards (#5)

</description>
    <pkglist>
      <collection>
        <package name="biosdevname" epoch="0" version="0.7.3.7.g495ab76" release="150000.5.6.1" arch="src" src="src/biosdevname-0.7.3.7.g495ab76-150000.5.6.1.src.rpm">
          <filename>biosdevname-0.7.3.7.g495ab76-150000.5.6.1.src.rpm</filename>
        </package>
        <package name="biosdevname" epoch="0" version="0.7.3.7.g495ab76" release="150000.5.6.1" arch="x86_64" src="x86_64/biosdevname-0.7.3.7.g495ab76-150000.5.6.1.x86_64.rpm">
          <filename>biosdevname-0.7.3.7.g495ab76-150000.5.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4916</id>
    <title>Recommended update for lvm2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703058571"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215229" id="1215229" title="L3: Error creating linux volume on SAN device lvmlockd[1763]: 1693326846 WARNING: mixed block sizes physical 4096 logical 512 (using 4096) for /dev/mapper/DATA10-lvmlock" type="bugzilla"/>
    </references>
    <description>This update for lvm2 fixes the following issues:

- Fixed error creating linux volume on SAN device lvmlockd (bsc#1215229)
</description>
    <pkglist>
      <collection>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="x86_64" src="x86_64/device-mapper-2.03.05_1.02.163-150400.191.1.x86_64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.191.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="x86_64" src="x86_64/libdevmapper-event1_03-2.03.05_1.02.163-150400.191.1.x86_64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.191.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="x86_64" src="x86_64/libdevmapper1_03-2.03.05_1.02.163-150400.191.1.x86_64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.191.1.x86_64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.191.1" arch="x86_64" src="x86_64/liblvm2cmd2_03-2.03.05-150400.191.1.x86_64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.191.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.191.1" arch="src" src="src/lvm2-2.03.05-150400.191.1.src.rpm">
          <filename>lvm2-2.03.05-150400.191.1.src.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.191.1" arch="x86_64" src="x86_64/lvm2-2.03.05-150400.191.1.x86_64.rpm">
          <filename>lvm2-2.03.05-150400.191.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2-device-mapper" epoch="0" version="2.03.05" release="150400.191.1" arch="src" src="src/lvm2-device-mapper-2.03.05-150400.191.1.src.rpm">
          <filename>lvm2-device-mapper-2.03.05-150400.191.1.src.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="s390x" src="s390x/device-mapper-2.03.05_1.02.163-150400.191.1.s390x.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.191.1.s390x.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="s390x" src="s390x/libdevmapper-event1_03-2.03.05_1.02.163-150400.191.1.s390x.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.191.1.s390x.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="s390x" src="s390x/libdevmapper1_03-2.03.05_1.02.163-150400.191.1.s390x.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.191.1.s390x.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.191.1" arch="s390x" src="s390x/liblvm2cmd2_03-2.03.05-150400.191.1.s390x.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.191.1.s390x.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.191.1" arch="s390x" src="s390x/lvm2-2.03.05-150400.191.1.s390x.rpm">
          <filename>lvm2-2.03.05-150400.191.1.s390x.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="aarch64" src="aarch64/device-mapper-2.03.05_1.02.163-150400.191.1.aarch64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.191.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="aarch64" src="aarch64/libdevmapper-event1_03-2.03.05_1.02.163-150400.191.1.aarch64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.191.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.191.1" arch="aarch64" src="aarch64/libdevmapper1_03-2.03.05_1.02.163-150400.191.1.aarch64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.191.1.aarch64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.191.1" arch="aarch64" src="aarch64/liblvm2cmd2_03-2.03.05-150400.191.1.aarch64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.191.1.aarch64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.191.1" arch="aarch64" src="aarch64/lvm2-2.03.05-150400.191.1.aarch64.rpm">
          <filename>lvm2-2.03.05-150400.191.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-217</id>
    <title>Recommended update for sssd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706121727"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217319" id="1217319" title="L3: sssd joined to child domain - getent -s group:sss group ParentDomainGroup no longer works" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216907" id="1216907" title="sssd Unable to obtain cached rules filling up sssd_sudo.log" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218537" id="1218537" title="sssd: handling ShadowLastChange attribute via LDAP not implemented" type="bugzilla"/>
      <reference href="https://github.com/SSSD/sssd#5822" id="SSSD/sssd#5822" title="Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon)." type="github"/>
      <reference href="https://github.com/SSSD/sssd#5956" id="SSSD/sssd#5956" title="sssd error triggers backtrace : [write_krb5info_file_from_fo_server]" type="github"/>
    </references>
    <description>This update for sssd fixes the following issues:

- Only send cldap-ping to our local domain; (bsc#1217319); (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319); (gh#SSSD/sssd#5956);
- sssd Unable to obtain cached rules filling up sssd_sudo.log; (bsc#1216907);
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.24.1" arch="src" src="src/sssd-2.5.2-150400.4.24.1.src.rpm">
          <filename>sssd-2.5.2-150400.4.24.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/sssd-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>sssd-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.24.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150400.4.24.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.24.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/sssd-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>sssd-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/sssd-common-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.24.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150400.4.24.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.24.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/sssd-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>sssd-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.24.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150400.4.24.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.24.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-62</id>
    <title>Recommended update for libxcrypt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704710817"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215496" id="1215496" title="man 3 crypt crypt_data struct erroneously includes &quot;phrase&quot; member instead of &quot;input&quot;" type="bugzilla"/>
    </references>
    <description>This update for libxcrypt fixes the following issues:

- fix variable name for datamember [bsc#1215496]
- added patches fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
</description>
    <pkglist>
      <collection>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.7.1" arch="x86_64" src="x86_64/libcrypt1-4.4.15-150300.4.7.1.x86_64.rpm">
          <filename>libcrypt1-4.4.15-150300.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libxcrypt" epoch="0" version="4.4.15" release="150300.4.7.1" arch="src" src="src/libxcrypt-4.4.15-150300.4.7.1.src.rpm">
          <filename>libxcrypt-4.4.15-150300.4.7.1.src.rpm</filename>
        </package>
        <package name="libxcrypt-devel" epoch="0" version="4.4.15" release="150300.4.7.1" arch="x86_64" src="x86_64/libxcrypt-devel-4.4.15-150300.4.7.1.x86_64.rpm">
          <filename>libxcrypt-devel-4.4.15-150300.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.7.1" arch="s390x" src="s390x/libcrypt1-4.4.15-150300.4.7.1.s390x.rpm">
          <filename>libcrypt1-4.4.15-150300.4.7.1.s390x.rpm</filename>
        </package>
        <package name="libxcrypt-devel" epoch="0" version="4.4.15" release="150300.4.7.1" arch="s390x" src="s390x/libxcrypt-devel-4.4.15-150300.4.7.1.s390x.rpm">
          <filename>libxcrypt-devel-4.4.15-150300.4.7.1.s390x.rpm</filename>
        </package>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.7.1" arch="aarch64" src="aarch64/libcrypt1-4.4.15-150300.4.7.1.aarch64.rpm">
          <filename>libcrypt1-4.4.15-150300.4.7.1.aarch64.rpm</filename>
        </package>
        <package name="libxcrypt-devel" epoch="0" version="4.4.15" release="150300.4.7.1" arch="aarch64" src="aarch64/libxcrypt-devel-4.4.15-150300.4.7.1.aarch64.rpm">
          <filename>libxcrypt-devel-4.4.15-150300.4.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4962</id>
    <title>Recommended update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703249170"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216987" id="1216987" title="curl struggles with large file uploads with SFTP connection - ref:_00D1igLOd._5005qYC3hQ:ref" type="bugzilla"/>
    </references>
    <description>This update for curl fixes the following issues:

- libssh: Implement SFTP packet size limit (bsc#1216987)

This update also ships curl to the INSTALLER channel.
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="src" src="src/curl-8.0.1-150400.5.41.1.src.rpm">
          <filename>curl-8.0.1-150400.5.41.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.41.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.41.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.41.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.41.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.41.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.41.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.41.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.41.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.41.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.41.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.41.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.41.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.41.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.41.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.41.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.41.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4891</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1702913580"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201384" id="1201384" title="less does not start on serial port" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50495" id="CVE-2023-50495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50495" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218014" id="1218014" title="VUL-0: CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()" type="bugzilla"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2023-50495: Fixed a segmentation fault via _nc_wrap_entry() (bsc#1218014)
- Modify reset command to avoid altering clocal if the terminal uses a modem (bsc#1201384)
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.20.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.20.1" arch="src" src="src/ncurses-6.1-150000.5.20.1.src.rpm">
          <filename>ncurses-6.1-150000.5.20.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.20.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.20.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.20.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.20.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.20.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/libncurses6-6.1-150000.5.20.1.s390x.rpm">
          <filename>libncurses6-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/ncurses-utils-6.1-150000.5.20.1.s390x.rpm">
          <filename>ncurses-utils-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/terminfo-6.1-150000.5.20.1.s390x.rpm">
          <filename>terminfo-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.20.1" arch="s390x" src="s390x/terminfo-base-6.1-150000.5.20.1.s390x.rpm">
          <filename>terminfo-base-6.1-150000.5.20.1.s390x.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.20.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.20.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.20.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.20.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.20.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-70</id>
    <title>Security update for tar</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704821411"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39804" id="CVE-2023-39804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39804" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217969" id="1217969" title="VUL-0: CVE-2023-39804: tar: Incorrectly handled extension attributes in PAX archives can lead to a crash" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- CVE-2023-39804: Fixed  extension attributes in PAX archives incorrect hanling (bsc#1217969).
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="src" src="src/tar-1.34-150000.3.34.1.src.rpm">
          <filename>tar-1.34-150000.3.34.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="x86_64" src="x86_64/tar-1.34-150000.3.34.1.x86_64.rpm">
          <filename>tar-1.34-150000.3.34.1.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="s390x" src="s390x/tar-1.34-150000.3.34.1.s390x.rpm">
          <filename>tar-1.34-150000.3.34.1.s390x.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.34.1" arch="aarch64" src="aarch64/tar-1.34-150000.3.34.1.aarch64.rpm">
          <filename>tar-1.34-150000.3.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-8</id>
    <title>Recommended update for samba</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704197954"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214076" id="1214076" title="write SID before secret to Samba's db" type="bugzilla"/>
    </references>
    <description>This update for samba fixes the following issues:

- Add &quot;net offlinejoin composeodj&quot; command (bsc#1214076)
</description>
    <pkglist>
      <collection>
        <package name="samba" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="src" src="src/samba-4.15.13+git.710.7032820fcd-150400.3.34.2.src.rpm">
          <filename>samba-4.15.13+git.710.7032820fcd-150400.3.34.2.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="x86_64" src="x86_64/samba-client-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.x86_64.rpm">
          <filename>samba-client-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.x86_64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="x86_64" src="x86_64/samba-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.x86_64.rpm">
          <filename>samba-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.x86_64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="s390x" src="s390x/samba-client-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.s390x.rpm">
          <filename>samba-client-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.s390x.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="s390x" src="s390x/samba-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.s390x.rpm">
          <filename>samba-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.s390x.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="aarch64" src="aarch64/samba-client-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.aarch64.rpm">
          <filename>samba-client-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.aarch64.rpm</filename>
        </package>
        <package name="samba-libs" epoch="0" version="4.15.13+git.710.7032820fcd" release="150400.3.34.2" arch="aarch64" src="aarch64/samba-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.aarch64.rpm">
          <filename>samba-libs-4.15.13+git.710.7032820fcd-150400.3.34.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-26</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704363364"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214980" id="1214980" title="mozilla-nss: FTBFS because expired certificate since 2023-09-04" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Mozilla NSS was updated to NSS 3.90.1

* regenerate NameConstraints test certificates.
* add OSXSAVE and XCR0 tests to AVX2 detection.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/libfreebl3-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>libfreebl3-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/libsoftokn3-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>libsoftokn3-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="src" src="src/mozilla-nss-3.90.1-150400.3.35.2.src.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/mozilla-nss-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/mozilla-nss-certs-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>mozilla-nss-certs-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.1" release="150400.3.35.2" arch="x86_64" src="x86_64/mozilla-nss-tools-3.90.1-150400.3.35.2.x86_64.rpm">
          <filename>mozilla-nss-tools-3.90.1-150400.3.35.2.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/libfreebl3-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>libfreebl3-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/libsoftokn3-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>libsoftokn3-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/mozilla-nss-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/mozilla-nss-certs-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>mozilla-nss-certs-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.1" release="150400.3.35.2" arch="s390x" src="s390x/mozilla-nss-tools-3.90.1-150400.3.35.2.s390x.rpm">
          <filename>mozilla-nss-tools-3.90.1-150400.3.35.2.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/libfreebl3-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>libfreebl3-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/libsoftokn3-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>libsoftokn3-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/mozilla-nss-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>mozilla-nss-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/mozilla-nss-certs-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>mozilla-nss-certs-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.1" release="150400.3.35.2" arch="aarch64" src="aarch64/mozilla-nss-tools-3.90.1-150400.3.35.2.aarch64.rpm">
          <filename>mozilla-nss-tools-3.90.1-150400.3.35.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4968</id>
    <title>Security update for jbigkit</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703491999"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210" id="CVE-2022-1210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198146" id="1198146" title="VUL-1: CVE-2022-1210: jbigkit: Malicious file leads to a denial of service in TIFF File Handler" type="bugzilla"/>
    </references>
    <description>This update for jbigkit fixes the following issues:

- CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146).
</description>
    <pkglist>
      <collection>
        <package name="jbigkit" epoch="0" version="2.1" release="150000.3.5.1" arch="src" src="src/jbigkit-2.1-150000.3.5.1.src.rpm">
          <filename>jbigkit-2.1-150000.3.5.1.src.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="150000.3.5.1" arch="x86_64" src="x86_64/libjbig2-2.1-150000.3.5.1.x86_64.rpm">
          <filename>libjbig2-2.1-150000.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="150000.3.5.1" arch="s390x" src="s390x/libjbig2-2.1-150000.3.5.1.s390x.rpm">
          <filename>libjbig2-2.1-150000.3.5.1.s390x.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="150000.3.5.1" arch="aarch64" src="aarch64/libjbig2-2.1-150000.3.5.1.aarch64.rpm">
          <filename>libjbig2-2.1-150000.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-6</id>
    <title>Security update for libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1704188504"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218127" id="1218127" title="VUL-0: CVE-2023-48795: libssh2_org: prefix truncation breaking ssh channel integrity" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (Terrapin Attack) (bsc#1218127).
</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.22.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.22.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.22.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.22.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.22.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.22.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.22.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.22.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.22.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.22.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.22.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4966</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703261405"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217583" id="1217583" title="registration will fail when the regionserver returns IPv6 addresses for the update server but the client is IPv4 only" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217451" id="1217451" title="client side failover does not import new server cert" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed over IPv4
  + Enable IMDS access over IPv6

- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.5" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.5-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.5-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.5" release="150000.6.102.1" arch="src" src="src/cloud-regionsrv-client-10.1.5-150000.6.102.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.5-150000.6.102.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.3" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.3-150000.6.102.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.102.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.102.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-4965</id>
    <title>Security update for ppp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1703259244"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218251" id="1218251" title="VUL-0: CVE-2022-4603: ppp: improper validation of array index of the component pppdump" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4603" id="CVE-2022-4603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4603" type="cve"/>
    </references>
    <description>This update for ppp fixes the following issues:

- CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251).
</description>
    <pkglist>
      <collection>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="src" src="src/ppp-2.4.7-150000.5.13.1.src.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.src.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="x86_64" src="x86_64/ppp-2.4.7-150000.5.13.1.x86_64.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.x86_64.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="s390x" src="s390x/ppp-2.4.7-150000.5.13.1.s390x.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.s390x.rpm</filename>
        </package>
        <package name="ppp" epoch="0" version="2.4.7" release="150000.5.13.1" arch="aarch64" src="aarch64/ppp-2.4.7-150000.5.13.1.aarch64.rpm">
          <filename>ppp-2.4.7-150000.5.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-214</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706108509"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214668" id="1214668" title="Systemd inconsistent Slice handling could result resource misplacement in the CGroup hierarchy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217460" id="1217460" title="SLES 15SP5 - mount unit having &quot;_netdev&quot; option incorrectly get &quot;Before=local-fs.target&quot; which creates ordering cycles at shutdown" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215241" id="1215241" title="Failed to release session: Interrupted system call in SLES12 SP3" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- resolved: actually check authenticated flag of SOA transaction
- core/mount: Make device deps from /proc/self/mountinfo and .mount unit file exclusive
- core: Add trace logging to mount_add_device_dependencies()
- core/mount: Remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
- core/mount: Set Mount.from_proc_self_mountinfo flag before adding default dependencies
- core: wrap some long comment
- utmp-wtmp: Handle EINTR gracefully when waiting to write to tty
- utmp-wtmp: Fix error in case isatty() fails
- homed: Handle EINTR gracefully when waiting for device node
- resolved: Handle EINTR returned from fd_wait_for_event() better
- sd-netlink: Handle EINTR from poll() gracefully, as success
- varlink: Handle EINTR gracefully when waiting for EIO via ppoll()
- stdio-bridge: Don't be bothered with EINTR
- sd-bus: Handle EINTR return from bus_poll() (bsc#1215241)
- core: Replace slice dependencies as they get added (bsc#1214668)

</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/libsystemd0-249.17-150400.8.40.1.x86_64.rpm">
          <filename>libsystemd0-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/libudev1-249.17-150400.8.40.1.x86_64.rpm">
          <filename>libudev1-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="src" src="src/systemd-249.17-150400.8.40.1.src.rpm">
          <filename>systemd-249.17-150400.8.40.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-container-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-container-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-journal-remote-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/systemd-sysvinit-249.17-150400.8.40.1.x86_64.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.40.1" arch="x86_64" src="x86_64/udev-249.17-150400.8.40.1.x86_64.rpm">
          <filename>udev-249.17-150400.8.40.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/libsystemd0-249.17-150400.8.40.1.s390x.rpm">
          <filename>libsystemd0-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/libudev1-249.17-150400.8.40.1.s390x.rpm">
          <filename>libudev1-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-container-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-container-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-journal-remote-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/systemd-sysvinit-249.17-150400.8.40.1.s390x.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.40.1" arch="s390x" src="s390x/udev-249.17-150400.8.40.1.s390x.rpm">
          <filename>udev-249.17-150400.8.40.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/libsystemd0-249.17-150400.8.40.1.aarch64.rpm">
          <filename>libsystemd0-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/libudev1-249.17-150400.8.40.1.aarch64.rpm">
          <filename>libudev1-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-container-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-container-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-journal-remote-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-journal-remote-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/systemd-sysvinit-249.17-150400.8.40.1.aarch64.rpm">
          <filename>systemd-sysvinit-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="249.17" release="150400.8.40.1" arch="aarch64" src="aarch64/udev-249.17-150400.8.40.1.aarch64.rpm">
          <filename>udev-249.17-150400.8.40.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-146</id>
    <title>Recommended update for btrfsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705579536"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218029" id="1218029" title="btrfs defrag bug with -c flag ref:_00D1igLOd._500Tr2TDVR:ref" type="bugzilla"/>
    </references>
    <description>This update for btrfsprogs fixes the following issue:

- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
</description>
    <pkglist>
      <collection>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.6.1" arch="src" src="src/btrfsprogs-5.14-150400.5.6.1.src.rpm">
          <filename>btrfsprogs-5.14-150400.5.6.1.src.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.6.1" arch="x86_64" src="x86_64/btrfsprogs-5.14-150400.5.6.1.x86_64.rpm">
          <filename>btrfsprogs-5.14-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs-udev-rules" epoch="0" version="5.14" release="150400.5.6.1" arch="noarch" src="noarch/btrfsprogs-udev-rules-5.14-150400.5.6.1.noarch.rpm">
          <filename>btrfsprogs-udev-rules-5.14-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150400.5.6.1" arch="x86_64" src="x86_64/libbtrfs0-5.14-150400.5.6.1.x86_64.rpm">
          <filename>libbtrfs0-5.14-150400.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.6.1" arch="s390x" src="s390x/btrfsprogs-5.14-150400.5.6.1.s390x.rpm">
          <filename>btrfsprogs-5.14-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150400.5.6.1" arch="s390x" src="s390x/libbtrfs0-5.14-150400.5.6.1.s390x.rpm">
          <filename>libbtrfs0-5.14-150400.5.6.1.s390x.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="5.14" release="150400.5.6.1" arch="aarch64" src="aarch64/btrfsprogs-5.14-150400.5.6.1.aarch64.rpm">
          <filename>btrfsprogs-5.14-150400.5.6.1.aarch64.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="5.14" release="150400.5.6.1" arch="aarch64" src="aarch64/libbtrfs0-5.14-150400.5.6.1.aarch64.rpm">
          <filename>libbtrfs0-5.14-150400.5.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-125</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705409224"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218364" id="1218364" title="SUSEConnect 1.5 release tracker [noop]" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update to version 1.5.0
- Configure docker credentials for registry authentication
- Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
- Add --json output option
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150400.3.19.1" arch="src" src="src/suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.src.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150400.3.19.1" arch="x86_64" src="x86_64/suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.x86_64.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150400.3.19.1" arch="s390x" src="s390x/suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.s390x.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.5.0~git0.d27a8e2" release="150400.3.19.1" arch="aarch64" src="aarch64/suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.aarch64.rpm">
          <filename>suseconnect-ng-1.5.0~git0.d27a8e2-150400.3.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-136</id>
    <title>Security update for pam</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705568062"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217000" id="1217000" title="sshd crash : commit in pam_lastlog might be involved" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218475" id="1218475" title="VUL-0: CVE-2024-22365: EMBARGOED: pam: pam_namespace misses O_DIRECTORY flag in `protect_dir()`" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365" id="CVE-2024-22365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22365" type="cve"/>
    </references>
    <description>This update for pam fixes the following issues:

- CVE-2024-22365: Fixed a local denial of service during PAM login
  due to a missing check during path manipulation (bsc#1218475).
- Check localtime_r() return value to fix crashing (bsc#1217000) 
</description>
    <pkglist>
      <collection>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="src" src="src/pam-1.3.0-150000.6.66.1.src.rpm">
          <filename>pam-1.3.0-150000.6.66.1.src.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="x86_64" src="x86_64/pam-1.3.0-150000.6.66.1.x86_64.rpm">
          <filename>pam-1.3.0-150000.6.66.1.x86_64.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="s390x" src="s390x/pam-1.3.0-150000.6.66.1.s390x.rpm">
          <filename>pam-1.3.0-150000.6.66.1.s390x.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.3.0" release="150000.6.66.1" arch="aarch64" src="aarch64/pam-1.3.0-150000.6.66.1.aarch64.rpm">
          <filename>pam-1.3.0-150000.6.66.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-105</id>
    <title>Recommended update for grub2 and efibootmgr</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705329677"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217237" id="1217237" title="missing grub.ppc64le and grubaa64.efi in /var/lib/cobbler/loaders/grub/" type="bugzilla"/>
    </references>
    <description>This update for grub2 and efibootmgr fixes the following issues:

grub2:

- Deliver missing grub2-arm64-efi and grub2-powerpc-ieee1275 to SUSE Manager 4.3 (no source changes) (bsc#1217237)

efibootmgr:

- Deliver missing efibootmgr to SUSE Manager 4.3 (no source changes) (bsc#1217237)

</description>
    <pkglist>
      <collection>
        <package name="efibootmgr" epoch="0" version="17" release="150400.3.2.2" arch="src" src="src/efibootmgr-17-150400.3.2.2.src.rpm">
          <filename>efibootmgr-17-150400.3.2.2.src.rpm</filename>
        </package>
        <package name="efibootmgr" epoch="0" version="17" release="150400.3.2.2" arch="x86_64" src="x86_64/efibootmgr-17-150400.3.2.2.x86_64.rpm">
          <filename>efibootmgr-17-150400.3.2.2.x86_64.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.43.2" arch="src" src="src/grub2-2.06-150400.11.43.2.src.rpm">
          <filename>grub2-2.06-150400.11.43.2.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.43.2" arch="x86_64" src="x86_64/grub2-2.06-150400.11.43.2.x86_64.rpm">
          <filename>grub2-2.06-150400.11.43.2.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.43.2" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.43.2.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.43.2.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.43.2" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.43.2.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.43.2.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.43.2" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.43.2.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.43.2.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.43.2" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.43.2.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.43.2.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.43.2" arch="s390x" src="s390x/grub2-2.06-150400.11.43.2.s390x.rpm">
          <filename>grub2-2.06-150400.11.43.2.s390x.rpm</filename>
        </package>
        <package name="grub2-s390x-emu" epoch="0" version="2.06" release="150400.11.43.2" arch="s390x" src="s390x/grub2-s390x-emu-2.06-150400.11.43.2.s390x.rpm">
          <filename>grub2-s390x-emu-2.06-150400.11.43.2.s390x.rpm</filename>
        </package>
        <package name="efibootmgr" epoch="0" version="17" release="150400.3.2.2" arch="aarch64" src="aarch64/efibootmgr-17-150400.3.2.2.aarch64.rpm">
          <filename>efibootmgr-17-150400.3.2.2.aarch64.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.43.2" arch="aarch64" src="aarch64/grub2-2.06-150400.11.43.2.aarch64.rpm">
          <filename>grub2-2.06-150400.11.43.2.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.43.2" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.43.2.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.43.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-254</id>
    <title>Recommended update for containerd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706285991"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217952" id="1217952" title="containerd &quot;address&quot; file is world writable" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

- Fix permissions of address file (bsc#1217952)
- Update to version 1.7.10
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="src" src="src/containerd-1.7.10-150000.106.1.src.rpm">
          <filename>containerd-1.7.10-150000.106.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="x86_64" src="x86_64/containerd-1.7.10-150000.106.1.x86_64.rpm">
          <filename>containerd-1.7.10-150000.106.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="s390x" src="s390x/containerd-1.7.10-150000.106.1.s390x.rpm">
          <filename>containerd-1.7.10-150000.106.1.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.106.1" arch="aarch64" src="aarch64/containerd-1.7.10-150000.106.1.aarch64.rpm">
          <filename>containerd-1.7.10-150000.106.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-261</id>
    <title>Recommended update for conmon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706599245"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217773" id="1217773" title="[Build 20231203-1] conmon: Unable to send container stderr message to parent Broken pipe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215806" id="1215806" title="VUL-0:  conmon: go1.19 is EOL" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock
  * logging: Respect log-size-max immediately after open

- Add patch for fixing regression in v2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)

- New upstream release 2.1.9
  ### Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  ### Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs

   * [bsc#1215806]

- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.10" release="150400.3.17.1" arch="src" src="src/conmon-2.1.10-150400.3.17.1.src.rpm">
          <filename>conmon-2.1.10-150400.3.17.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.10" release="150400.3.17.1" arch="x86_64" src="x86_64/conmon-2.1.10-150400.3.17.1.x86_64.rpm">
          <filename>conmon-2.1.10-150400.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.10" release="150400.3.17.1" arch="s390x" src="s390x/conmon-2.1.10-150400.3.17.1.s390x.rpm">
          <filename>conmon-2.1.10-150400.3.17.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.10" release="150400.3.17.1" arch="aarch64" src="aarch64/conmon-2.1.10-150400.3.17.1.aarch64.rpm">
          <filename>conmon-2.1.10-150400.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-140</id>
    <title>Security update for libssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705574111"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1667" id="CVE-2023-1667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6918" id="CVE-2023-6918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283" id="CVE-2023-2283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6004" id="CVE-2023-6004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6004" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211190" id="1211190" title="VUL-0: CVE-2023-2283: libssh: authorization bypass in pki_verify_data_signature" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218126" id="1218126" title="VUL-0: CVE-2023-48795: libssh: prefix truncation breaking ssh channel integrity" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218186" id="1218186" title="VUL-0: CVE-2023-6918: libssh: Missing checks for return values for digests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218209" id="1218209" title="VUL-0: CVE-2023-6004: libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211188" id="1211188" title="VUL-0: CVE-2023-1667: libssh: NULL pointer dereference during rekeying with algorithm guessing" type="bugzilla"/>
    </references>
    <description>This update for libssh fixes the following issues:

Security fixes:

  - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209)
  - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126)
  - CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186)
  - CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm  guessing (bsc#1211188)
  - CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190)

Other fixes:

- Update to version 0.9.8
  - Allow @ in usernames when parsing from URI composes

- Update to version 0.9.7
  - Fix several memory leaks in GSSAPI handling code
</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.9.8" release="150400.3.3.1" arch="src" src="src/libssh-0.9.8-150400.3.3.1.src.rpm">
          <filename>libssh-0.9.8-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.3.1" arch="x86_64" src="x86_64/libssh-config-0.9.8-150400.3.3.1.x86_64.rpm">
          <filename>libssh-config-0.9.8-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.3.1" arch="x86_64" src="x86_64/libssh4-0.9.8-150400.3.3.1.x86_64.rpm">
          <filename>libssh4-0.9.8-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.3.1" arch="s390x" src="s390x/libssh-config-0.9.8-150400.3.3.1.s390x.rpm">
          <filename>libssh-config-0.9.8-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.3.1" arch="s390x" src="s390x/libssh4-0.9.8-150400.3.3.1.s390x.rpm">
          <filename>libssh4-0.9.8-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.3.1" arch="aarch64" src="aarch64/libssh-config-0.9.8-150400.3.3.1.aarch64.rpm">
          <filename>libssh-config-0.9.8-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.3.1" arch="aarch64" src="aarch64/libssh4-0.9.8-150400.3.3.1.aarch64.rpm">
          <filename>libssh4-0.9.8-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-156</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705593702"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179610" id="1179610" title="VUL-0: CVE-2020-26558: kernel-source: Multiple Bluetooth Core Specification Vulnerabilities" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183045" id="1183045" title="mount command hangs on reserved scsi disk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193285" id="1193285" title="[Build 67.2] io_pgetevents_time64 returns an event when max_nr == -1  (32bit  compatibility layer)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211162" id="1211162" title="[ppc64le] kernel BUG at ../fs/nfs/pagelist.c:530! Oops: Exception in kernel mode, sig: 5 [#1]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211226" id="1211226" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214747" id="1214747" title="L3: SLES15 SP5: LUNs going into &quot;failed&quot; state is observed on &gt;1T with DIF enabled on array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214823" id="1214823" title="SLE-15SP5 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215237" id="1215237" title="VUL-0: CVE-2020-26555: kernel-source-rt,kernel-source,kernel-source-azure,bluez: Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215696" id="1215696" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216057" id="1216057" title="SLES15SP5 - MPIO is waiting for stalled tur thread to finish" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216559" id="1216559" title="SLES 15 SP5 cannot boot with SEV SNP flags enabled for Amazon EC2 instances" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="L3: kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="[SLES 15 SP5] BUG: scheduling while atomic, occurring after a warning in ring_buffer_discard_commit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217217" id="1217217" title="L3: tsc: Marking TSC unstable due to clocksource watchdog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217250" id="1217250" title="VUL-0: CVE-2023-6121: kernel-source,kernel-source-azure,kernel-source-rt: kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217602" id="1217602" title="L3-Question: kernel crash while printing (module) symbols in OOM stack trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217692" id="1217692" title="frequent repeated nlmsvc_put_lockowner+0x6 panics — ref:_00D1igLOd._500Tr1SJiH:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217790" id="1217790" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217801" id="1217801" title="PVT:1050:XM: CT: Suse Lpar not able to do ssh after Fatal EEH Injection using 4 port ethernet adapter ( 14E4 1657 1014 0420 ) on d153-linux2 lpar" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217933" id="1217933" title="KVM: s390: vsie: fix wrong VIR 37 when MSO is used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217938" id="1217938" title="VUL-0: CVE-2023-6622: kernel: null pointer dereference vulnerability in nft_dynset_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217946" id="1217946" title="VUL-0: CVE-2023-6610: kernel: OOB Access in smb2_dump_detail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217947" id="1217947" title="VUL-0: CVE-2023-6606: kernel: Out-Of-Bounds Read vulnerability in smbCalcSize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217980" id="1217980" title="ceph: fix incorrect revoked caps assert in ceph_fill_file_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217981" id="1217981" title="libceph: use kernel_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217982" id="1217982" title="ceph: fix type promotion bug on 32bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218056" id="1218056" title="KVM: s390/mm: Properly reset no-dat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218139" id="1218139" title="SLES 15 SP5 - SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218184" id="1218184" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218234" id="1218234" title="Adjust insufficient default bpf_jit_limit (SLE Micro 5.4/Elemental)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218253" id="1218253" title="VUL-0: CVE-2023-6932: kernel: use-after-free in IPv4 IGMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218258" id="1218258" title="VUL-0: CVE-2023-6931: kernel: heap out-of-bounds write in perf_read_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218335" id="1218335" title="VUL-0: CVE-2023-6546: kernel-source,kernel-source-azure,kernel-source-rt: GSM multiplexing race condition leads to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218357" id="1218357" title="s390/vx: fix save/restore of fpu kernel context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218515" id="1218515" title="mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218559" id="1218559" title="VUL-0: CVE-2023-51779: kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218569" id="1218569" title="SLE-15SP4 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218659" id="1218659" title="fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" id="CVE-2023-6610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" id="CVE-2023-51779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" id="CVE-2020-26555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" id="CVE-2023-6606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" id="CVE-2023-6546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" id="CVE-2023-6931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" id="CVE-2023-6932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" id="CVE-2023-6622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" id="CVE-2023-6121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3459" id="PED-3459" title="https://jira.suse.com/browse/PED-3459" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7322" id="PED-7322" title="https://jira.suse.com/browse/PED-7322" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946).
- CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559).
- CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237).
- CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).
- CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335).
- CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218258).
- CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253).
- CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938).
- CVE-2023-6121: Fixed an information leak via dmesg when receiving a crafted packet in the NVMe-oF/TCP subsystem (bsc#1217250).

The following non-security bugs were fixed:

- Reviewed and added more information to README.SUSE (jsc#PED-5021).
- Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184).
- Drop drm/bridge lt9611uxc patches that have been reverted on stable trees
- KVM: s390/mm: Properly reset no-dat (bsc#1218056).
- KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217933).
- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- NFS: Fix O_DIRECT locking issues (bsc#1211162).
- NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162).
- NFS: Fix a potential data corruption (bsc#1211162).
- NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162).
- NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162).
- NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162).
- NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162).
- NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162).
- NLM: Defend against file_lock changes after vfs_test_lock() (bsc#1217692).
- Updated SPI patches for NVIDIA Grace enablement (bsc#1212584 jsc#PED-3459)
- block: fix revalidate performance regression (bsc#1216057).
- bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234).
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980).
- ceph: fix type promotion bug on 32bit systems (bsc#1217982).
- clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (bsc#1215885 bsc#1217217).
- clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217).
- clocksource: Handle negative skews in &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217).
- clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217).
- clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217).
- clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217).
- dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776).
- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free() (bsc#1218659).
- libceph: use kernel_connect() (bsc#1217981).
- mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (bsc#1218515).
- net/smc: Fix pos miscalculation in statistics (bsc#1218139).
- net/tg3: fix race condition in tg3_reset_task() (bsc#1217801).
- nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162).
- remove unnecessary WARN_ON_ONCE() (bsc#1214823 bsc#1218569).
- s390/vx: fix save/restore of fpu kernel context (bsc#1218357).
- scsi: lpfc: use unsigned type for num_sge (bsc#1214747).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- tracing: Disable preemption when using the filter buffer (bsc#1217036).
- tracing: Fix a possible race when disabling buffered events (bsc#1217036).
- tracing: Fix a warning when allocating buffered events fails (bsc#1217036).
- tracing: Fix incomplete locking when disabling buffered events (bsc#1217036).
- tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036).
- tracing: Use __this_cpu_read() in trace_event_buffer_lock_reserver() (bsc#1217036).
- uapi: propagate __struct_group() attributes to the container union (jsc#SLE-18978).
- vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602).
- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790).
- x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217).
- x86/tsc: Be consistent about use_tsc_delay() (bsc#1215885 bsc#1217217).
- x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.103.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.103.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.103.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.103.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.103.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.103.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.103.1.150400.24.48.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.103.1.150400.24.48.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.103.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.103.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.103.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.103.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.103.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.103.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.103.1.150400.24.48.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.103.1.150400.24.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-427</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707393436"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218282" id="1218282" title="supportconfig smartmontools with no such file error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217287" id="1217287" title="supportconfig podman output display issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183663" id="1183663" title="supportconfig call freezes on the server where HANA with Fast Restart option configured is running" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218201" id="1218201" title="supportconfig incorrectly detects Xen dom0 as domU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196293" id="1196293" title="supportconfig does not collect chrony info if installed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216049" id="1216049" title="supportconfig: include nvme-stas configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216388" id="1216388" title="supportconfig.rc: conf_files creates empty files in plugins" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211547" id="1211547" title="supportutils - provide `ls -l' also for /etc/sssd/sssd.conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193173" id="1193173" title="supportutils pull in systemd and kmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216827" id="1216827" title="[15SP6][Build28.1] Supportconfig is hanging gathering File System List" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216390" id="1216390" title="supportconfig: kernel-livepatch.txt does not get klp info" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216522" id="1216522" title="supportconfig: missing zypper history log" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

- Update to version 3.1.28
- Correctly detects Xen Dom0 (bsc#1218201)
- Fixed smart disk error (bsc#1218282)
- Remove supportutils requires for util-linux-systemd and kmod (bsc#1193173)
- Added missing klp information to kernel-livepatch.txt (bsc#1216390)
- Fixed plugins creating empty files when using supportconfig.rc (bsc#1216388)
- Provides long listing for /etc/sssd/sssd.conf (bsc#1211547)
- Optimize lsof usage (bsc#1183663)
- Collects chrony or ntp as needed (bsc#1196293)
- Fixed podman display issue (bsc#1217287)
- Added nvme-stas configuration to nvme.txt (bsc#1216049)
- Added timed command to fs-files.txt (bsc#1216827)
- Collects zypp history file issue#166 (bsc#1216522)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.28" release="150300.7.35.24.1" arch="noarch" src="noarch/supportutils-3.1.28-150300.7.35.24.1.noarch.rpm">
          <filename>supportutils-3.1.28-150300.7.35.24.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.28" release="150300.7.35.24.1" arch="src" src="src/supportutils-3.1.28-150300.7.35.24.1.src.rpm">
          <filename>supportutils-3.1.28-150300.7.35.24.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-518</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708015669"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218810" id="1218810" title="VUL-0: CVE-2023-6237: openssl-3: Excessive time spent checking invalid RSA public keys" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218690" id="1218690" title="VUL-0: CVE-2023-6129: openssl-3: POLY1305 MAC implementation corrupts vector registers on PowerPC" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129" id="CVE-2023-6129" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237" id="CVE-2023-6237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6237" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219243" id="1219243" title="VUL-0: CVE-2024-0727: compat-openssl098,openssl,openssl-1_0_0,openssl-1_1,openssl-1_1-livepatches,openssl-3,openssl1: openssl: denial of service via null dereference" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" id="CVE-2024-0727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" type="cve"/>
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690)
- CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810)
- CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.49.1" arch="x86_64" src="x86_64/libopenssl3-3.0.8-150400.4.49.1.x86_64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.49.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.0.8" release="150400.4.49.1" arch="src" src="src/openssl-3-3.0.8-150400.4.49.1.src.rpm">
          <filename>openssl-3-3.0.8-150400.4.49.1.src.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.49.1" arch="s390x" src="s390x/libopenssl3-3.0.8-150400.4.49.1.s390x.rpm">
          <filename>libopenssl3-3.0.8-150400.4.49.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.49.1" arch="ppc64le" src="ppc64le/libopenssl3-3.0.8-150400.4.49.1.ppc64le.rpm">
          <filename>libopenssl3-3.0.8-150400.4.49.1.ppc64le.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.49.1" arch="aarch64" src="aarch64/libopenssl3-3.0.8-150400.4.49.1.aarch64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.49.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-129</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705416540"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179610" id="1179610" title="VUL-0: CVE-2020-26558: kernel-source: Multiple Bluetooth Core Specification Vulnerabilities" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183045" id="1183045" title="mount command hangs on reserved scsi disk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193285" id="1193285" title="[Build 67.2] io_pgetevents_time64 returns an event when max_nr == -1  (32bit  compatibility layer)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211162" id="1211162" title="[ppc64le] kernel BUG at ../fs/nfs/pagelist.c:530! Oops: Exception in kernel mode, sig: 5 [#1]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211226" id="1211226" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212584" id="1212584" title="Missing SPI fixes for NVIDIA Grace platform" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214747" id="1214747" title="L3: SLES15 SP5: LUNs going into &quot;failed&quot; state is observed on &gt;1T with DIF enabled on array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214823" id="1214823" title="SLE-15SP5 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215237" id="1215237" title="VUL-0: CVE-2020-26555: kernel-source-rt,kernel-source,kernel-source-azure,bluez: Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215696" id="1215696" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216057" id="1216057" title="SLES15SP5 - MPIO is waiting for stalled tur thread to finish" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216559" id="1216559" title="SLES 15 SP5 cannot boot with SEV SNP flags enabled for Amazon EC2 instances" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="L3: kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217036" id="1217036" title="[SLES 15 SP5] BUG: scheduling while atomic, occurring after a warning in ring_buffer_discard_commit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217217" id="1217217" title="L3: tsc: Marking TSC unstable due to clocksource watchdog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217250" id="1217250" title="VUL-0: CVE-2023-6121: kernel-source,kernel-source-azure,kernel-source-rt: kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217602" id="1217602" title="L3-Question: kernel crash while printing (module) symbols in OOM stack trace" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217692" id="1217692" title="frequent repeated nlmsvc_put_lockowner+0x6 panics — ref:_00D1igLOd._500Tr1SJiH:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217790" id="1217790" title="Bug in SNC when nr_cpus=&lt;fewer cpus than present&gt;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217801" id="1217801" title="PVT:1050:XM: CT: Suse Lpar not able to do ssh after Fatal EEH Injection using 4 port ethernet adapter ( 14E4 1657 1014 0420 ) on d153-linux2 lpar" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217933" id="1217933" title="KVM: s390: vsie: fix wrong VIR 37 when MSO is used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217938" id="1217938" title="VUL-0: CVE-2023-6622: kernel: null pointer dereference vulnerability in nft_dynset_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217946" id="1217946" title="VUL-0: CVE-2023-6610: kernel: OOB Access in smb2_dump_detail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217947" id="1217947" title="VUL-0: CVE-2023-6606: kernel: Out-Of-Bounds Read vulnerability in smbCalcSize" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217980" id="1217980" title="ceph: fix incorrect revoked caps assert in ceph_fill_file_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217981" id="1217981" title="libceph: use kernel_connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217982" id="1217982" title="ceph: fix type promotion bug on 32bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218056" id="1218056" title="KVM: s390/mm: Properly reset no-dat" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218139" id="1218139" title="SLES 15 SP5 - SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218184" id="1218184" title="Eliminate the need for 'OBS source links': convert to _multibuild" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218234" id="1218234" title="Adjust insufficient default bpf_jit_limit (SLE Micro 5.4/Elemental)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218253" id="1218253" title="VUL-0: CVE-2023-6932: kernel: use-after-free in IPv4 IGMP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218258" id="1218258" title="VUL-0: CVE-2023-6931: kernel: heap out-of-bounds write in perf_read_group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218335" id="1218335" title="VUL-0: CVE-2023-6546: kernel-source,kernel-source-azure,kernel-source-rt: GSM multiplexing race condition leads to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218357" id="1218357" title="s390/vx: fix save/restore of fpu kernel context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218515" id="1218515" title="mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218559" id="1218559" title="VUL-0: CVE-2023-51779: kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218569" id="1218569" title="SLE-15SP4 KOTD: Kernel warning in nfsd_file_cache_purge()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218659" id="1218659" title="fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" id="CVE-2023-6610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" id="CVE-2023-51779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51779" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" id="CVE-2020-26555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" id="CVE-2023-6606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6606" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" id="CVE-2023-6546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" id="CVE-2023-6931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" id="CVE-2023-6932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" id="CVE-2023-6622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" id="CVE-2023-6121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6121" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-3459" id="PED-3459" title="https://jira.suse.com/browse/PED-3459" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-5021" id="PED-5021" title="https://jira.suse.com/browse/PED-5021" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7322" id="PED-7322" title="https://jira.suse.com/browse/PED-7322" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on (bsc#1218447).
- CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946).
- CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559).
- CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237).
- CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).
- CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335).
- CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258).
- CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253).
- CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938).
- CVE-2023-6121: Fixed an information leak via dmesg when receiving a crafted packet in the NVMe-oF/TCP subsystem (bsc#1217250).

The following non-security bugs were fixed:

- Reviewed and added more information to README.SUSE (jsc#PED-5021).
- Build in the correct KOTD repository with multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184) With multibuild setting repository flags is no longer supported for individual spec files - see https://github.com/openSUSE/open-build-service/issues/3574 Add ExclusiveArch conditional that depends on a macro set up by bs-upload-kernel instead. With that each package should build only in one repository - either standard or QA. Note: bs-upload-kernel does not interpret rpm conditionals, and only uses the first ExclusiveArch line to determine the architectures to enable.
- KVM: s390/mm: Properly reset no-dat (bsc#1218056).
- KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217933).
- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- NFS: Fix O_DIRECT locking issues (bsc#1211162).
- NFS: Fix a few more clear_bit() instances that need release semantics (bsc#1211162).
- NFS: Fix a potential data corruption (bsc#1211162).
- NFS: Fix a use after free in nfs_direct_join_group() (bsc#1211162).
- NFS: Fix error handling for O_DIRECT write scheduling (bsc#1211162).
- NFS: More O_DIRECT accounting fixes for error paths (bsc#1211162).
- NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1211162).
- NFS: Use the correct commit info in nfs_join_page_group() (bsc#1211162).
- NLM: Defend against file_lock changes after vfs_test_lock() (bsc#1217692).
- Updated SPI patches for NVIDIA Grace enablement (bsc#1212584, jsc#PED-3459).
- block: fix revalidate performance regression (bsc#1216057).
- bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234).
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980).
- ceph: fix type promotion bug on 32bit systems (bsc#1217982).
- clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (bsc#1215885 bsc#1217217).
- clocksource: Enable TSC watchdog checking of HPET and PMTMR only when requested (bsc#1215885 bsc#1217217).
- clocksource: Handle negative skews in &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve &quot;skew is too large&quot; messages (bsc#1215885 bsc#1217217).
- clocksource: Improve read-back-delay message (bsc#1215885 bsc#1217217).
- clocksource: Loosen clocksource watchdog constraints (bsc#1215885 bsc#1217217).
- clocksource: Print clocksource name when clocksource is tested unstable (bsc#1215885 bsc#1217217).
- clocksource: Verify HPET and PMTMR when TSC unverified (bsc#1215885 bsc#1217217).
- dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776).
- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free() (bsc#1218659).
- kabi/severities: ignore kABI for asus-wmi drivers Tolerate the kABI changes, as used only locally for asus-wmi stuff
- libceph: use kernel_connect() (bsc#1217981).
- mkspec: Add multibuild support (JSC-SLE#5501, boo#1211226, bsc#1218184) When MULTIBUILD option in config.sh is enabled generate a _multibuild file listing all spec files.
- mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (bsc#1218515).
- net/smc: Fix pos miscalculation in statistics (bsc#1218139).
- net/tg3: fix race condition in tg3_reset_task() (bsc#1217801).
- nfs: only issue commit in DIO codepath if we have uncommitted data (bsc#1211162).
- remove unnecessary WARN_ON_ONCE() (bsc#1214823 bsc#1218569).
- s390/vx: fix save/restore of fpu kernel context (bsc#1218357).
- scsi: lpfc: use unsigned type for num_sge (bsc#1214747).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- tracing: Disable preemption when using the filter buffer (bsc#1217036).
- tracing: Fix a possible race when disabling buffered events (bsc#1217036).
- tracing: Fix a warning when allocating buffered events fails (bsc#1217036).
- tracing: Fix incomplete locking when disabling buffered events (bsc#1217036).
- tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036).
- tracing: Use __this_cpu_read() in trace_event_buffer_lock_reserver() (bsc#1217036).
- uapi: propagate __struct_group() attributes to the container union (jsc#SLE-18978).
- vsprintf/kallsyms: Prevent invalid data when printing symbol (bsc#1217602).
- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- x86/platform/uv: Use alternate source for socket to node data (bsc#1215696 bsc#1217790).
- x86/tsc: Add option to force frequency recalibration with HW timer (bsc#1215885 bsc#1217217).
- x86/tsc: Be consistent about use_tsc_delay() (bsc#1215885 bsc#1217217).
- x86/tsc: Extend watchdog check exemption to 4-Sockets platform (bsc#1215885 bsc#1217217).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.65.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.65.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.65.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.65.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.65.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.65.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-238</id>
    <title>Security update for cpio</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706263012"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" id="CVE-2023-7207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218571" id="1218571" title="VUL-0: CVE-2023-7207: cpio: Security vulnerability in Debian's cpio 2.13" type="bugzilla"/>
    </references>
    <description>This update for cpio fixes the following issues:

- CVE-2023-7207: Fixed a path traversal issue that could lead to an
  arbitrary file write during archive extraction (bsc#1218571).
</description>
    <pkglist>
      <collection>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="src" src="src/cpio-2.13-150400.3.3.1.src.rpm">
          <filename>cpio-2.13-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="x86_64" src="x86_64/cpio-2.13-150400.3.3.1.x86_64.rpm">
          <filename>cpio-2.13-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="s390x" src="s390x/cpio-2.13-150400.3.3.1.s390x.rpm">
          <filename>cpio-2.13-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.3.1" arch="aarch64" src="aarch64/cpio-2.13-150400.3.3.1.aarch64.rpm">
          <filename>cpio-2.13-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-233</id>
    <title>Recommended update for suse-module-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706180335"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217775" id="1217775" title="/boot/vmlinuz created, but no /boot/.vmlinuz.hmac" type="bugzilla"/>
    </references>
    <description>This update for suse-module-tools fixes the following issues:

- Update to version 15.4.19
- Add symlink /boot/.vmlinuz.hmac (bsc#1217775)
</description>
    <pkglist>
      <collection>
        <package name="suse-module-tools" epoch="0" version="15.4.19" release="150400.3.17.1" arch="src" src="src/suse-module-tools-15.4.19-150400.3.17.1.src.rpm">
          <filename>suse-module-tools-15.4.19-150400.3.17.1.src.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.19" release="150400.3.17.1" arch="x86_64" src="x86_64/suse-module-tools-15.4.19-150400.3.17.1.x86_64.rpm">
          <filename>suse-module-tools-15.4.19-150400.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.19" release="150400.3.17.1" arch="s390x" src="s390x/suse-module-tools-15.4.19-150400.3.17.1.s390x.rpm">
          <filename>suse-module-tools-15.4.19-150400.3.17.1.s390x.rpm</filename>
        </package>
        <package name="suse-module-tools" epoch="0" version="15.4.19" release="150400.3.17.1" arch="aarch64" src="aarch64/suse-module-tools-15.4.19-150400.3.17.1.aarch64.rpm">
          <filename>suse-module-tools-15.4.19-150400.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-615</id>
    <title>Recommended update for netcfg</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708943567"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211886" id="1211886" title="kprop does not start because of missing entry for port 754 in /etc/services" type="bugzilla"/>
    </references>
    <description>This update for netcfg fixes the following issues:

- Add krb-prop entry (bsc#1211886)
</description>
    <pkglist>
      <collection>
        <package name="netcfg" epoch="0" version="11.6" release="150000.3.6.1" arch="noarch" src="noarch/netcfg-11.6-150000.3.6.1.noarch.rpm">
          <filename>netcfg-11.6-150000.3.6.1.noarch.rpm</filename>
        </package>
        <package name="netcfg" epoch="0" version="11.6" release="150000.3.6.1" arch="src" src="src/netcfg-11.6-150000.3.6.1.src.rpm">
          <filename>netcfg-11.6-150000.3.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-285</id>
    <title>Recommended update for libxkbcommon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706697366"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218639" id="1218639" title="The libxkbregistry0-32bit and libxkbregistry-devel-32bit packages are missing" type="bugzilla"/>
    </references>
    <description>This update for libxkbcommon fixes the following issues:

- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)
</description>
    <pkglist>
      <collection>
        <package name="libxkbcommon" epoch="0" version="1.3.0" release="150400.3.5.1" arch="src" src="src/libxkbcommon-1.3.0-150400.3.5.1.src.rpm">
          <filename>libxkbcommon-1.3.0-150400.3.5.1.src.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.5.1" arch="x86_64" src="x86_64/libxkbcommon0-1.3.0-150400.3.5.1.x86_64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.5.1" arch="s390x" src="s390x/libxkbcommon0-1.3.0-150400.3.5.1.s390x.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.5.1.s390x.rpm</filename>
        </package>
        <package name="libxkbcommon0" epoch="0" version="1.3.0" release="150400.3.5.1" arch="aarch64" src="aarch64/libxkbcommon0-1.3.0-150400.3.5.1.aarch64.rpm">
          <filename>libxkbcommon0-1.3.0-150400.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-628</id>
    <title>Recommended update for open-lldp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709002913"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6852" id="PED-6852" title="https://jira.suse.com/browse/PED-6852" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212749" id="1212749" title="lldpad service crashes and is affecting Slingshot, the HPE high speed network internal to the system" type="bugzilla"/>
    </references>
    <description>This update for open-lldp fixes the following issues:

- open-lldp was updated to version v1.1+77.75e83b6fb98e:
  * Fixed issue with `lldpad.service` failing in login/sched nodes (bsc#1212749)
  * Fixed various NULL pointer dereference issues
  * dcbx: Fixed memory vulnerability (UAF)
  * dcbx: Fixed leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fixed a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * Reverted &quot;Use interface index instead of name in libconfig&quot;
  * agent: Reset frame status on message delete
  * basman: Use return address when pulling address
  * 8021Qaz: Check for rx block validity
  * 8021qaz: Fixed squelch initialization errors
  * macvtap: Fixed error condition
  * vdp22: converted command parsing to null term
</description>
    <pkglist>
      <collection>
        <package name="liblldp_clif1" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="x86_64" src="x86_64/liblldp_clif1-1.1+77.75e83b6-150300.3.6.1.x86_64.rpm">
          <filename>liblldp_clif1-1.1+77.75e83b6-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="src" src="src/open-lldp-1.1+77.75e83b6-150300.3.6.1.src.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="x86_64" src="x86_64/open-lldp-1.1+77.75e83b6-150300.3.6.1.x86_64.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="liblldp_clif1" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="s390x" src="s390x/liblldp_clif1-1.1+77.75e83b6-150300.3.6.1.s390x.rpm">
          <filename>liblldp_clif1-1.1+77.75e83b6-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="s390x" src="s390x/open-lldp-1.1+77.75e83b6-150300.3.6.1.s390x.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150300.3.6.1.s390x.rpm</filename>
        </package>
        <package name="liblldp_clif1" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="aarch64" src="aarch64/liblldp_clif1-1.1+77.75e83b6-150300.3.6.1.aarch64.rpm">
          <filename>liblldp_clif1-1.1+77.75e83b6-150300.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="open-lldp" epoch="0" version="1.1+77.75e83b6" release="150300.3.6.1" arch="aarch64" src="aarch64/open-lldp-1.1+77.75e83b6-150300.3.6.1.aarch64.rpm">
          <filename>open-lldp-1.1+77.75e83b6-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-204</id>
    <title>Security update for bluez</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706099654"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218301" id="1218301" title="VUL-0: CVE-2023-50230: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218300" id="1218300" title="VUL-0: CVE-2023-50229: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50229" id="CVE-2023-50229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50229" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50230" id="CVE-2023-50230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50230" type="cve"/>
    </references>
    <description>This update for bluez fixes the following issues:

- CVE-2023-50229: Fixed an out of bounds write in the primary version
  counter for the Phone Book Access Profile implementation
  (bsc#1218300).
- CVE-2023-50230: Fixed an out of bounds write in the secondary
  version counter for the Phone Book Access Profile implementation
  (bsc#1218301).
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.62" release="150400.4.19.1" arch="src" src="src/bluez-5.62-150400.4.19.1.src.rpm">
          <filename>bluez-5.62-150400.4.19.1.src.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.19.1" arch="x86_64" src="x86_64/libbluetooth3-5.62-150400.4.19.1.x86_64.rpm">
          <filename>libbluetooth3-5.62-150400.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.19.1" arch="s390x" src="s390x/libbluetooth3-5.62-150400.4.19.1.s390x.rpm">
          <filename>libbluetooth3-5.62-150400.4.19.1.s390x.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.62" release="150400.4.19.1" arch="aarch64" src="aarch64/libbluetooth3-5.62-150400.4.19.1.aarch64.rpm">
          <filename>libbluetooth3-5.62-150400.4.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-150</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1705584283"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215423" id="1215423" title="SELinux: systemd tries to run BPF early in boot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216060" id="1216060" title="SELinux preventing Keepalived stats file - &quot;Unable to change file permission of /tmp/keepalived.stats - errno 13 (Permission denied)&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205931" id="1205931" title="[SELinux] AVC denials for rebootmgr" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Allow rebootmgr to read the system state (bsc#1205931)
- Allow keepalived_t read+write kernel_t pipes (bsc#1216060)
- Allow init to run bpf programs. We do this during early startup (bsc#1215423)
- Allow sysadm_t run kernel bpf programs
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git12.c35c6fe1" release="150400.4.24.1" arch="noarch" src="noarch/selinux-policy-20230511+git12.c35c6fe1-150400.4.24.1.noarch.rpm">
          <filename>selinux-policy-20230511+git12.c35c6fe1-150400.4.24.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git12.c35c6fe1" release="150400.4.24.1" arch="src" src="src/selinux-policy-20230511+git12.c35c6fe1-150400.4.24.1.src.rpm">
          <filename>selinux-policy-20230511+git12.c35c6fe1-150400.4.24.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git12.c35c6fe1" release="150400.4.24.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git12.c35c6fe1-150400.4.24.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git12.c35c6fe1-150400.4.24.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git12.c35c6fe1" release="150400.4.24.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git12.c35c6fe1-150400.4.24.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git12.c35c6fe1-150400.4.24.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-458</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707831279"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- Update to version 0.378
- Update pci, usb and vendor ids
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.378" release="150000.3.65.1" arch="noarch" src="noarch/hwdata-0.378-150000.3.65.1.noarch.rpm">
          <filename>hwdata-0.378-150000.3.65.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.378" release="150000.3.65.1" arch="src" src="src/hwdata-0.378-150000.3.65.1.src.rpm">
          <filename>hwdata-0.378-150000.3.65.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-187</id>
    <title>Recommended update for python-chardet</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706013499"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218765" id="1218765" title="[Build8.48] Migration fails with &quot;zypper returned 107: python3-chardet %postun failed" type="bugzilla"/>
    </references>
    <description>This update for python-chardet fixes the following issues:

- Fix update-alternative in %postun (bsc#1218765)
</description>
    <pkglist>
      <collection>
        <package name="python-chardet" epoch="0" version="3.0.4" release="150000.5.3.1" arch="src" src="src/python-chardet-3.0.4-150000.5.3.1.src.rpm">
          <filename>python-chardet-3.0.4-150000.5.3.1.src.rpm</filename>
        </package>
        <package name="python3-chardet" epoch="0" version="3.0.4" release="150000.5.3.1" arch="noarch" src="noarch/python3-chardet-3.0.4-150000.5.3.1.noarch.rpm">
          <filename>python3-chardet-3.0.4-150000.5.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-638</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709026581"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218862" id="1218862" title="VUL-0: CVE-2024-0567: gnutls: rejects certificate chain with distributed trust" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218865" id="1218865" title="VUL-0: CVE-2024-0553: gnutls: incomplete fix for CVE-2023-5981" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0567" id="CVE-2024-0567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0553" id="CVE-2024-0553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0553" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2024-0567: Fixed an incorrect rejection of certificate chains
  with distributed trust (bsc#1218862).
- CVE-2024-0553: Fixed a timing attack against the RSA-PSK key
  exchange, which could lead to the leakage of sensitive data
  (bsc#1218865).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="src" src="src/gnutls-3.7.3-150400.4.41.3.src.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.41.3.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.41.3" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.41.3.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.41.3.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.41.3" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.41.3.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.41.3.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.41.3.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.41.3" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.41.3.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.41.3.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.41.3" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.41.3.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.41.3.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.41.3" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.41.3.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.41.3.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.41.3" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.41.3.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.41.3.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.41.3" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.41.3.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.41.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-295</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706772221"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" id="CVE-2024-21626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218894" id="1218894" title="VUL-0: EMBARGOED: CVE-2024-21626: runc: container breakout" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

Update to runc v1.1.11:

- CVE-2024-21626: Fixed container breakout. (bsc#1218894)
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="src" src="src/runc-1.1.11-150000.58.1.src.rpm">
          <filename>runc-1.1.11-150000.58.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="x86_64" src="x86_64/runc-1.1.11-150000.58.1.x86_64.rpm">
          <filename>runc-1.1.11-150000.58.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="s390x" src="s390x/runc-1.1.11-150000.58.1.s390x.rpm">
          <filename>runc-1.1.11-150000.58.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.11" release="150000.58.1" arch="aarch64" src="aarch64/runc-1.1.11-150000.58.1.aarch64.rpm">
          <filename>runc-1.1.11-150000.58.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-188</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706014402"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218649" id="1218649" title="[Build 129.7] SUSEConnect is broken: SLES to SLES for SAP Horizontal Migration fails on 15-SP5 QU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217961" id="1217961" title="[Build 44.1] openQA test fails in system_prepare - SUSEConnect register product returned with 'Credential file is missing'" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng contains the following fix:

- Update to version 1.6.0:
  * Disable EULA display for addons. (bsc#1218649 and bsc#1217961)
  </description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150400.3.22.1" arch="src" src="src/suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.src.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150400.3.22.1" arch="x86_64" src="x86_64/suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.x86_64.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150400.3.22.1" arch="s390x" src="s390x/suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.s390x.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.6.0~git0.31371c8" release="150400.3.22.1" arch="aarch64" src="aarch64/suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.aarch64.rpm">
          <filename>suseconnect-ng-1.6.0~git0.31371c8-150400.3.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-457</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707828237"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7180" id="PED-7180" title="https://jira.suse.com/browse/PED-7180" type="jira"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Fix overwrite of kiwi_oemunattended: ensure that the overwrite happens in the early initialize
  method which provides the environment for all code running in the dracut module

- Allow install disk overwrite from cmdline (jsc#PED-7180): add rd.kiwi.oem.installdevice=DEVICE,
  which configures the disk device that should be used in an OEM installation
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.68.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.68.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.68.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.68.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.68.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.68.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.68.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.68.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.68.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.68.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.68.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.68.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.68.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.68.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.68.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.68.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.68.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.68.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.68.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.68.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-870</id>
    <title>Security update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710331566"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217445" id="1217445" title="L3: Broken unwind information in glibc rawmemchr on AArch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218866" id="1218866" title="VUL-0: glibc: qsort() memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217589" id="1217589" title="L3-Question: getaddrinfo returns misleading error code in out-of-memory situation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issues fixed:

- qsort: harden handling of degenerated / non transient compare function (bsc#1218866)

Other issues fixed:

- getaddrinfo: translate ENOMEM to EAI_MEMORY (bsc#1217589, BZ #31163)
- aarch64: correct CFI in rawmemchr (bsc#1217445, BZ #31113)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="src" src="src/glibc-2.31-150300.68.1.src.rpm">
          <filename>glibc-2.31-150300.68.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.68.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.68.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.68.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.68.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.68.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.68.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.68.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.68.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.68.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-243</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706270456"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207987" id="1207987" title="libuuid/xfs regression" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- Fix performance degradation (bsc#1207987)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.23.1" arch="src" src="src/util-linux-2.37.2-150400.8.23.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.23.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.23.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.23.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.23.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.23.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.23.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.23.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/libblkid1-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>libblkid1-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/libfdisk1-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>libfdisk1-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/libmount1-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>libmount1-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/libsmartcols1-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/libuuid1-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>libuuid1-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/util-linux-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>util-linux-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.23.1" arch="s390x" src="s390x/util-linux-systemd-2.37.2-150400.8.23.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.23.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.23.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.23.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-268</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706620785"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218851" id="1218851" title="VUL-0: EMBARGOED: CVE-2023-46839: xen: phantom functions assigned to incorrect contexts (XSA-449)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46839" id="CVE-2023-46839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46839" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_12" release="150400.4.46.1" arch="src" src="src/xen-4.16.5_12-150400.4.46.1.src.rpm">
          <filename>xen-4.16.5_12-150400.4.46.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_12" release="150400.4.46.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_12-150400.4.46.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_12-150400.4.46.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-322</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706883233"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215434" id="1215434" title="/etc/profile.d/alljava.sh does not set JAVA_HOME correctly - does not take into account alternatives" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1107342" id="1107342" title="JAVA_HOME incorrectly set by /etc/profile.d/alljava.*" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Set JAVA_HOME correctly (bsc#1107342, bsc#1215434)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.9.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-509</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708004519"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-719" id="MSQA-719" title="https://jira.suse.com/browse/MSQA-719" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211649" id="1211649" title="L3: Salt-ssh environment: ssh-minion-action-executor stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216284" id="1216284" title="After update to 4.3.8 salt command returns Authentication failure of type &quot;user&quot; occurred" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193948" id="1193948" title="Issue with salt and gitfs and multienvironment  with salt pillars" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215963" id="1215963" title="System onboarding failing with Minion is down or could not be contacted." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219430" id="1219430" title="VUL-0: CVE-2024-22231: salt: Syndic cache directory creation is vulnerable to a directory traversal attack." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219431" id="1219431" title="VUL-0: CVE-2024-22232: salt: A specially crafted url can be created which leads to a directory traversal in the salt file server." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22231" id="CVE-2024-22231" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22231" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22232" id="CVE-2024-22232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22232" type="cve"/>
    </references>
    <description>This update for salt fixes the following issues:

Security issues fixed:

- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory
  on the master (bsc#1219430)
- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file
  method (bsc#1219431)

Bugs fixed:

- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable &quot;KeepAlive&quot; probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs &quot;__env__&quot; and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.54.1.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.54.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="src" src="src/salt-3006.0-150400.8.54.1.src.rpm">
          <filename>salt-3006.0-150400.8.54.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="x86_64" src="x86_64/salt-3006.0-150400.8.54.1.x86_64.rpm">
          <filename>salt-3006.0-150400.8.54.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.54.1" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.54.1.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.54.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.54.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.54.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.54.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.54.1.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.54.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="s390x" src="s390x/salt-3006.0-150400.8.54.1.s390x.rpm">
          <filename>salt-3006.0-150400.8.54.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.54.1" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.54.1.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.54.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.54.1" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.54.1.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.54.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.54.1.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.54.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.54.1" arch="aarch64" src="aarch64/salt-3006.0-150400.8.54.1.aarch64.rpm">
          <filename>salt-3006.0-150400.8.54.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.54.1" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.54.1.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.54.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.54.1" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.54.1.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.54.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-583</id>
    <title>Recommended update for python3-azuremetadata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708552087"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218760" id="1218760" title="Empty list attributes" type="bugzilla"/>
    </references>
    <description>This update for python3-azuremetadata fixes the following issues:

- Fix empty list attributes (bsc#1218760)
</description>
    <pkglist>
      <collection>
        <package name="python3-azuremetadata" epoch="0" version="5.1.6" release="150000.1.26.1" arch="noarch" src="noarch/python3-azuremetadata-5.1.6-150000.1.26.1.noarch.rpm">
          <filename>python3-azuremetadata-5.1.6-150000.1.26.1.noarch.rpm</filename>
        </package>
        <package name="python3-azuremetadata" epoch="0" version="5.1.6" release="150000.1.26.1" arch="src" src="src/python3-azuremetadata-5.1.6-150000.1.26.1.src.rpm">
          <filename>python3-azuremetadata-5.1.6-150000.1.26.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-630</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709021709"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218069" id="1218069" title="cloud-netconfig does not support IMDS IPv6 endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219007" id="1219007" title="cloud-netconfig NetworkManager dispatcher script missing" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Drop cloud-netconfig-nm sub package and include NM dispatcher script in main packages (bsc#1219007)
- Drop package dependency on sysconfig-netconfig
- Improve log level handling
- Support IPv6 IMDS endpoint in EC2 (bsc#1218069)
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.10" release="150000.25.14.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.10-150000.25.14.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.10-150000.25.14.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.10" release="150000.25.14.1" arch="src" src="src/cloud-netconfig-azure-1.10-150000.25.14.1.src.rpm">
          <filename>cloud-netconfig-azure-1.10-150000.25.14.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.10" release="150000.25.14.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.10-150000.25.14.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.10-150000.25.14.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.10" release="150000.25.14.1" arch="src" src="src/cloud-netconfig-ec2-1.10-150000.25.14.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.10-150000.25.14.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.10" release="150000.25.14.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.10-150000.25.14.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.10-150000.25.14.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.10" release="150000.25.14.1" arch="src" src="src/cloud-netconfig-gce-1.10-150000.25.14.1.src.rpm">
          <filename>cloud-netconfig-gce-1.10-150000.25.14.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-424</id>
    <title>Recommended update for python3-M2Crypto</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707392356"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212757" id="1212757" title="python-M2Crypto MiscSSLClientTestCase.test_server_simple_timeouts test fails with HZ=300" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217782" id="1217782" title="Python packages fail to build with OpenSSL 3.2.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205042" id="1205042" title="[TRACKERBUG] Set OpenSSL 3.0 as the default openssl in TW" type="bugzilla"/>
    </references>
    <description>This update for python3-M2Crypto fixes the following issues:

- Packaging changes (bsc#1217782, bsc#1212757)
- Set OpenSSL 3.0 as the default openssl in Tumbleweed (bsc#1205042) 
</description>
    <pkglist>
      <collection>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="src" src="src/python3-M2Crypto-0.38.0-150400.10.1.src.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.src.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="x86_64" src="x86_64/python3-M2Crypto-0.38.0-150400.10.1.x86_64.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.x86_64.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="s390x" src="s390x/python3-M2Crypto-0.38.0-150400.10.1.s390x.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.s390x.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="ppc64le" src="ppc64le/python3-M2Crypto-0.38.0-150400.10.1.ppc64le.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.ppc64le.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.38.0" release="150400.10.1" arch="aarch64" src="aarch64/python3-M2Crypto-0.38.0-150400.10.1.aarch64.rpm">
          <filename>python3-M2Crypto-0.38.0-150400.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-258</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1706536359"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219156" id="1219156" title="Partner-L3: Updating the cloud-regionsrv-client and cloud-regionsrv-client-plugin-ec2 packages causes PAYG SLES to fail registration in AWS GovCloud regions." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219159" id="1219159" title="Updating the cloud-regionsrv-client and cloud-regionsrv-client-plugin-ec2 packages causes PAYG SLES to fail registration in AWS GovCloud regions." type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update EC2 plugin to 1.0.4. (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.
  </description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.6" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.6-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.6-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.6" release="150000.6.105.1" arch="src" src="src/cloud-regionsrv-client-10.1.6-150000.6.105.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.6-150000.6.105.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.105.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.105.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.105.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.105.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-594</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708613895"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356" id="CVE-2023-52356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219213" id="1219213" title="VUL-0: CVE-2023-52356: tiff: libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt() (bsc#1219213).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.38.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.38.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.38.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.38.1" arch="src" src="src/tiff-4.0.9-150000.45.38.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.38.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.38.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.38.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.38.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.38.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.38.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.38.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-480</id>
    <title>Recommended update for libsolv</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707996976"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6218" id="PED-6218" title="https://jira.suse.com/browse/PED-6218" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215698" id="1215698" title="[Build 20230922] Install TW vm in qemu env, &quot;License Agreement&quot; not shown in installer without `-enable-kvm` option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219442" id="1219442" title="[SLES12SP3][Kernel][Teradata]Error during kernel update on SLES12-SP3 Teradata" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218831" id="1218831" title="L3: SLES15 SP4 zypper update introduces a regression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218782" id="1218782" title="zypper ps reports many files from processes running under flatpak as missing" type="bugzilla"/>
    </references>
    <description>This update for libsolv, libzypp fixes the following issues:

- build for multiple python versions [jsc#PED-6218]
- applydeltaprm: Create target directory if it does not exist (bsc#1219442)
- Fix problems with EINTR in ExternalDataSource::getline (bsc#1215698)
- CheckAccessDeleted: fix running_in_container detection (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime (bsc#1218831) 
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.28" release="150400.3.16.2" arch="src" src="src/libsolv-0.7.28-150400.3.16.2.src.rpm">
          <filename>libsolv-0.7.28-150400.3.16.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.28" release="150400.3.16.2" arch="x86_64" src="x86_64/libsolv-tools-0.7.28-150400.3.16.2.x86_64.rpm">
          <filename>libsolv-tools-0.7.28-150400.3.16.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="src" src="src/libzypp-17.31.31-150400.3.52.2.src.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="x86_64" src="x86_64/libzypp-17.31.31-150400.3.52.2.x86_64.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.28" release="150400.3.16.2" arch="s390x" src="s390x/libsolv-tools-0.7.28-150400.3.16.2.s390x.rpm">
          <filename>libsolv-tools-0.7.28-150400.3.16.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="s390x" src="s390x/libzypp-17.31.31-150400.3.52.2.s390x.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.28" release="150400.3.16.2" arch="aarch64" src="aarch64/libsolv-tools-0.7.28-150400.3.16.2.aarch64.rpm">
          <filename>libsolv-tools-0.7.28-150400.3.16.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.31" release="150400.3.52.2" arch="aarch64" src="aarch64/libzypp-17.31.31-150400.3.52.2.aarch64.rpm">
          <filename>libzypp-17.31.31-150400.3.52.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-792</id>
    <title>Recommended update for timezone</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709801740"/>
    <references/>
    <description>This update for timezone fixes the following issues:

- Update to version 2024a
- Kazakhstan unifies on UTC+5
- Palestine springs forward a week later than previously predicted in 2024 and 2025
- Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00 not 00:00
- From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00
- In 1911 Miquelon adopted standard time on June 15, not May 15
- The FROM and TO columns of Rule lines can no longer be &quot;minimum&quot;
- localtime no longer mishandle some timestamps
- strftime %s now uses tm_gmtoff if available
- Ittoqqortoormiit, Greenland changes time zones on 2024-03-31
- Vostok, Antarctica changed time zones on 2023-12-18
- Casey, Antarctica changed time zones five times since 2020
- Code and data fixes for Palestine timestamps starting in 2072
- A new data file zonenow.tab for timestamps starting now
- Much of Greenland changed its standard time from -03 to -02 on 2023-03-25
- localtime.c no longer mishandles TZif files that contain a single transition into a DST regime
- tzselect no longer creates temporary files
- tzselect no longer mishandles the following:
  * Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION.
  * TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/
  * ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments
  * Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension
  * zic no longer mishandles data for Palestine after the year 2075
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="src" src="src/timezone-2024a-150000.75.28.1.src.rpm">
          <filename>timezone-2024a-150000.75.28.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="x86_64" src="x86_64/timezone-2024a-150000.75.28.1.x86_64.rpm">
          <filename>timezone-2024a-150000.75.28.1.x86_64.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="s390x" src="s390x/timezone-2024a-150000.75.28.1.s390x.rpm">
          <filename>timezone-2024a-150000.75.28.1.s390x.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2024a" release="150000.75.28.1" arch="aarch64" src="aarch64/timezone-2024a-150000.75.28.1.aarch64.rpm">
          <filename>timezone-2024a-150000.75.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-444</id>
    <title>Security update for suse-build-key</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707493189"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219189" id="1219189" title="L3: rpm DB lock/failure during update (suse-build-key) ref:_00D1igLOd._500Tr3UguZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219123" id="1219123" title="Partner-L3: A lock (/usr/lib/sysimage/rpm/.rpm.lock) contention issue introduced by suse-build-key failed the whole OS upgrade" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update runs a import-suse-build-key script.

The previous libzypp-post-script based installation is replaced
with a systemd timer and service (bsc#1217215 bsc#1216410 jsc#PED-2777).
  - suse-build-key-import.service
  - suse-build-key-import.timer

It imports the future SUSE Linux Enterprise 15 4096 bit RSA key primary and reserve keys.
After successful import the timer is disabled.

To manually import them you can also run:

# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-63c9481c.asc
# rpm --import /usr/lib/rpm/gnupg/keys/gpg-pubkey-d588dc46-63c939db.asc

Bugfix added since last update:

- run rpm commands in import script only when libzypp is not 
  active. bsc#1219189 bsc#1219123
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.40.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.40.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.40.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.40.1" arch="src" src="src/suse-build-key-12.0-150000.8.40.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.40.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-305</id>
    <title>Security update for cpio</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710162948"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218571" id="1218571" title="VUL-0: CVE-2023-7207: cpio: Security vulnerability in Debian's cpio 2.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219238" id="1219238" title="after cpio update installation-images no longer build" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" id="CVE-2023-7207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207" type="cve"/>
    </references>
    <description>This update for cpio fixes the following issues:

- Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)
</description>
    <pkglist>
      <collection>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="src" src="src/cpio-2.13-150400.3.6.1.src.rpm">
          <filename>cpio-2.13-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="x86_64" src="x86_64/cpio-2.13-150400.3.6.1.x86_64.rpm">
          <filename>cpio-2.13-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="s390x" src="s390x/cpio-2.13-150400.3.6.1.s390x.rpm">
          <filename>cpio-2.13-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="cpio" epoch="0" version="2.13" release="150400.3.6.1" arch="aarch64" src="aarch64/cpio-2.13-150400.3.6.1.aarch64.rpm">
          <filename>cpio-2.13-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-651</id>
    <title>Recommended update for nftables</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709124369"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219253" id="1219253" title="L3-Question: Question about why python311-nftables isn't available." type="bugzilla"/>
    </references>
    <description>This update for nftables fixes the following issues:

- Enable python311 module (bsc#1219253).
</description>
    <pkglist>
      <collection>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150400.6.3.1" arch="x86_64" src="x86_64/libnftables1-0.9.8-150400.6.3.1.x86_64.rpm">
          <filename>libnftables1-0.9.8-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="src" src="src/nftables-0.9.8-150400.6.3.1.src.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.src.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="x86_64" src="x86_64/nftables-0.9.8-150400.6.3.1.x86_64.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="noarch" src="noarch/python3-nftables-0.9.8-150400.6.3.1.noarch.rpm">
          <filename>python3-nftables-0.9.8-150400.6.3.1.noarch.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150400.6.3.1" arch="s390x" src="s390x/libnftables1-0.9.8-150400.6.3.1.s390x.rpm">
          <filename>libnftables1-0.9.8-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="s390x" src="s390x/nftables-0.9.8-150400.6.3.1.s390x.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="libnftables1" epoch="0" version="0.9.8" release="150400.6.3.1" arch="aarch64" src="aarch64/libnftables1-0.9.8-150400.6.3.1.aarch64.rpm">
          <filename>libnftables1-0.9.8-150400.6.3.1.aarch64.rpm</filename>
        </package>
        <package name="nftables" epoch="0" version="0.9.8" release="150400.6.3.1" arch="aarch64" src="aarch64/nftables-0.9.8-150400.6.3.1.aarch64.rpm">
          <filename>nftables-0.9.8-150400.6.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-459</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707834560"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218894" id="1218894" title="VUL-0: CVE-2024-21626: runc: container breakout" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" id="CVE-2024-21626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626" type="cve"/>
    </references>
    <description>This update for runc fixes the following issues:

- Update to runc v1.1.12 (bsc#1218894)                                                         
                                                                                               
The following CVE was already fixed with the previous release.                                 
                                                                                               
- CVE-2024-21626: Fixed container breakout.                                                                                                                                                    
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="src" src="src/runc-1.1.12-150000.61.2.src.rpm">
          <filename>runc-1.1.12-150000.61.2.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="x86_64" src="x86_64/runc-1.1.12-150000.61.2.x86_64.rpm">
          <filename>runc-1.1.12-150000.61.2.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="s390x" src="s390x/runc-1.1.12-150000.61.2.s390x.rpm">
          <filename>runc-1.1.12-150000.61.2.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.61.2" arch="aarch64" src="aarch64/runc-1.1.12-150000.61.2.aarch64.rpm">
          <filename>runc-1.1.12-150000.61.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-466</id>
    <title>Recommended update for syslinux </title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707904429"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSC-749" id="MSC-749" title="https://jira.suse.com/browse/MSC-749" type="jira"/>
    </references>
    <description>This update for syslinux fixes the following issues:

- syslinux RPM package was rebuilt to address issues with aarch64 built binaries
</description>
    <pkglist>
      <collection>
        <package name="syslinux" epoch="0" version="4.04" release="150300.17.2.1" arch="src" src="src/syslinux-4.04-150300.17.2.1.src.rpm">
          <filename>syslinux-4.04-150300.17.2.1.src.rpm</filename>
        </package>
        <package name="syslinux" epoch="0" version="4.04" release="150300.17.2.1" arch="x86_64" src="x86_64/syslinux-4.04-150300.17.2.1.x86_64.rpm">
          <filename>syslinux-4.04-150300.17.2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-581</id>
    <title>Security update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708520916"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043" id="CVE-2023-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210638" id="1210638" title="VUL-0: CVE-2023-27043: python39,python310,python27,python,python36,python3,python311: The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.54.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.54.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.54.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="src" src="src/python3-3.6.15-150300.10.54.1.src.rpm">
          <filename>python3-3.6.15-150300.10.54.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.54.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.54.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.54.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.54.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.54.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.54.1" arch="src" src="src/python3-core-3.6.15-150300.10.54.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.54.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.54.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.54.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.54.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.54.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.54.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.54.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.54.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.54.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.54.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.54.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.54.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.54.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.54.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.54.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.54.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.54.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.54.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-802</id>
    <title>Recommended update for wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709806074"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219265" id="1219265" title="wicked ifstatus nic return 0 when actual state is NI_WICKED_ST_NO_CARRIER" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218927" id="1218927" title="wicked ifreload fails to update VLAN ID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215692" id="1215692" title="wickedd-dhcp6 failes to get ipv6 address on one of three interfaces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218926" id="1218926" title="wicked ifcheck/ifreload inconsistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219751" id="1219751" title="Unable to create VXLAN devices - unable to format vxlan netlink attr (null)" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-7183" id="PED-7183" title="https://jira.suse.com/browse/PED-7183" type="jira"/>
    </references>
    <description>This update for wicked fixes the following issues:

- ifreload: VLAN changes require device deletion (bsc#1218927) 
- ifcheck: fix config changed check (bsc#1218926)
- client: fix exit code for no-carrier status (bsc#1219265)
- dhcp6: omit the SO_REUSEPORT option (bsc#1215692)
- duid: fix comment for v6time
- rtnl: fix peer address parsing for non ptp-interfaces
- system-updater: Parse updater format from XML configuration to ensure install calls can run
- team: add new options like link_watch_policy (jsc#PED-7183)
- Fix memory leaks in dbus variant destroy and fsm free
- xpath: allow underscore in node identifier
- vxlan: don't format unknown rtnl attrs (bsc#1219751)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.13.1" arch="src" src="src/wicked-0.6.74-150400.3.13.1.src.rpm">
          <filename>wicked-0.6.74-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.13.1" arch="x86_64" src="x86_64/wicked-0.6.74-150400.3.13.1.x86_64.rpm">
          <filename>wicked-0.6.74-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.13.1" arch="x86_64" src="x86_64/wicked-service-0.6.74-150400.3.13.1.x86_64.rpm">
          <filename>wicked-service-0.6.74-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.13.1" arch="s390x" src="s390x/wicked-0.6.74-150400.3.13.1.s390x.rpm">
          <filename>wicked-0.6.74-150400.3.13.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.13.1" arch="s390x" src="s390x/wicked-service-0.6.74-150400.3.13.1.s390x.rpm">
          <filename>wicked-service-0.6.74-150400.3.13.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.13.1" arch="aarch64" src="aarch64/wicked-0.6.74-150400.3.13.1.aarch64.rpm">
          <filename>wicked-0.6.74-150400.3.13.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.13.1" arch="aarch64" src="aarch64/wicked-service-0.6.74-150400.3.13.1.aarch64.rpm">
          <filename>wicked-service-0.6.74-150400.3.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-833</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710149480"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219243" id="1219243" title="VUL-0: CVE-2024-0727: compat-openssl098,openssl,openssl-1_0_0,openssl-1_1,openssl-1_1-livepatches,openssl-3,openssl1: openssl: denial of service via null dereference" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" id="CVE-2024-0727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.63.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.63.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.63.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.63.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.63.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.63.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.63.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.63.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.63.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.63.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.63.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.63.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.63.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.63.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.63.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.63.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.63.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.63.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.63.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.63.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.63.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.63.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.63.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.63.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.63.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.63.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.63.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-861</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710317571"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218232" id="1218232" title="/etc/alternatives/java is missing after migration to 15-SP6" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Silence the output in the case of broken symlinks (bsc#1218232)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.12.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-907</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710489469"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215377" id="1215377" title="[Build 20230914-1] plugin /usr/sbin/sedispatch terminated unexpectedly" type="bugzilla"/>
    </references>
    <description>This update for audit fixes the following issue:

- Fix plugin termination when using systemd service units (bsc#1215377)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="src" src="src/audit-3.0.6-150400.4.16.1.src.rpm">
          <filename>audit-3.0.6-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.16.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.16.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.16.1.src.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/libaudit1-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>libaudit1-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/libauparse0-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>libauparse0-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.16.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/audit-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>audit-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/audit-audispd-plugins-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/libaudit1-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>libaudit1-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/libauparse0-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>libauparse0-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/python3-audit-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>python3-audit-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="s390x" src="s390x/system-group-audit-3.0.6-150400.4.16.1.s390x.rpm">
          <filename>system-group-audit-3.0.6-150400.4.16.1.s390x.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/libaudit1-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>libaudit1-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/libauparse0-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>libauparse0-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.16.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.16.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-515</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708008350"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1108281" id="1108281" title="kernel-source-azure should only be built for x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="Partner-L3: An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215275" id="1215275" title="VUL-0: CVE-2023-4921: kernel: use-after-free in net/sched: sch_qfq component" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216016" id="1216016" title="Emerald Rapids C-state support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217217" id="1217217" title="L3: tsc: Marking TSC unstable due to clocksource watchdog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217670" id="1217670" title="L3: NFS access hangs on diskless system with swap on NFS — ref:_00D1igLOd._500Tr1MQUl:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217895" id="1217895" title="L3-Question: kworker threads causing jitter on cpus with nohz_full configured - ref:_00D1igLOd._500Tr28oxm:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218713" id="1218713" title="Reduce old changelog entries and keep in kernel-docs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218730" id="1218730" title="VUL-0: CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218752" id="1218752" title="VUL-0: CVE-2023-6040: kernel: netfilter out-of-bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218757" id="1218757" title="VUL-0: CVE-2023-51782: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free because of a rose_accept race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218768" id="1218768" title="[SLE15SP6] sysctl-loggers fails to build with the latest 6.4 kernel of the week" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218804" id="1218804" title="VUL-0: CVE-2023-6915: kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218832" id="1218832" title="VUL-0: CVE-2024-0565: kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218836" id="1218836" title="VUL-0: CVE-2023-46838: kernel-source: netback processing of zero-length transmit fragment (XSA-448)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218916" id="1218916" title="VUL-0: CVE-2024-0641: kernel-source: deadlock leading to denail of service in tipc_crypto_key_revoke" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218929" id="1218929" title="{sck 9.0} sck 9.0 beta2-3 [Marble Beta1][Micro + KVM - Full] Install Kit on SUT fails for the KVM section of testing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218930" id="1218930" title="{sck 9.0} sck 9.0 beta3-1 [SLE Micro 6.0 Beta2][SLES 15 SP6 Beta3] Install Kit on SUT test - Error:1: 1 Unable to get multipath info." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218968" id="1218968" title="L3: NFS 4.0 LOCK calls getting constant NFS4ERR_BAD_SEQID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219053" id="1219053" title="VUL-0: CVE-2024-0775: kernel: use-after-free while changing the mount option in __ext4_remount leading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219120" id="1219120" title="VUL-0: CVE-2023-51043: kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219128" id="1219128" title="VUL-0: CVE-2023-51042: kernel-source: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219412" id="1219412" title="VUL-0: CVE-2021-33631: kernel: integer overflow in ext4_write_inline_data_end()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219429" id="1219429" title="VUL-0: CVE-2024-1085: kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219434" id="1219434" title="VUL-0: CVE-2024-1086: kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219490" id="1219490" title="L3: trace_event_file null-ptr-deref in tracing_open_file_tr()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" id="CVE-2024-1085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" id="CVE-2024-1086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" id="CVE-2023-51042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" id="CVE-2023-51780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" id="CVE-2023-46838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" id="CVE-2021-33631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" id="CVE-2023-4921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" id="CVE-2023-51043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" id="CVE-2024-0775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" id="CVE-2023-6040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" id="CVE-2024-0641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" id="CVE-2024-0565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" id="CVE-2023-6915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" id="CVE-2023-51782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218689" id="1218689" title="VUL-0: CVE-2024-0340: kernel: information disclosure in vhost/vhost.c:vhost_new_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218968" id="1218968" title="L3: NFS 4.0 LOCK calls getting constant NFS4ERR_BAD_SEQID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219349" id="1219349" title="SLE-15SP5 KOTD: nfslock test causes kernel oops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219608" id="1219608" title="VUL-0: CVE-2024-24860: kernel-source,kernel-source-azure,kernel-source-rt: race condition in {min,max}_key_size_set() can lead to a kernel panic" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0340" id="CVE-2024-0340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" id="CVE-2024-24860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429).
- CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434).
- CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
- CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730).
- CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836).
- CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702).
- CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275).
- CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120).
- CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053).
- CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752).
- CVE-2024-0641: Fixed a denial of service vulnerability in tipc_crypto_key_revoke in net/tipc/crypto.c (bsc#1218916).
- CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1218832).
- CVE-2023-6915: Fixed a NULL pointer dereference problem in ida_free in lib/idr.c (bsc#1218804).
- CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757).
- CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689).
- CVE-2024-24860: Fixed a denial of service caused by a race condition in {min,max}_key_size_set() (bsc#1219608).

The following non-security bugs were fixed:

- Store the old kernel changelog entries in kernel-docs package (bsc#1218713).
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (git-fixes).
- bcache: Remove unnecessary NULL point check in node allocations (git-fixes).
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (git-fixes).
- bcache: avoid NULL checking to c-&gt;root in run_cache_set() (git-fixes).
- bcache: avoid oversize memory allocation by small stripe_size (git-fixes).
- bcache: check return value from btree_node_alloc_replacement() (git-fixes).
- bcache: fixup btree_cache_wait list damage (git-fixes).
- bcache: fixup init dirty data errors (git-fixes).
- bcache: fixup lock c-&gt;root error (git-fixes).
- bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race (git-fixes).
- bcache: prevent potential division by zero error (git-fixes).
- bcache: remove redundant assignment to variable cur_idx (git-fixes).
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (git-fixes).
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (git-fixes).
- block: Fix kabi header include (bsc#1218929).
- block: free the extended dev_t minor later (bsc#1218930).
- clocksource: Skip watchdog check for large watchdog intervals (bsc#1217217).
- clocksource: disable watchdog checks on TSC when TSC is watchdog (bsc#1215885).
- dm cache policy smq: ensure IO does not prevent cleaner policy progress (git-fixes).
- dm cache: add cond_resched() to various workqueue loops (git-fixes).
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (git-fixes).
- dm crypt: add cond_resched() to dmcrypt_write() (git-fixes).
- dm crypt: avoid accessing uninitialized tasklet (git-fixes).
- dm flakey: do not corrupt the zero page (git-fixes).
- dm flakey: fix a crash with invalid table line (git-fixes).
- dm flakey: fix logic when corrupting a bio (git-fixes).
- dm init: add dm-mod.waitfor to wait for asynchronously probed block devices (git-fixes).
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (git-fixes).
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (git-fixes).
- dm raid: clean up four equivalent goto tags in raid_ctr() (git-fixes).
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (git-fixes).
- dm stats: check for and propagate alloc_percpu failure (git-fixes).
- dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (git-fixes).
- dm thin metadata: check fail_io before using data_sm (git-fixes).
- dm thin: add cond_resched() to various workqueue loops (git-fixes).
- dm thin: fix deadlock when swapping to thin device (bsc#1177529).
- dm verity: do not perform FEC for failed readahead IO (git-fixes).
- dm verity: fix error handling for check_at_most_once on FEC (git-fixes).
- dm verity: skip redundant verity_handle_err() on I/O errors (git-fixes).
- dm zoned: free dmz-&gt;ddev array in dmz_put_zoned_devices (git-fixes).
- dm-delay: fix a race between delay_presuspend and delay_bio (git-fixes).
- dm-integrity: do not modify bio's immutable bio_vec in integrity_metadata() (git-fixes).
- dm-verity: align struct dm_verity_fec_io properly (git-fixes).
- dm: add cond_resched() to dm_wq_work() (git-fixes).
- dm: do not lock fs when the map is NULL during suspend or resume (git-fixes).
- dm: do not lock fs when the map is NULL in process of resume (git-fixes).
- dm: remove flush_scheduled_work() during local_exit() (git-fixes).
- dm: send just one event on resize, not two (git-fixes).
- doc/README.KSYMS: Add to repo.
- hv_netvsc: rndis_filter needs to select NLS (git-fixes).
- intel_idle: add Emerald Rapids Xeon support (bsc#1216016).
- kabi, vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
- loop: suppress uevents while reconfiguring the device (git-fixes).
- nbd: Fix debugfs_create_dir error checking (git-fixes).
- nbd: fix incomplete validation of ioctl arg (git-fixes).
- nbd: use the correct block_device in nbd_bdev_reset (git-fixes).
- nfsd: fix RELEASE_LOCKOWNER (bsc#1218968).
- nfsd4: add refcount for nfsd4_blocked_lock (bsc#1218968 bsc#1219349).
- null_blk: Always check queue mode setting from configfs (git-fixes).
- powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device (bsc#1212091 ltc#199106 git-fixes).
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (git-fixes).
- rbd: decouple header read-in from updating rbd_dev-&gt;header (git-fixes).
- rbd: decouple parent info read-in from updating rbd_dev (git-fixes).
- rbd: get snapshot context after exclusive lock is ensured to be held (git-fixes).
- rbd: harden get_lock_owner_info() a bit (git-fixes).
- rbd: make get_lock_owner_info() return a single locker or NULL (git-fixes).
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (git-fixes).
- rbd: move rbd_dev_refresh() definition (git-fixes).
- rbd: prevent busy loop when requesting exclusive lock (git-fixes).
- rbd: retrieve and check lock owner twice before blocklisting (git-fixes).
- rbd: take header_rwsem in rbd_dev_refresh() only when updating (git-fixes).
- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- scsi: ibmvfc: Implement channel queue depth and event buffer accounting (bsc#1209834 ltc#202097).
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (bsc#1209834 ltc#202097).
- trace,smp: Add tracepoints around remotelly called functions (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.108.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.108.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.108.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.108.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.108.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.108.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.108.1.150400.24.50.2" arch="src" src="src/kernel-default-base-5.14.21-150400.24.108.1.150400.24.50.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.108.1.150400.24.50.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.108.1.150400.24.50.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.108.1.150400.24.50.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.108.1.150400.24.50.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.108.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.108.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.108.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.108.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.108.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.108.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.108.1.150400.24.50.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.108.1.150400.24.50.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.108.1.150400.24.50.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-725</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709201031"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219189" id="1219189" title="L3: rpm DB lock/failure during update (suse-build-key) ref:_00D1igLOd._500Tr3UguZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219123" id="1219123" title="Partner-L3: A lock (/usr/lib/sysimage/rpm/.rpm.lock) contention issue introduced by suse-build-key failed the whole OS upgrade" type="bugzilla"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

- Switch container key to be default RSA 4096bit. (jsc#PED-2777)
- run import script also in %posttrans section, but only when
  libzypp is not active. bsc#1219189 bsc#1219123</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.43.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.43.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.43.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.43.1" arch="src" src="src/suse-build-key-12.0-150000.8.43.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.43.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-558</id>
    <title>Security update for libssh2_org</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708446901"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218971" id="1218971" title="L3: SLES 12 SP5: recent update to libssh2-1-1.11.0-29.9.1 causes HANA scale-out installation to fail" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve"/>
    </references>
    <description>This update for libssh2_org fixes the following issues:

- Always add the KEX pseudo-methods &quot;ext-info-c&quot; and &quot;kex-strict-c-v00@openssh.com&quot;
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]

  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.

</description>
    <pkglist>
      <collection>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.25.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.25.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.25.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.25.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.25.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.25.1.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.25.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.25.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.25.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.25.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.25.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-613</id>
    <title>Security update for libxml2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717768920"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062" id="CVE-2024-25062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219576" id="1219576" title="VUL-0: CVE-2024-25062: libxml2,libxml2-python,python-libxml2,python-libxml2-python: use-after-free in XMLReader" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.28.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.28.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="src" src="src/libxml2-2.9.14-150400.5.28.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.28.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.28.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.28.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.28.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.28.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.28.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.28.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.28.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.28.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="s390x" src="s390x/libxml2-2-2.9.14-150400.5.28.1.s390x.rpm">
          <filename>libxml2-2-2.9.14-150400.5.28.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.28.1" arch="s390x" src="s390x/libxml2-tools-2.9.14-150400.5.28.1.s390x.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.28.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="s390x" src="s390x/python3-libxml2-2.9.14-150400.5.28.1.s390x.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.28.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.28.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.28.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.28.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.28.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.28.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.28.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.28.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-929</id>
    <title>Recommended update for coreutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710826598"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219321" id="1219321" title="tail to sysfs files not working with 64K kernel" type="bugzilla"/>
    </references>
    <description>This update for coreutils fixes the following issues:

- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
</description>
    <pkglist>
      <collection>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="src" src="src/coreutils-8.32-150400.9.3.1.src.rpm">
          <filename>coreutils-8.32-150400.9.3.1.src.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="x86_64" src="x86_64/coreutils-8.32-150400.9.3.1.x86_64.rpm">
          <filename>coreutils-8.32-150400.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="s390x" src="s390x/coreutils-8.32-150400.9.3.1.s390x.rpm">
          <filename>coreutils-8.32-150400.9.3.1.s390x.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.3.1" arch="aarch64" src="aarch64/coreutils-8.32-150400.9.3.1.aarch64.rpm">
          <filename>coreutils-8.32-150400.9.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-573</id>
    <title>Security update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708504660"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1133277" id="1133277" title="LTO: protobuf build fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182659" id="1182659" title="network/python-grpcio: Bug python-grpcio package seems to be broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203378" id="1203378" title="building against abseil-cpp with g++-11 causes linker errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208794" id="1208794" title="dav1d failed to build for ppc64le" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212180" id="1212180" title="VUL-0: CVE-2023-32731: grpc: When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212182" id="1212182" title="VUL-0: CVE-2023-32732: grpc: gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214148" id="1214148" title="VUL-0: CVE-2023-33953: grpc: unbounded memory and CPU consumption in the HPACK parser leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215334" id="1215334" title="VUL-0: CVE-2023-4785: grpc: Denial of services due to lack of error handling" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32731" id="CVE-2023-32731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32731" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32732" id="CVE-2023-32732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32732" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33953" id="CVE-2023-33953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33953" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" id="CVE-2023-44487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4785" id="CVE-2023-4785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4785" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5014" id="PED-5014" title="https://jira.suse.com/browse/PED-5014" type="jira"/>
    </references>
    <description>This update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2 fixes the following issues:

abseil-cpp was updated to:

Update to 20230802.1:

* Add StdcppWaiter to the end of the list of waiter implementations

Update to 20230802.0

  What's New:

  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.

Update to 20230125.3

Details can be found on:

    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3

Update to 20230125.2

What's New:

    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
      An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
      A library for computing CRC32C checksums has been added.
      Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
      The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
      Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.

  Breaking Changes:

    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
      The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.

  Known Issues

    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.

Update to version 20220623.0

  What's New:

  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.

  Breaking Changes:

  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
	the warnings or use -Wno-error=deprecated-declarations to see warnings but
	not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
	the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.

  Other:

  * This will be the last release to support C++11. Future releases will require at least C++14.

grpc was updated to 1.60:

Update to release 1.60

* Implemented dualstack IPv4 and IPv6 backend support, as per
  draft gRFC A61. xDS support currently guarded by
  GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS env var.
* Support for setting proxy for addresses.
* Add v1 reflection.

update to 1.59.3:

* Security - Revocation: Crl backport to 1.59. (#34926)

Update to release 1.59.2

* Fixes for CVE-2023-44487

Update to version 1.59.1:

* C++: Fix MakeCordFromSlice memory bug (gh#grpc/grpc#34552).

Update to version 1.59.0:

* xds ssa: Remove environment variable protection for stateful
  affinity (gh#grpc/grpc#34435).
* c-ares: fix spin loop bug when c-ares gives up on a socket
  that still has data left in its read buffer
  (gh#grpc/grpc#34185).
* Deps: Adding upb as a submodule (gh#grpc/grpc#34199).
* EventEngine: Update Cancel contract on closure deletion
  timeline (gh#grpc/grpc#34167).
* csharp codegen: Handle empty base_namespace option value to
  fix gh#grpc/grpc#34113 (gh#grpc/grpc#34137).
* Ruby:
  - replace strdup with gpr_strdup (gh#grpc/grpc#34177).
  - drop ruby 2.6 support (gh#grpc/grpc#34198).

Update to release 1.58.1

* Reintroduced c-ares 1.14 or later support

Update to release 1.58

* ruby extension: remove unnecessary background thread startup
  wait logic that interferes with forking

Update to release 1.57 (CVE-2023-4785, bsc#1215334, CVE-2023-33953, bsc#1214148)

* EventEngine: Change GetDNSResolver to return
  absl::StatusOr&lt;std::unique_ptr&lt;DNSResolver&gt;&gt;.
* Improve server handling of file descriptor exhaustion.
* Add a channel argument to set DSCP on streams.

Update to release 1.56.2

* Improve server handling of file descriptor exhaustion

Update to release 1.56.0 (CVE-2023-32731, bsc#1212180)

* core: Add support for vsock transport.
* EventEngine: Change TXT lookup result type to
  std::vector&lt;std::string&gt;.
* C++/Authz: support customizable audit functionality for
  authorization policy.

Update to release 1.54.1

* Bring declarations and definitions to be in sync

Update to release 1.54 (CVE-2023-32732, bsc#1212182)

* XDS: enable XDS federation by default
* TlsCreds: Support revocation of intermediate in chain

Update to release 1.51.1

* Only a macOS/aarch64-related change

Update to release 1.51

* c-ares DNS resolver: fix logical race between resolution
  timeout/cancellation and fd readability.
* Remove support for pthread TLS

Update to release 1.50.0

* Core

  - Derive EventEngine from std::enable_shared_from_this. (#31060)
  - Revert &quot;Revert &quot;[chttp2] fix stream leak with queued flow control
    update and absence of writes (#30907)&quot; (#30991)&quot;. (#30992)
  - [chttp2] fix stream leak with queued flow control update and absence of writes. (#30907)
  - Remove gpr_codegen. (#30899)
  - client_channel: allow LB policy to communicate update errors to resolver. (#30809)
  - FaultInjection: Fix random number generation. (#30623)

* C++

  - OpenCensus Plugin: Add measure and views for started RPCs. (#31034)

* C#

  - Grpc.Tools: Parse warnings from libprotobuf (fix #27502). (#30371)
  - Grpc.Tools add support for env variable GRPC_PROTOC_PLUGIN (fix #27099). (#30411)
  - Grpc.Tools document AdditionalImportDirs. (#30405)
  - Fix OutputOptions and GrpcOutputOptions (issue #25950). (#30410)

Update to release 1.49.1

* All

  - Update protobuf to v21.6 on 1.49.x. (#31028)

* Ruby

  - Backport &quot;Fix ruby windows ucrt build #31051&quot; to 1.49.x. (#31053)

Update to release 1.49.0

* Core
  - Backport: &quot;stabilize the C2P resolver URI scheme&quot; to v1.49.x. (#30654)
  - Bump core version. (#30588)
  - Update OpenCensus to HEAD. (#30567)
  - Update protobuf submodule to 3.21.5. (#30548)
  - Update third_party/protobuf to 3.21.4. (#30377)
  - [core] Remove GRPC_INITIAL_METADATA_CORKED flag. (#30443)
  - HTTP2: Fix keepalive time throttling. (#30164)
  - Use AnyInvocable in EventEngine APIs. (#30220)

* Python

  - Add type stub generation support to grpcio-tools. (#30498)

Update to release 1.48.1

* Backport EventEngine Forkables

Update to release 1.48.0
 
* C++14 is now required
* xDS: Workaround to get gRPC clients working with istio

Update to release 1.46.3

* backport: xds: use federation env var to guard new-style
  resource name parsing (#29725) #29727

Update to release 1.46

* Added HTTP/1.1 support in httpcli
* HTTP2: Add graceful goaway

Update to release 1.45.2

* Various fixes related to XDS
* HTTP2: Should not run cancelling logic on servers when
  receiving GOAWAY

Update to release 1.45.1

* Switched to epoll1 as a default polling engine for Linux

Update to version 1.45.0:

* Core:

  - Backport &quot;Include ADS stream error in XDS error updates
    (#29014)&quot; to 1.45.x [gh#grpc/grpc#29121].
  - Bump core version to 23.0.0 for upcoming release
    [gh#grpc/grpc#29026].
  - Fix memory leak in HTTP request security handshake
    cancellation [gh#grpc/grpc#28971].
  - CompositeChannelCredentials: Comparator implementation
    [gh#grpc/grpc#28902].
  - Delete custom iomgr [gh#grpc/grpc#28816].
  - Implement transparent retries [gh#grpc/grpc#28548].
  - Uniquify channel args keys [gh#grpc/grpc#28799].
  - Set trailing_metadata_available for recv_initial_metadata
    ops when generating a fake status [gh#grpc/grpc#28827].
  - Eliminate gRPC insecure build [gh#grpc/grpc#25586].
  - Fix for a racy WorkSerializer shutdown [gh#grpc/grpc#28769].
  - InsecureCredentials: singleton object [gh#grpc/grpc#28777].
  - Add http cancel api [gh#grpc/grpc#28354].
  - Memory leak fix on windows in grpc_tcp_create()
    [gh#grpc/grpc#27457].
  - xDS: Rbac filter updates [gh#grpc/grpc#28568].

* C++

  - Bump the minimum gcc to 5 [gh#grpc/grpc#28786].
  - Add experimental API for CRL checking support to gRPC C++
    TlsCredentials [gh#grpc/grpc#28407].

Update to release 1.44.0

* Add a trace to list which filters are contained in a
  channel stack.
* Remove grpc_httpcli_context.
* xDS: Add support for RBAC HTTP filter.
* API to cancel grpc_resolve_address.

Update to version 1.43.2:

* Fix google-c2p-experimental issue (gh#grpc/grpc#28692).

Changes from version 1.43.0:

* Core:

  - Remove redundant work serializer usage in c-ares windows
    code (gh#grpc/grpc#28016).
  - Support RDS updates on the server (gh#grpc/grpc#27851).
  - Use WorkSerializer in XdsClient to propagate updates in a
    synchronized manner (gh#grpc/grpc#27975).
  - Support Custom Post-handshake Verification in TlsCredentials
    (gh#grpc/grpc#25631).
  - Reintroduce the EventEngine default factory
    (gh#grpc/grpc#27920).
  - Assert Android API &gt;= v21 (gh#grpc/grpc#27943).
  - Add support for abstract unix domain sockets
    (gh#grpc/grpc#27906).
* C++:

  - OpenCensus: Move metadata storage to arena
    (gh#grpc/grpc#27948).

* [C#] Add nullable type attributes to Grpc.Core.Api
  (gh#grpc/grpc#27887).
- Update package name libgrpc++1 to libgrpc++1_43 in keeping with
  updated so number.

Update to release 1.41.0

* xDS: Remove environmental variable guard for security.
* xDS Security: Use new way to fetch certificate provider
  plugin instance config.
* xDS server serving status: Use a struct to allow more fields
  to be added in the future.

Update to release 1.39.1

* Fix C# protoc plugin argument parsing on 1.39.x

Update to version 1.39.0:

* Core

  - Initialize tcp_posix for CFStream when needed
    (gh#grpc/grpc#26530).
  - Update boringssl submodule (gh#grpc/grpc#26520).
  - Fix backup poller races (gh#grpc/grpc#26446).
  - Use default port 443 in HTTP CONNECT request
    (gh#grpc/grpc#26331).
* C++

  - New iomgr implementation backed by the EventEngine API
    (gh#grpc/grpc#26026).
  - async_unary_call: add a Destroy method, called by
    std::default_delete (gh#grpc/grpc#26389).
  - De-experimentalize C++ callback API (gh#grpc/grpc#25728).

* PHP: stop reading composer.json file just to read the version
  string (gh#grpc/grpc#26156).

* Ruby: Set XDS user agent in ruby via macros
  (gh#grpc/grpc#26268).

Update to release 1.38.0

* Invalidate ExecCtx now before computing timeouts in all
  repeating timer events using a WorkSerializer or combiner.
* Fix use-after-unref bug in fault_injection_filter
* New gRPC EventEngine Interface
* Allow the AWS_DEFAULT_REGION environment variable
* s/OnServingStatusChange/OnServingStatusUpdate/

Update to release 1.37.1

* Use URI form of address for channelz listen node
* Implementation CSDS (xDS Config Dump)
* xDS status notifier
* Remove CAS loops in global subchannel pool and simplify
  subchannel refcounting

Update to release 1.36.4

* A fix for DNS SRV lookups on Windows

Update to 1.36.1:

* Core:
  * Remove unnecessary internal pollset set in c-ares DNS resolver
  * Support Default Root Certs in Tls Credentials
  * back-port: add env var protection for google-c2p resolver
* C++:
  * Move third party identity C++ api out of experimental namespace
  * refactor!: change error_details functions to templates
  * Support ServerContext for callback API
* PHP:
  * support for PSM security
  * fixed segfault on reused call object
  * fixed phpunit 8 warnings
* Python:
  * Implement Python Client and Server xDS Creds

Update to version 1.34.1:

* Backport &quot;Lazily import grpc_tools when using runtime
  stub/message generation&quot; to 1.34.x (gh#grpc/grpc#25011).
* Backport &quot;do not use &lt;PublicSign&gt;true&lt;/PublicSign&gt; on
  non-windows&quot; to 1.34.x (gh#grpc/grpc#24995).

Update to version 1.34.0:

* Core:

- Protect xds security code with the environment variable
    &quot;GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT&quot;
    (gh#grpc/grpc#24782).
  - Add support for &quot;unix-abstract:&quot; URIs to support abstract
    unix domain sockets (gh#grpc/grpc#24500).
  - Increment Index when parsing not plumbed SAN fields
    (gh#grpc/grpc#24601).
  - Revert &quot;Revert &quot;Deprecate
    GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS&quot;&quot;
    (gh#grpc/grpc#24518).
  - xds: Set status code to INVALID_ARGUMENT when NACKing
    (gh#grpc/grpc#24516).
  - Include stddef.h in address_sorting.h (gh#grpc/grpc#24514).
  - xds: Add support for case_sensitive option in RouteMatch
    (gh#grpc/grpc#24381).
* C++:
  - Fix --define=grpc_no_xds=true builds (gh#grpc/grpc#24503).
  - Experimental support and tests for
    CreateCustomInsecureChannelWithInterceptorsFromFd
    (gh#grpc/grpc#24362).

Update to release 1.33.2

* Deprecate GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS.
* Expose Cronet error message to the application layer.
* Remove grpc_channel_ping from surface API.
* Do not send BDP pings if there is no receive side activity.

Update to version 1.33.1

* Core

  - Deprecate
    GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS
    (gh#grpc/grpc#24063).
  - Expose Cronet error message to the application layer
    (gh#grpc/grpc#24083).
  - Remove grpc_channel_ping from surface API
    (gh#grpc/grpc#23894).
  - Do not send BDP pings if there is no receive side activity
    (gh#grpc/grpc#22997).

* C++

  - Makefile: only support building deps from submodule
    (gh#grpc/grpc#23957).

- Add new subpackages - libupb and upb-devel. Currently, grpc
  sources include also upb sources. Before this change, libupb and
  upb-devel used to be included in a separate package - upb.

Update to version 1.32.0:

* Core
  - Remove stream from stalled lists on remove_stream
    (gh#grpc/grpc#23984).
  - Do not cancel RPC if send metadata size if larger than
    peer's limit (gh#grpc/grpc#23806).
  - Don't consider receiving non-OK status as an error for HTTP2
    (gh#grpc/grpc#19545).
  - Keepalive throttling (gh#grpc/grpc#23313).
  - Include the target_uri in &quot;target uri is not valid&quot; error
    messages (gh#grpc/grpc#23782).
  - Fix &quot;cannot send compressed message large than 1024B&quot; in
    cronet_transport (gh#grpc/grpc#23219).
  - Receive SETTINGS frame on clients before declaring
    subchannel READY (gh#grpc/grpc#23636).
  - Enabled GPR_ABSEIL_SYNC (gh#grpc/grpc#23372).
  - Experimental xDS v3 support (gh#grpc/grpc#23281).

* C++

  - Upgrade bazel used for all tests to 2.2.0
    (gh#grpc/grpc#23902).
  - Remove test targets and test helper libraries from Makefile
    (gh#grpc/grpc#23813).
  - Fix repeated builds broken by re2's cmake
    (gh#grpc/grpc#23587).
  - Log the peer address of grpc_cli CallMethod RPCs to stderr
    (gh#grpc/grpc#23557).

opencensus-proto was updated to 0.3.0+git.20200721:

- Update to version 0.3.0+git.20200721:

  * Bump version to 0.3.0
  * Generate Go types using  protocolbuffers/protobuf-go (#218)
  * Load proto_library() rule. (#216)

- Update to version 0.2.1+git.20190826:

  * Remove grpc_java dependency and java_proto rules. (#214)
  * Add C++ targets, especially for gRPC services. (#212)
  * Upgrade bazel and dependencies to latest. (#211)
  * Bring back bazel cache to make CI faster. (#210)
  * Travis: don't require sudo for bazel installation. (#209)

- Update to version 0.2.1:

  * Add grpc-gateway for metrics service. (#205)
  * Pin bazel version in travis builds (#207)
  * Update gen-go files (#199)
  * Add Web JS as a LibraryInfo.Language option (#198)
  * Set up Python packaging for PyPI release. (#197)
  * Add tracestate to links. (#191)
  * Python proto file generator and generated proto files (#196)
  * Ruby proto file generator and generated proto files (#192)
  * Add py_proto_library() rules for envoy/api. (#194)
  * Gradle: Upgrade dependency versions. (#193)
  * Update release versions for readme. (#189)
  * Start 0.3.0 development cycle
  * Update gen-go files. (#187)
  * Revert &quot;Start 0.3.0 development cycle (#167)&quot; (#183)
  * Revert optimization for metric descriptor and bucket options for now. (#184)
  * Constant sampler: add option to always follow the parent's decision. (#182)
  * Document that all maximum values must be specified. (#181)
  * Fix typo in bucket bounds. (#178)
  * Restrict people who can approve reviews. This is to ensure code quality. (#177)
  * Use bazel cache to make CI faster. (#176)
  * Add grpc generated files to the idea plugin. (#175)
  * Add Resource to Span (#174)
  * time is required (#170)
  * Upgrade protobuf dependency to v3.6.1.3. (#173)
  * assume Ok Status when not set (#171)
  * Minor comments fixes (#160)
  * Start 0.3.0 development cycle (#167)
  * Update gen-go files. (#162)
  * Update releasing instruction. (#163)
  * Fix Travis build. (#165)
  * Add OpenApi doc for trace agent grpc-gateway (#157)
  * Add command to generate OpenApi/Swagger doc for grpc-gateway (#156)
  * Update gen-go files (#155)
  * Add trace export grpc-gateway config (#77)
  * Fix bazel build after bazel upgrade (#154)
  * README: Add gitter, javadoc and godoc badge. (#151)
  * Update release versions for README. (#150)
  * Start 0.2.0 development cycle
  * Add resource and metrics_service proto to mkgogen. Re-generate gen-go files. (#147)
  * Add resource to protocol (#137)
  * Fix generating the javadoc. (#144)
  * Metrics/TimeSeries: start time should not be included while end time should. (#142)
  * README: Add instructions on using opencensus_proto with Bazel. (#140)
  * agent/README: update package info. (#138)
  * Agent: Add metrics service. (#136)
  * Tracing: Add default limits to TraceConfig. (#133)
  * Remove a stale TODO. (#134)
  * README: Add a note about go_proto_library rules. (#135)
  * add golang bazel build support (#132)
  * Remove exporter protos from mkgogen. (#128)
  * Update README and RELEASING. (#130)
  * Change histogram buckets definition to be OpenMetrics compatible. (#121)
  * Remove exporter/v1 protos. (#124)
  * Clean up the README for Agent proto. (#126)
  * Change Quantiles to ValuesAtPercentile. (#122)
  * Extend the TraceService service to support export/config for multiple Applications. (#119)
  * Add specifications on Agent implementation details. (#112)
  * Update gitignore (#118)
  * Remove maven support. Not used. (#116)
  * Add gauge distribution. (#117)
  * Add support for Summary type and value. (#110)
  * Add Maven status and instructions on adding dependencies. (#115)
  * Bump version to 0.0.3-SNAPSHOT
  * Bump version to 0.0.2
  * Update gen-go files. (#114)
  * Gradle: Add missing source and javadoc rules. (#113)
  * Add support for float attributes. (#98)
  * Change from mean to sum in distribution. (#109)
  * Bump version to v0.0.2-SNAPSHOT
  * Bump version to v0.0.1
  * Add releasing instructions in RELEASING.md. (#106)
  * Add Gradle build rules for generating gRPC service and releasing to Maven. (#102)
  * Re-organize proto directory structure. (#103)
  * Update gen-go files. (#101)
  * Add a note about interceptors of other libraries. (#94)
  * agent/common/v1: use exporter_version, core_library_version in LibraryInfo (#100)
  * opencensus/proto: add default Agent port to README (#97)
  * Update the message names for Config RPC. (#93)
  * Add details about agent protocol in the README. (#88)
  * Update gen-go files. (#92)
  * agent/trace/v1: fix signature for Config and comments too (#91)
  * Update gen-go files. (#86)
  * Make tracestate a list instead of a map to preserve ordering. (#84)
  * Allow MetricDescriptor to be sent only the first time. (#78)
  * Update mkgogen.sh. (#85)
  * Add agent trace service proto definitions. (#79)
  * Update proto and gen-go package names. (#83)
  * Add agent/common proto and BUILD. (#81)
  *  Add trace_config.proto. (#80)
  * Build exporters with maven. (#76)
  * Make clear that cumulative int/float can go only up. (#75)
  * Add tracestate field to the Span proto. (#74)
  * gradle wrapper --gradle-version 4.9 (#72)
  * Change from multiple types of timeseries to have one. (#71)
  * Move exemplars in the Bucket. (#70)
  * Update gen-go files. (#69)
  * Move metrics in the top level directory. (#68)
  * Remove Range from Distribution. No backend supports this. (#67)
  * Remove unused MetricSet message. (#66)
  * Metrics: Add Exemplar to DistributionValue. (#62)
  * Gauge vs Cumulative. (#65)
  * Clarifying comment about bucket boundaries. (#64)
  * Make MetricDescriptor.Type capture the type of the value as well. (#63)
  * Regenerate the Go artifacts (#61)
  * Add export service proto (#60)

- Initial version 20180523

protobuf was updated to 25.1:

update to 25.1:

  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)

update to 25.0:

  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
C++:
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
Java:
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split(&quot;/&quot;)
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
UPB (Python/PHP/Ruby C-Extension):
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault

- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time

update to 23.4:

  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1

update to 23.3:

  C++:

  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C:
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.

  Compiler:
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug

  Java:
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.

  Csharp:
  * [C#] Replace regex that validates descriptor names

update to 22.5:

  C++:
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)

update to 22.4:

  C++:
  * Fix libprotoc: export useful symbols from .so

  Python:
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.

  Other:
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386

update to v22.3

  UPB (Python/PHP/Ruby C-Extension):
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest

update to 22.2:

  Java:
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files

update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip &quot;src&quot; from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.

- update to 22.0:

  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0

update to v21.12:

* Python:
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.

update to 21.11:

* Python:
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)

update to 21.10::

* Java:
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)

update to 21.9:
  * Ruby:
      * Replace libc strdup usage with internal impl to restore musl compat (#10818)
      * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other:
      * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++:
      * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java:
      * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
      * Refactoring java full runtime to reuse sub-message builders and prepare to
        migrate parsing logic from parse constructor to builder.
      * Move proto wireformat parsing functionality from the private &quot;parsing
        constructor&quot; to the Builder class.
      * Change the Lite runtime to prefer merging from the wireformat into mutable
        messages rather than building up a new immutable object before merging. This
        way results in fewer allocations and copy operations.
      * Make message-type extensions merge from wire-format instead of building up
        instances and merging afterwards. This has much better performance.
      * Fix TextFormat parser to build up recurring (but supposedly not repeated)
        sub-messages directly from text rather than building a new sub-message and
        merging the fully formed message into the existing field.

update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing

update to 21.5:

  PHP:
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages

  Python:

  * Fixed comparison of maps in Python.

- update to 21.4:

  * Reduce the required alignment of ArenaString from 8 to 4

- update to 21.3:

  * C++:
    * Add header search paths to Protobuf-C++.podspec (#10024)
    * Fixed Visual Studio constinit errors (#10232)
    * Fix #9947: make the ABI compatible between debug and non-debug builds (#10271)
  * UPB:
    * Allow empty package names (fixes behavior regression in 4.21.0)
    * Fix a SEGV bug when comparing a non-materialized sub-message (#10208)
    * Fix several bugs in descriptor mapping containers (eg. descriptor.services_by_name)
      * for x in mapping now yields keys rather than values, to match Python
        conventions and the behavior of the old library.
      * Lookup operations now correctly reject unhashable types as map keys.
      * We implement repr() to use the same format as dict.
    * Fix maps to use the ScalarMapContainer class when appropriate
    * Fix bug when parsing an unknown value in a proto2 enum extension (protocolbuffers/upb#717)
  * PHP:
    * Add &quot;readonly&quot; as a keyword for PHP and add previous classnames to descriptor pool (#10041)
  * Python:
    * Make //:protobuf_python and //:well_known_types_py_pb2 public (#10118)
  * Bazel:
     * Add back a filegroup for :well_known_protos (#10061)

Update to 21.2:
- C++:
  - cmake: Call get_filename_component() with DIRECTORY mode instead of PATH mode (#9614)
  - Escape GetObject macro inside protoc-generated code (#9739)
  - Update CMake configuration to add a dependency on Abseil (#9793)
  - Fix cmake install targets (#9822)
  - Use __constinit only in GCC 12.2 and up (#9936)
- Java:
  - Update protobuf_version.bzl to separate protoc and per-language java … (#9900)
- Python:
  - Increment python major version to 4 in version.json for python upb (#9926)
  - The C extension module for Python has been rewritten to use the upb library.
  - This is expected to deliver significant performance benefits, especially when
    parsing large payloads. There are some minor breaking changes, but these
    should not impact most users. For more information see:
    https://developers.google.com/protocol-buffers/docs/news/2022-05-06#python-updates
- PHP:
  - [PHP] fix PHP build system (#9571)
  - Fix building packaged PHP extension (#9727)
  - fix: reserve &quot;ReadOnly&quot; keyword for PHP 8.1 and add compatibility (#9633)
  - fix: phpdoc syntax for repeatedfield parameters (#9784)
  - fix: phpdoc for repeatedfield (#9783)
  - Change enum string name for reserved words (#9780)
  - chore: [PHP] fix phpdoc for MapField keys (#9536)
  - Fixed PHP SEGV by not writing to shared memory for zend_class_entry. (#9996)
- Ruby:
  - Allow pre-compiled binaries for ruby 3.1.0 (#9566)
  - Implement respond_to? in RubyMessage (#9677)
  - [Ruby] Fix RepeatedField#last, #first inconsistencies (#9722)
  - Do not use range based UTF-8 validation in truffleruby (#9769)
  - Improve range handling logic of RepeatedField (#9799)
- Other:
  - Fix invalid dependency manifest when using descriptor_set_out (#9647)
  - Remove duplicate java generated code (#9909)

- Update to 3.20.1:

  - PHP:
    - Fix building packaged PHP extension (#9727)
    - Fixed composer.json to only advertise compatibility with
      PHP 7.0+. (#9819)
  - Ruby:
    - Disable the aarch64 build on macOS until it can be fixed. (#9816)
  - Other:
    - Fix versioning issues in 3.20.0

- Update to 3.20.1:
  - Ruby:
    - Dropped Ruby 2.3 and 2.4 support for CI and releases.
      (#9311)
    - Added Ruby 3.1 support for CI and releases (#9566).
    - Message.decode/encode: Add recursion_limit option
      (#9218/#9486)
    - Allocate with xrealloc()/xfree() so message allocation is
      visible to the
    - Ruby GC. In certain tests this leads to much lower memory
      usage due to more
    - frequent GC runs (#9586).
    - Fix conversion of singleton classes in Ruby (#9342)
    - Suppress warning for intentional circular require (#9556)
    - JSON will now output shorter strings for double and float
      fields when possible
    - without losing precision.
    - Encoding and decoding of binary format will now work
      properly on big-endian
    - systems.
    - UTF-8 verification was fixed to properly reject surrogate
      code points.
    - Unknown enums for proto2 protos now properly implement
      proto2's behavior of
    - putting such values in unknown fields.
  - Java:
    - Revert &quot;Standardize on Array copyOf&quot; (#9400)
    - Resolve more java field accessor name conflicts (#8198)
    - Fix parseFrom to only throw InvalidProtocolBufferException
    - InvalidProtocolBufferException now allows arbitrary wrapped
      Exception types.
    - Fix bug in FieldSet.Builder.mergeFrom
    - Flush CodedOutputStream also flushes underlying
      OutputStream
    - When oneof case is the same and the field type is Message,
      merge the
    - subfield. (previously it was replaced.)’
    - Add @CheckReturnValue to some protobuf types
    - Report original exceptions when parsing JSON
    - Add more info to @deprecated javadoc for set/get/has
      methods
    - Fix initialization bug in doc comment line numbers
    - Fix comments for message set wire format.
  - Kotlin:
    - Add test scope to kotlin-test for protobuf-kotlin-lite
      (#9518)
    - Add orNull extensions for optional message fields.
    - Add orNull extensions to all proto3 message fields.
  - Python:
    - Dropped support for Python &lt; 3.7 (#9480)
    - Protoc is now able to generate python stubs (.pyi) with
      --pyi_out
    - Pin multibuild scripts to get manylinux1 wheels back
      (#9216)
    - Fix type annotations of some Duration and Timestamp
      methods.
    - Repeated field containers are now generic in field types
      and could be used in type annotations.
    - Protobuf python generated codes are simplified. Descriptors
      and message classes' definitions are now dynamic created in
      internal/builder.py.
    - Insertion Points for messages classes are discarded.
    - has_presence is added for FieldDescriptor in python
    - Loosen indexing type requirements to allow valid index()
      implementations rather than only PyLongObjects.
    - Fix the deepcopy bug caused by not copying
      message_listener.
    - Added python JSON parse recursion limit (default 100)
    - Path info is added for python JSON parse errors
    - Pure python repeated scalar fields will not able to pickle.
      Convert to list first.
    - Timestamp.ToDatetime() now accepts an optional tzinfo
      parameter. If specified, the function returns
      a timezone-aware datetime in the given time zone. If
      omitted or None, the function returns a timezone-naive UTC
      datetime (as previously).
    - Adds client_streaming and server_streaming fields to
      MethodDescriptor.
    - Add &quot;ensure_ascii&quot; parameter to json_format.MessageToJson.
      This allows smaller JSON serializations with UTF-8 or other
      non-ASCII encodings.
    - Added experimental support for directly assigning numpy
      scalars and array.
    - Improve the calculation of public_dependencies in
      DescriptorPool.
    - [Breaking Change] Disallow setting fields to numpy
      singleton arrays or repeated fields to numpy
      multi-dimensional arrays. Numpy arrays should be indexed or
      flattened explicitly before assignment.
  - Compiler:
    - Migrate IsDefault(const std::string*) and
      UnsafeSetDefault(const std::string*)
    - Implement strong qualified tags for TaggedPtr
    - Rework allocations to power-of-two byte sizes.
    - Migrate IsDefault(const std::string*) and
      UnsafeSetDefault(const std::string*)
    - Implement strong qualified tags for TaggedPtr
    - Make TaggedPtr Set...() calls explicitly spell out the
      content type.
    - Check for parsing error before verifying UTF8.
    - Enforce a maximum message nesting limit of 32 in the
      descriptor builder to
    - guard against stack overflows
    - Fixed bugs in operators for RepeatedPtrIterator
    - Assert a maximum map alignment for allocated values
    - Fix proto1 group extension protodb parsing error
    - Do not log/report the same descriptor symbol multiple
      times if it contains
    - more than one invalid character.
    - Add UnknownFieldSet::SerializeToString and
      SerializeToCodedStream.
    - Remove explicit default pointers and deprecated API from
      protocol compiler
  - Arenas:
    - Change Repeated*Field to reuse memory when using arenas.
    - Implements pbarenaz for profiling proto arenas
    - Introduce CreateString() and CreateArenaString() for
      cleaner semantics
    - Fix unreferenced parameter for MSVC builds
    - Add UnsafeSetAllocated to be used for one-of string
      fields.
    - Make Arena::AllocateAligned() a public function.
    - Determine if ArenaDtor related code generation is
      necessary in one place.
    - Implement on demand register ArenaDtor for
      InlinedStringField
  - C++:
    - Enable testing via CTest (#8737)
    - Add option to use external GTest in CMake (#8736)
    - CMake: Set correct sonames for libprotobuf-lite.so and
      libprotoc.so (#8635) (#9529)
    - Add cmake option protobuf_INSTALL to not install files
      (#7123)
    - CMake: Allow custom plugin options e.g. to generate mocks
      (#9105)
    - CMake: Use linker version scripts (#9545)
    - Manually *struct Cord fields to work better with arenas.
    - Manually destruct map fields.
    - Generate narrower code
    - Fix #9378 by removing
    - shadowed cached_size field
    - Remove GetPointer() and explicit nullptr defaults.
    - Add proto_h flag for speeding up large builds
    - Add missing overload for reference wrapped fields.
    - Add MergedDescriptorDatabase::FindAllFileNames()
    - RepeatedField now defines an iterator type instead of
      using a pointer.
    - Remove obsolete macros GOOGLE_PROTOBUF_HAS_ONEOF and
      GOOGLE_PROTOBUF_HAS_ARENAS.
  - PHP:
    - Fix: add missing reserved classnames (#9458)
    - PHP 8.1 compatibility (#9370)
  - C#:
    - Fix trim warnings (#9182)
    - Fixes NullReferenceException when accessing
      FieldDescriptor.IsPacked (#9430)
    - Add ToProto() method to all descriptor classes (#9426)
    - Add an option to preserve proto names in JsonFormatter
      (#6307)
  - Objective-C:
    - Add prefix_to_proto_package_mappings_path option. (#9498)
    - Rename proto_package_to_prefix_mappings_path to
      package_to_prefix_mappings_path. (#9552)
    - Add a generation option to control use of forward
      declarations in headers. (#9568)

- update to 3.19.4:
  Python:
    * Make libprotobuf symbols local on OSX to fix issue #9395 (#9435)
  Ruby:
    * Fixed a data loss bug that could occur when the number of optional fields
      in a message is an exact multiple of 32
  PHP:
    * Fixed a data loss bug that could occur when the number of optional fields
      in a message is an exact multiple of 32.

- Update to 3.19.3:
  C++:
    * Make proto2::Message::DiscardUnknownFields() non-virtual
    * Separate RepeatedPtrField into its own header file
    * For default floating point values of 0, consider all bits significant
    * Fix shadowing warnings
    * Fix for issue #8484, constant initialization doesn't compile in msvc clang-cl environment
  Java:
    * Improve performance characteristics of UnknownFieldSet parsing
    * For default floating point values of 0, consider all bits significant
    * Annotate //java/com/google/protobuf/util/... with nullness annotations
    * Use ArrayList copy constructor
  Bazel:
    * Ensure that release archives contain everything needed for Bazel
    * Align dependency handling with Bazel best practices
  Javascript:
    * Fix ReferenceError: window is not defined when getting the global object
  Ruby:
    * Fix memory leak in MessageClass.encode
    * Override Map.clone to use Map's dup method
    * Ruby: build extensions for arm64-darwin
    * Add class method Timestamp.from_time to ruby well known types
    * Adopt pure ruby DSL implementation for JRuby
    * Add size to Map class
    * Fix for descriptor_pb.rb: google/protobuf should be required first
  Python:
    * Proto2 DecodeError now includes message name in error message
    * Make MessageToDict convert map keys to strings
    * Add python-requires in setup.py
    * Add python 3.10

- Update to 3.17.3:
  C++
  * Introduce FieldAccessListener.
  * Stop emitting boilerplate {Copy/Merge}From in each ProtoBuf class
  * Provide stable versions of SortAndUnique().
  * Make sure to cache proto3 optional message fields when they are cleared.
  * Expose UnsafeArena methods to Reflection.
  * Use std::string::empty() rather than std::string::size() &gt; 0.
  * [Protoc] C++ Resolved an issue where NO_DESTROY and CONSTINIT are in incorrect order (#8296)
  * Fix PROTOBUF_CONSTINIT macro redefinition (#8323)
  * Delete StringPiecePod (#8353)
  * Create a CMake option to control whether or not RTTI is enabled (#8347)
  * Make util::Status more similar to absl::Status (#8405)
  * The ::pb namespace is no longer exposed due to conflicts.
  * Allow MessageDifferencer::TreatAsSet() (and friends) to override previous
  calls instead of crashing.
  * Reduce the size of generated proto headers for protos with string or
  bytes fields.
  * Move arena() operation on uncommon path to out-of-line routine
  * For iterator-pair function parameter types, take both iterators by value.
  * Code-space savings and perhaps some modest performance improvements in
  * RepeatedPtrField.
  * Eliminate nullptr check from every tag parse.
  * Remove unused _$name$cached_byte_size fields.
  * Serialize extension ranges together when not broken by a proto field in the
  middle.
  * Do out-of-line allocation and deallocation of string object in ArenaString.
  * Streamline ParseContext::ParseMessage to avoid code bloat and improve
  performance.
  * New member functions RepeatedField::Assign, RepeatedPtrField::{Add, Assign}.
  on an error path.
  * util::DefaultFieldComparator will be final in a future version of protobuf.
  * Subclasses should inherit from SimpleFieldComparator instead.
  Kotlin
  * Introduce support for Kotlin protos (#8272)
  * Restrict extension setter and getter operators to non-nullable T.
  Java
  * Fixed parser to check that we are at a proper limit when a sub-message has
  finished parsing.
  * updating GSON and Guava to more recent versions (#8524)
  * Reduce the time spent evaluating isExtensionNumber by storing the extension
  ranges in a TreeMap for faster queries. This is particularly relevant for
  protos which define a large number of extension ranges, for example when
  each tag is defined as an extension.
  * Fix java bytecode estimation logic for optional fields.
  * Optimize Descriptor.isExtensionNumber.
  * deps: update JUnit and Truth (#8319)
  * Detect invalid overflow of byteLimit and return InvalidProtocolBufferException as documented.
  * Exceptions thrown while reading from an InputStream in parseFrom are now
  included as causes.
  * Support potentially more efficient proto parsing from RopeByteStrings.
  * Clarify runtime of ByteString.Output.toStringBuffer().
  * Added UnsafeByteOperations to protobuf-lite (#8426)
  Python:
  * Add MethodDescriptor.CopyToProto() (#8327)
  * Remove unused python_protobuf.{cc,h} (#8513)
  * Start publishing python aarch64 manylinux wheels normally (#8530)
  * Fix constness issue detected by MSVC standard conforming mode (#8568)
  * Make JSON parsing match C++ and Java when multiple fields from the same
  oneof are present and all but one is null.
  * Fix some constness / char literal issues being found by MSVC standard conforming mode (#8344)
  * Switch on &quot;new&quot; buffer API (#8339)
  * Enable crosscompiling aarch64 python wheels under dockcross manylinux docker image (#8280)
  * Fixed a bug in text format where a trailing colon was printed for repeated field.
  * When TextFormat encounters a duplicate message map key, replace the current
  one instead of merging.
  Ruby:
  * Add support for proto3 json_name in compiler and field definitions (#8356)
  * Fixed memory leak of Ruby arena objects. (#8461)
  * Fix source gem compilation (#8471)
  * Fix various exceptions in Ruby on 64-bit Windows (#8563)
  * Fix crash when calculating Message hash values on 64-bit Windows (#8565)
  General:
  * Support M1 (#8557)

Update to 3.15.8:
  - Fixed memory leak of Ruby arena objects (#8461)

Update to 3.15.7:

  C++:
  * Remove the ::pb namespace (alias) (#8423)
  Ruby:
  * Fix unbounded memory growth for Ruby &lt;2.7 (#8429)
  * Fixed message equality in cases where the message type is different (#8434)

update to 3.15.6:

  Ruby:
  * Fixed bug in string comparison logic (#8386)
  * Fixed quadratic memory use in array append (#8379)
  * Fixed SEGV when users pass nil messages (#8363)
  * Fixed quadratic memory usage when appending to arrays (#8364)
  * Ruby &lt;2.7 now uses WeakMap too, which prevents memory leaks. (#8341)
  * Fix for FieldDescriptor.get(msg) (#8330)
  * Bugfix for Message.[] for repeated or map fields (#8313)
  PHP:
  * read_property() handler is not supposed to return NULL (#8362)
  Protocol Compiler
  * Optional fields for proto3 are enabled by default, and no longer require
    the --experimental_allow_proto3_optional flag.
  C++:
  * Do not disable RTTI by default in the CMake build (#8377)
  * Create a CMake option to control whether or not RTTI is enabled (#8361)
  * Fix PROTOBUF_CONSTINIT macro redefinition (#8323)
  * MessageDifferencer: fixed bug when using custom ignore with multiple
    unknown fields
  * Use init_seg in MSVC to push initialization to an earlier phase.
  * Runtime no longer triggers -Wsign-compare warnings.
  * Fixed -Wtautological-constant-out-of-range-compare warning.
  * DynamicCastToGenerated works for nullptr input for even if RTTI is disabled
  * Arena is refactored and optimized.
  * Clarified/specified that the exact value of Arena::SpaceAllocated() is an
    implementation detail users must not rely on. It should not be used in
    unit tests.
  * Change the signature of Any::PackFrom() to return false on error.
  * Add fast reflection getter API for strings.
  * Constant initialize the global message instances
  * Avoid potential for missed wakeup in UnknownFieldSet
  * Now Proto3 Oneof fields have &quot;has&quot; methods for checking their presence in
    C++.
  * Bugfix for NVCC
  * Return early in _InternalSerialize for empty maps.
  * Adding functionality for outputting map key values in proto path logging
    output (does not affect comparison logic) and stop printing 'value' in the
    path. The modified print functionality is in the
    MessageDifferencer::StreamReporter.
  * Fixed https://github.com/protocolbuffers/protobuf/issues/8129
  * Ensure that null char symbol, package and file names do not result in a
    crash.
  * Constant initialize the global message instances
  * Pretty print 'max' instead of numeric values in reserved ranges.
  * Removed remaining instances of std::is_pod, which is deprecated in C++20.
  * Changes to reduce code size for unknown field handling by making uncommon
    cases out of line.
  * Fix std::is_pod deprecated in C++20 (#7180)
  * Fix some -Wunused-parameter warnings (#8053)
  * Fix detecting file as directory on zOS issue #8051 (#8052)
  * Don't include sys/param.h for _BYTE_ORDER (#8106)
  * remove CMAKE_THREAD_LIBS_INIT from pkgconfig CFLAGS (#8154)
  * Fix TextFormatMapTest.DynamicMessage issue#5136 (#8159)
  * Fix for compiler warning issue#8145 (#8160)
  * fix: support deprecated enums for GCC &lt; 6 (#8164)
  * Fix some warning when compiling with Visual Studio 2019 on x64 target (#8125)
  Python:
  * Provided an override for the reverse() method that will reverse the internal
    collection directly instead of using the other methods of the BaseContainer.
  * MessageFactory.CreateProtoype can be overridden to customize class creation.
  * Fix PyUnknownFields memory leak (#7928)
  * Add macOS big sur compatibility (#8126)
  JavaScript
  * Generate `getDescriptor` methods with `*` as their `this` type.
  * Enforce `let/const` for generated messages.
  * js/binary/utils.js: Fix jspb.utils.joinUnsignedDecimalString to work with
    negative bitsLow and low but non-zero bitsHigh parameter. (#8170)
  PHP:
  * Added support for PHP 8. (#8105)
  * unregister INI entries and fix invalid read on shutdown (#8042)
  * Fix PhpDoc comments for message accessors to include &quot;|null&quot;. (#8136)
  * fix: convert native PHP floats to single precision (#8187)
  * Fixed PHP to support field numbers &gt;=2**28. (#8235)
  * feat: add support for deprecated fields to PHP compiler (#8223)
  * Protect against stack overflow if the user derives from Message. (#8248)
  * Fixed clone for Message, RepeatedField, and MapField. (#8245)
  * Updated upb to allow nonzero offset minutes in JSON timestamps. (#8258)
  Ruby:
  * Added support for Ruby 3. (#8184)
  * Rewrote the data storage layer to be based on upb_msg objects from the
    upb library. This should lead to much better parsing performance,
    particularly for large messages. (#8184).
  * Fill out JRuby support (#7923)
  * [Ruby] Fix: (SIGSEGV) gRPC-Ruby issue on Windows. memory alloc infinite
    recursion/run out of memory (#8195)
  * Fix jruby support to handle messages nested more than 1 level deep (#8194)
  Java:
  * Avoid possible UnsupportedOperationException when using CodedInputSteam
    with a direct ByteBuffer.
  * Make Durations.comparator() and Timestamps.comparator() Serializable.
  * Add more detailed error information for dynamic message field type
    validation failure
  * Removed declarations of functions declared in java_names.h from
    java_helpers.h.
  * Now Proto3 Oneof fields have &quot;has&quot; methods for checking their presence in
    Java.
  * Annotates Java proto generated *_FIELD_NUMBER constants.
  * Add -assumevalues to remove JvmMemoryAccessor on Android.
  C#:
  * Fix parsing negative Int32Value that crosses segment boundary (#8035)
  * Change ByteString to use memory and support unsafe create without copy (#7645)
  * Optimize MapField serialization by removing MessageAdapter (#8143)
  * Allow FileDescriptors to be parsed with extension registries (#8220)
  * Optimize writing small strings (#8149)

- Updated URL to https://github.com/protocolbuffers/protobuf

Update to v3.14.0

  Protocol Compiler:
  * The proto compiler no longer requires a .proto filename when it is not
    generating code.
  * Added flag `--deterministic_output` to `protoc --encode=...`.
  * Fixed deadlock when using google.protobuf.Any embedded in aggregate options.
  C++:
  * Arenas are now unconditionally enabled. cc_enable_arenas no longer has
    any effect.
  * Removed inlined string support, which is incompatible with arenas.
  * Fix a memory corruption bug in reflection when mixing optional and
    non-optional fields.
  * Make SpaceUsed() calculation more thorough for map fields.
  * Add stack overflow protection for text format with unknown field values.
  * FieldPath::FollowAll() now returns a bool to signal if an out-of-bounds
    error was encountered.
  * Performance improvements for Map.
  * Minor formatting fix when dumping a descriptor to .proto format with
    DebugString.
  * UBSAN fix in RepeatedField
  * When running under ASAN, skip a test that makes huge allocations.
  * Fixed a crash that could happen when creating more than 256 extensions in
    a single message.
  * Fix a crash in BuildFile when passing in invalid descriptor proto.
  * Parser security fix when operating with CodedInputStream.
  * Warn against the use of AllowUnknownExtension.
  * Migrated to C++11 for-range loops instead of index-based loops where
    possible. This fixes a lot of warnings when compiling with -Wsign-compare.
  * Fix segment fault for proto3 optional
  * Adds a CMake option to build `libprotoc` separately
  Java
  * Bugfix in mergeFrom() when a oneof has multiple message fields.
  * Fix RopeByteString.RopeInputStream.read() returning -1 when told to read
    0 bytes when not at EOF.
  * Redefine remove(Object) on primitive repeated field Lists to avoid
    autoboxing.
  * Support &quot;\u&quot; escapes in textformat string literals.
  * Trailing empty spaces are no longer ignored for FieldMask.
  * Fix FieldMaskUtil.subtract to recursively remove mask.
  * Mark enums with `@java.lang.Deprecated` if the proto enum has option
    `deprecated = true;`.
  * Adding forgotten duration.proto to the lite library
  Python:
  * Print google.protobuf.NullValue as null instead of &quot;NULL_VALUE&quot; when it is
    used outside WKT Value/Struct.
  * Fix bug occurring when attempting to deep copy an enum type in python 3.
  * Add a setuptools extension for generating Python protobufs
  * Remove uses of pkg_resources in non-namespace packages
  * [bazel/py] Omit google/__init__.py from the Protobuf runtime
  * Removed the unnecessary setuptools package dependency for Python package
  * Fix PyUnknownFields memory leak
  PHP:
  * Added support for &quot;==&quot; to the PHP C extension
  * Added `==` operators for Map and Array
  * Native C well-known types
  * Optimized away hex2bin() call in generated code
  * New version of upb, and a new hash function wyhash in third_party
  * add missing hasOneof method to check presence of oneof fields
  Go:
  * Update go_package options to reference google.golang.org/protobuf module.
  C#:
  * annotate ByteString.CopyFrom(ReadOnlySpan&lt;byte&gt;) as SecuritySafeCritical
  * Fix C# optional field reflection when there are regular fields too
  * Fix parsing negative Int32Value that crosses segment boundary
  Javascript:
  * JS: parse (un)packed fields conditionally

Update to version 3.13.0
  PHP:
  * The C extension is completely rewritten. The new C extension has significantly
    better parsing performance and fixes a handful of conformance issues. It will
    also make it easier to add support for more features like proto2 and proto3 presence.
  * The new C extension does not support PHP 5.x. PHP 5.x users can still use pure-PHP.
  C++:
  * Removed deprecated unsafe arena string accessors
  * Enabled heterogeneous lookup for std::string keys in maps.
  * Removed implicit conversion from StringPiece to std::string
  * Fix use-after-destroy bug when the Map is allocated in the arena.
  * Improved the randomness of map ordering
  * Added stack overflow protection for text format with unknown fields
  * Use std::hash for proto maps to help with portability.
  * Added more Windows macros to proto whitelist.
  * Arena constructors for map entry messages are now marked &quot;explicit&quot;
    (for regular messages they were already explicit).
  * Fix subtle aliasing bug in RepeatedField::Add
  * Fix mismatch between MapEntry ByteSize and Serialize with respect to unset
    fields.
  Python:
  * JSON format conformance fixes:
    * Reject lowercase t for Timestamp json format.
    * Print full_name directly for extensions (no camelCase).
    * Reject boolean values for integer fields.
    * Reject NaN, Infinity, -Infinity that is not quoted.
    * Base64 fixes for bytes fields: accept URL-safe base64 and missing padding.
  * Bugfix for fields/files named &quot;async&quot; or &quot;await&quot;.
  * Improved the error message when AttributeError is returned from __getattr__
    in EnumTypeWrapper.
  Java:
  * Fixed a bug where setting optional proto3 enums with setFooValue() would
    not mark the value as present.
  * Add Subtract function to FieldMaskUtil.
  C#:
  * Dropped support for netstandard1.0 (replaced by support for netstandard1.1).
    This was required to modernize the parsing stack to use the `Span&lt;byte&gt;`
    type internally
  * Add `ParseFrom(ReadOnlySequence&lt;byte&gt;)` method to enable GC friendly
    parsing with reduced allocations and buffer copies
  * Add support for serialization directly to a `IBufferWriter&lt;byte&gt;` or
    to a `Span&lt;byte&gt;` to enable GC friendly serialization.
    The new API is available as extension methods on the `IMessage` type
  * Add `GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE` define to make
    generated code compatible with old C# compilers (pre-roslyn compilers
    from .NET framework and old versions of mono) that do not support
    ref structs. Users that are still on a legacy stack that does
    not support C# 7.2 compiler might need to use the new define
    in their projects to be able to build the newly generated code
  * Due to the major overhaul of parsing and serialization internals,
    it is recommended to regenerate your generated code to achieve the best
    performance (the legacy generated code will still work, but might incur
    a slight performance penalty).

Update to version 3.12.3; notable changes since 3.11.4:

  Protocol Compiler:
  * [experimental] Singular, non-message typed fields in proto3 now support
    presence tracking. This is enabled by adding the &quot;optional&quot; field label and
    passing the --experimental_allow_proto3_optional flag to protoc.
    * For usage info, see docs/field_presence.md.
    * During this experimental phase, code generators should update to support
      proto3 presence, see docs/implementing_proto3_presence.md for instructions.
  * Allow duplicate symbol names when multiple descriptor sets are passed on
    the command-line, to match the behavior when multiple .proto files are passed.
  * Deterministic `protoc --descriptor_set_out` (#7175)
  Objective-C:
  * Tweak the union used for Extensions to support old generated code. #7573
  * Fix for the :protobuf_objc target in the Bazel BUILD file. (#7538)
  * [experimental] ObjC Proto3 optional support (#7421)
  * Block subclassing of generated classes (#7124)
  * Use references to Obj C classes instead of names in descriptors. (#7026)
  * Revisit how the WKTs are bundled with ObjC. (#7173)
  C++:
  * Simplified the template export macros to fix the build for mingw32. (#7539)
  * [experimental] Added proto3 presence support.
  * New descriptor APIs to support proto3 presence.
  * Enable Arenas by default on all .proto files.
  * Documented that users are not allowed to subclass Message or MessageLite.
  * Mark generated classes as final; inheriting from protos is strongly discouraged.
  * Add stack overflow protection for text format with unknown fields.
  * Add accessors for map key and value FieldDescriptors.
  * Add FieldMaskUtil::FromFieldNumbers().
  * MessageDifferencer: use ParsePartial() on Any fields so the diff does not
    fail when there are missing required fields.
  * ReflectionOps::Merge(): lookup messages in the right factory, if it can.
  * Added Descriptor::WellKnownTypes enum and Descriptor::well_known_type()
    accessor as an easier way of determining if a message is a Well-Known Type.
  * Optimized RepeatedField::Add() when it is used in a loop.
  * Made proto move/swap more efficient.
  * De-virtualize the GetArena() method in MessageLite.
  * Improves performance of json_stream_parser.cc by factor 1000 (#7230)
  * bug: #7076 undefine Windows OUT and OPTIONAL macros (#7087)
  * Fixed a bug in FieldDescriptor::DebugString() that would erroneously print
    an &quot;optional&quot; label for a field in a oneof.
  * Fix bug in parsing bool extensions that assumed they are always 1 byte.
  * Fix off-by-one error in FieldOptions::ByteSize() when extensions are present.
  * Clarified the comments to show an example of the difference between
    Descriptor::extension and DescriptorPool::FindAllExtensions.
  * Add a compiler option 'code_size' to force optimize_for=code_size on all
    protos where this is possible.
  Ruby:
  * Re-add binary gems for Ruby 2.3 and 2.4. These are EOL upstream, however
    many people still use them and dropping support will require more
    coordination.
  * [experimental] Implemented proto3 presence for Ruby. (#7406)
  * Stop building binary gems for ruby &lt;2.5 (#7453)
  * Fix for wrappers with a zero value (#7195)
  * Fix for JSON serialization of 0/empty-valued wrapper types (#7198)
  * Call &quot;Class#new&quot; over rb_class_new_instance in decoding (#7352)
  * Build extensions for Ruby 2.7 (#7027)
  * assigning 'nil' to submessage should clear the field. (#7397)
  Java:
  * [experimental] Added proto3 presence support.
  * Mark java enum _VALUE constants as @Deprecated if the enum field is deprecated
  * reduce &lt;clinit&gt; size for enums with allow_alias set to true.
  * Sort map fields alphabetically by the field's key when printing textproto.
  * Fixed a bug in map sorting that appeared in -rc1 and -rc2 (#7508).
  * TextFormat.merge() handles Any as top level type.
  * Throw a descriptive IllegalArgumentException when calling
    getValueDescriptor() on enum special value UNRECOGNIZED instead of
    ArrayIndexOutOfBoundsException.
  * Fixed an issue with JsonFormat.printer() where setting printingEnumsAsInts()
    would override the configuration passed into includingDefaultValueFields().
  * Implement overrides of indexOf() and contains() on primitive lists returned
    for repeated fields to avoid autoboxing the list contents.
  * Add overload to FieldMaskUtil.fromStringList that accepts a descriptor.
  * [bazel] Move Java runtime/toolchains into //java (#7190)
  Python:
  * [experimental] Added proto3 presence support.
  * [experimental] fast import protobuf module, only works with cpp generated code linked in.
  * Truncate 'float' fields to 4 bytes of precision in setters for pure-Python
    implementation (C++ extension was already doing this).
  * Fixed a memory leak in C++ bindings.
  * Added a deprecation warning when code tries to create Descriptor objects
    directly.
  * Fix unintended comparison between bytes and string in descriptor.py.
  * Avoid printing excess digits for float fields in TextFormat.
  * Remove Python 2.5 syntax compatibility from the proto compiler generated _pb2.py module code.
  * Drop 3.3, 3.4 and use single version docker images for all python tests (#7396)
  JavaScript:
  * Fix js message pivot selection (#6813)
  PHP:
  * Persistent Descriptor Pool (#6899)
  * Implement lazy loading of php class for proto messages (#6911)
  * Correct @return in Any.unpack docblock (#7089)
  * Ignore unknown enum value when ignore_unknown specified (#7455)
  C#:
  * [experimental] Add support for proto3 presence fields in C# (#7382)
  * Mark GetOption API as obsolete and expose the &quot;GetOptions()&quot; method on descriptors instead (#7491)
  * Remove Has/Clear members for C# message fields in proto2 (#7429)
  * Enforce recursion depth checking for unknown fields (#7132)
  * Fix conformance test failures for Google.Protobuf (#6910)
  * Cleanup various bits of Google.Protobuf (#6674)
  * Fix latest ArgumentException for C# extensions (#6938)
  * Remove unnecessary branch from ReadTag (#7289)
  Other:
  * Add a proto_lang_toolchain for javalite (#6882)
  * [bazel] Update gtest and deprecate //external:{gtest,gtest_main} (#7237)
  * Add application note for explicit presence tracking. (#7390)
  * Howto doc for implementing proto3 presence in a code generator. (#7407)

Update to version 3.11.4; notable changes since 3.9.2:

  * C++: Make serialization method naming consistent
  * C++: Moved ShutdownProtobufLibrary() to message_lite.h. For
         backward compatibility a declaration is still available
         in stubs/common.h, but users should prefer message_lite.h
  * C++: Removed non-namespace macro EXPECT_OK()
  * C++: Removed mathlimits.h from stubs in favor of using
         std::numeric_limits from C++11
  * C++: Support direct pickling of nested messages
  * C++: Disable extension code gen for C#
  * C++: Switch the proto parser to the faster MOMI parser
  * C++: Unused imports of files defining descriptor extensions
         will now be reported
  * C++: Add proto2::util::RemoveSubranges to remove multiple
         subranges in linear time
  * C++: Support 32 bit values for ProtoStreamObjectWriter to Struct
  * C++: Removed the internal-only header coded_stream_inl.h and
         the internal-only methods defined there
  * C++: Enforced no SWIG wrapping of descriptor_database.h
         (other headers already had this restriction)
  * C++: Implementation of the equivalent of the MOMI parser for
         serialization. This removes one of the two serialization
         routines, by making the fast array serialization routine
         completely general. SerializeToCodedStream can now be
         implemented in terms of the much much faster array
         serialization. The array serialization regresses slightly,
         but when array serialization is not possible this wins big
  * C++: Add move constructor for Reflection's SetString
  * Java: Remove the usage of MethodHandle, so that Android users
          prior to API version 26 can use protobuf-java
  * Java: Publish ProGuard config for javalite
  * Java: Include unknown fields when merging proto3 messages in
          Java lite builders
  * Java: Have oneof enums implement a separate interface (other
          than EnumLite) for clarity
  * Java: Opensource Android Memory Accessors
  * Java: Change ProtobufArrayList to use Object[] instead of
          ArrayList for 5-10% faster parsing
  * Java: Make a copy of JsonFormat.TypeRegistry at the protobuf
          top level package. This will eventually replace
          JsonFormat.TypeRegistry
  * Java: Add Automatic-Module-Name entries to the Manifest
  * Python: Add float_precision option in json format printer
  * Python: Optionally print bytes fields as messages in unknown
            fields, if possible
  * Python: Experimental code gen (fast import protobuf module)
            which only work with cpp generated code linked in
  * Python: Add descriptor methods in descriptor_pool are deprecated
  * Python: Added delitem for Python extension dict
  * JavaScript: Remove guard for Symbol iterator for jspb.Map
  * JavaScript: Remove deprecated boolean option to getResultBase64String()
  * JavaScript: Change the parameter types of binaryReaderFn in
                ExtensionFieldBinaryInfo to (number, ?, ?)
  * JavaScript: Create dates.ts and time_of_days.ts to mirror Java
                versions. This is a near-identical conversion of
                c.g.type.util.{Dates,TimeOfDays} respectively
  * JavaScript: Migrate moneys to TypeScript
  * PHP: Increase php7.4 compatibility
  * PHP: Implement lazy loading of php class for proto messages
  * Ruby: Support hashes for struct initializers
  * C#: Experimental proto2 support is now officially available
  * C#: Change _Extensions property to normal body rather than expression
  * Objective C: Remove OSReadLittle* due to alignment requirements
  * Other: Override CocoaPods module to lowercase
  * further bugfixes and optimisations
- Install LICENSE
- Drop protobuf-libs as it is just workaround for rpmlint issue
  * python bindings now require recent python-google-apputils
  * Released memory allocated by InitializeDefaultRepeatedFields()
    and GetEmptyString(). Some memory sanitizers reported them
  * Updated DynamicMessage.setField() to handle repeated enum
  * Fixed a bug that caused NullPointerException to be thrown when
    converting manually constructed FileDescriptorProto to
  * Added oneofs(unions) feature. Fields in the same oneof will
  * Files, services, enums, messages, methods and enum values
  * Added Support for list values, including lists of mesaages,
  * Added SwapFields() in reflection API to swap a subset of
  * Repeated primitive extensions are now packable. The
    it is possible to switch a repeated extension field to
  * writeTo() method in ByteString can now write a substring to
  * java_generate_equals_and_hash can now be used with the
  * A new C++-backed extension module (aka &quot;cpp api v2&quot;) that
    replaces the old (&quot;cpp api v1&quot;) one. Much faster than the
    pure Python code. This one resolves many bugs and is
  mosh reqires it

python-abseil was udpated:

version update to 1.4.0
  New:
    (testing) Added @flagsaver.as_parsed: this allows saving/restoring flags
    using string values as if parsed from the command line and will also reflect
    other flag states after command line parsing, e.g. .present is set.
  Changed:
    (logging) If no log dir is specified logging.find_log_dir() now falls back
    to tempfile.gettempdir() instead of /tmp/.
  Fixed:
    (flags) Additional kwargs (e.g. short_name=) to DEFINE_multi_enum_class
    are now correctly passed to the underlying Flag object.

version update to 1.2.0
  *   Fixed a crash in Python 3.11 when `TempFileCleanup.SUCCESS` is used.
  *   `Flag` instances now raise an error if used in a bool context. This prevents
      the occasional mistake of testing an instance for truthiness rather than
      testing `flag.value`.
  *   `absl-py` no longer depends on `six`.

Update to version 1.0.0 
  * absl-py no longer supports Python 2.7, 3.4, 3.5. All versions
    have reached end-of-life for more than a year now.
  * New releases will be tagged as vX.Y.Z instead of pypi-vX.Y.Z in
    the git repo going forward.

- Release notes for 0.15.0

  * (testing) #128: When running bazel with its --test_filter=
    flag, it now treats the filters as unittest's -k flag in Python
    3.7+.

- Release notes for 0.14.1

  * Top-level LICENSE file is now exported in bazel.

- Release notes for 0.14.0

  * #171: Creating argparse_flags.ArgumentParser with
    argument_default= no longer raises an exception when other
    absl.flags flags are defined.
  * #173: absltest now correctly sets up test filtering and fail
    fast flags when an explicit argv= parameter is passed to
    absltest.main.

- Release notes for 0.13.0
  * (app) Type annotations for public app interfaces.
  * (testing) Added new decorator @absltest.skipThisClass to
    indicate a class contains shared functionality to be used as a
    base class for other TestCases, and therefore should be
    skipped.
  * (app) Annotated the flag_parser paramteter of run as
    keyword-only. This keyword-only constraint will be enforced at
    runtime in a future release.
  * (app, flags) Flag validations now include all errors from
    disjoint flag sets, instead of fail fast upon first error from
    all validators. Multiple validators on the same flag still
    fails fast.
- Release notes for 0.12.0
  * (flags) Made EnumClassSerializer and EnumClassListSerializer
    public.
  * (flags) Added a required: Optional[bool] = False parameter to
    DEFINE_* functions.
  * (testing) flagsaver overrides can now be specified in terms of
    FlagHolder.
  * (testing) parameterized.product: Allows testing a method over
    cartesian product of parameters values, specified as a
    sequences of values for each parameter or as kwargs-like dicts
    of parameter values.
  * (testing) Added public flag holders for --test_srcdir and
    --test_tmpdir. Users should use absltest.TEST_SRCDIR.value and
    absltest.TEST_TMPDIR.value instead of FLAGS.test_srcdir and
    FLAGS.test_tmpdir.
  * (flags) Made CsvListSerializer respect its delimiter argument.

- Add Provides python-absl-py

python-grpcuio was updated:

- Update to version 1.60.0:
  * No python specfic changes.

- Update to version 1.59.2:
  * No python specific changes.

- Update to version 1.59.0:
  * [Python 3.12] Support Python 3.12 (gh#grpc/grpc#34398).
  * [Python 3.12] Deprecate distutil (gh#grpc/grpc#34186).

- Update to version 1.58.0:
  * [Bazel] Enable grpcio-reflection to be used via Bazel
    (gh#grpc/grpc#31013).
  * [packaging] Publish xds-protos as part of the standard package
    pipeline (gh#grpc/grpc#33797).

- Update to version 1.57.0: (CVE-2023-4785, bsc#1215334, CVE-2023-33953, bsc#1214148)
  * [posix] Enable systemd sockets for libsystemd&gt;=233
    (gh#grpc/grpc#32671).
  * [python O11Y] Initial Implementation (gh#grpc/grpc#32974).
- Build with LTO (don't set _lto_cflags to %nil).
- No need to pass '-std=c++17' to build CFLAGS.

- Update to version 1.56.2:

  * [WRR] backport (gh#grpc/grpc#33694) to 1.56
    (gh#grpc/grpc#33698)
  * [backport][iomgr][EventEngine] Improve server handling of
    file descriptor exhaustion (gh#grpc/grpc#33667)
- Switch build to pip/wheel.
- Use system abseil with '-std=c++17' to prevent undefined symbol
  eg. with python-grpcio-tools (_ZN3re23RE213GlobalReplaceEPNSt7__
  cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKS0_N4absl12lts_
  2023012511string_viewE)

- Upstream only supports python &gt;= 3.7, so adjust BuildRequires
  accordingly.

- Add %{?sle15_python_module_pythons}

- Update to version 1.56.0: (CVE-2023-32731, bsc#1212180)
  * [aio types] Fix some grpc.aio python types
    (gh#grpc/grpc#32475).

- Update to version 1.55.0:
  * [EventEngine] Disable EventEngine polling in gRPC Python
    (gh#grpc/grpc#33279) (gh#grpc/grpc#33320).
  * [Bazel Python3.11] Update Bazel dependencies for Python 3.11
    (gh#grpc/grpc#33318) (gh#grpc/grpc#33319).
- Drop Requires: python-six; not required any more.
- Switch Suggests to Recommends.

- Update to version 1.54.0: (CVE-2023-32732, bsc#1212182)
  * Fix DeprecationWarning when calling asyncio.get_event_loop()
    (gh#grpc/grpc#32533).
  * Remove references to deprecated syntax field
    (gh#grpc/grpc#32497).

- Update to version 1.51.1:
  * No Linux specific changes.
- Changes from version 1.51.0:
  * Fix lack of cooldown between poll attempts
    (gh#grpc/grpc#31550).
  * Remove enum and future (gh#grpc/grpc#31381).
  * [Remove Six] Remove dependency on six (gh#grpc/grpc#31340).
  * Update xds-protos package to pull in protobuf 4.X
    (gh#grpc/grpc#31113).

- Update to version 1.50.0:
  * Support Python 3.11. [gh#grpc/grpc#30818].

- Update to version 1.49.1
  * Support Python 3.11. (#30818)
  * Add type stub generation support to grpcio-tools. (#30498)

- Update to version 1.48.0:
  * [Aio] Ensure Core channel closes when deallocated
    [gh#grpc/grpc#29797].
  * [Aio] Fix the wait_for_termination return value
    [gh#grpc/grpc#29795].

- update to 1.46.3:
  * backport: xds: use federation env var to guard new-style resource name parsing
  * This release contains refinements, improvements, and bug fixes. 

- Update to version 1.46.0:
  * Add Python GCF Distribtest [gh#grpc/grpc#29303].
  * Add Python Reflection Client [gh#grpc/grpc#29085].
  * Revert &quot;Fix prefork handler register's default behavior&quot;
    [gh#grpc/grpc#29229].
  * Fix prefork handler register's default behavior
    [gh#grpc/grpc#29103].
  * Fix fetching CXX variable in setup.py [gh#grpc/grpc#28873].

- Update to version 1.45.0:
  * Reimplement Gevent Integration [gh#grpc/grpc#28276].
  * Support musllinux binary wheels on x64 and x86
    [gh#grpc/grpc#28092].
  * Increase the Python protobuf requirement to &gt;=3.12.0
    [gh#grpc/grpc#28604].
- Build with system re2; add BuildRequires: pkgconfig(re2).

- Update to version 1.44.0:

  * Add python async example for hellostreamingworld using
    generator (gh#grpc/grpc#27343).
  * Disable __wrap_memcpy hack for Python builds
    (gh#grpc/grpc#28410).
  * Bump Bazel Python Cython dependency to 0.29.26
    (gh#grpc/grpc#28398).
  * Fix libatomic linking on Raspberry Pi OS Bullseye
    (gh#grpc/grpc#28041).
  * Allow generated proto sources in remote repositories for
    py_proto_library (gh#grpc/grpc#28103).

- Update to version 1.43.0:
  * [Aio] Validate the input type for set_trailing_metadata and
    abort (gh#grpc/grpc#27958).

- update to 1.41.1:
  * This is release 1.41.0 (goat) of gRPC Core. 

- Update to version 1.41.0:
  * Add Python 3.10 support and drop 3.5 (gh#grpc/grpc#26074).
  * [Aio] Remove custom IO manager support (gh#grpc/grpc#27090).

- Update to version 1.39.0:
  * Python AIO: Match continuation typing on Interceptors
    (gh#grpc/grpc#26500).
  * Workaround #26279 by publishing manylinux_2_24 wheels instead
    of manylinux2014 on aarch64 (gh#grpc/grpc#26430).
  * Fix zlib unistd.h import problem (gh#grpc/grpc#26374).
  * Handle gevent exception in gevent poller (gh#grpc/grpc#26058).

- Update to version 1.38.1:
  * Backport gh#grpc/grpc#26430 and gh#grpc/grpc#26435 to v1.38.x
    (gh#grpc/grpc#26436).

- Update to version 1.38.0:
  * Add grpcio-admin Python package (gh#grpc/grpc#26166).
  * Add CSDS API to Python (gh#grpc/grpc#26114).
  * Expose code and details from context on the server side
    (gh#grpc/grpc#25457).
  * Explicitly import importlib.abc; required on Python 3.10.
    Fixes #26062 (gh#grpc/grpc#26083).
  * Fix potential deadlock on the GIL in AuthMetdataPlugin
    (gh#grpc/grpc#26009).
  * Introduce new Python package &quot;xds_protos&quot;
    (gh#grpc/grpc#25975).
  * Remove async mark for set_trailing_metadata interface
    (gh#grpc/grpc#25814).

- Update to version 1.37.1:
  * No user visible changes.
- Changes from version 1.37.0:
  * Clarify Guarantees about grpc.Future Interface
    (gh#grpc/grpc#25383).
  * [Aio] Add time_remaining method to ServicerContext
    (gh#grpc/grpc#25719).
  * Standardize all environment variable boolean configuration in
    python's setup.py (gh#grpc/grpc#25444).
  * Fix Signal Safety Issue (gh#grpc/grpc#25394).

- Update to version 1.36.1:
  * Core: back-port: add env var protection for google-c2p
    resolver (gh#grpc/grpc#25569).

- Update to version 1.35.0:
  * Implement Python Client and Server xDS Creds.
    (gh#grpc/grpc#25365)
  * Add %define _lto_cflags %{nil} (bsc#1182659) (rh#1893533)
  * Link roots.pem to ca-bundle.pem from ca-certificates package

- Update to version 1.34.1:
  * Backport &quot;Lazily import grpc_tools when using runtime
    stub/message generation&quot; to 1.34.x (gh#grpc/grpc#25011).

- Update to version 1.34.0:
  * Incur setuptools as an dependency for grpcio_tools
    (gh#grpc/grpc#24752).
  * Stop the spamming log generated by ctrl-c for AsyncIO server
    (gh#grpc/grpc#24718).
  * [gRPC Easy] Make Well-Known Types Available to Runtime Protos
    (gh#grpc/grpc#24478).
  * Bump MACOSX_DEPLOYMENT_TARGET to 10.10 for Python
    (gh#grpc/grpc#24480).
  * Make Python 2 an optional dependency for Bazel build
    (gh#grpc/grpc#24407).
  * [Linux] [macOS] Support pre-compiled Python 3.9 wheels
    (gh#grpc/grpc#24356).

- Update to version 1.33.2:

  * [Backport] Implement grpc.Future interface in
    SingleThreadedRendezvous (gh#grpc/grpc#24574).

- Update to version 1.33.1:

  * [Backport] Make Python 2 an optional dependency for Bazel
    build (gh#grpc/grpc#24452).
  * Allow asyncio API to be imported as grpc.aio.
    (gh#grpc/grpc#24289).
  * [gRPC Easy] Fix import errors on Windows (gh#grpc/grpc#24124).
  * Make version check for importlib.abc in grpcio-tools more
    stringent (gh#grpc/grpc#24098).

Added re2 package in version 2024-02-01.
</description>
    <pkglist>
      <collection>
        <package name="abseil-cpp" epoch="0" version="20230802.1" release="150400.10.4.1" arch="src" src="src/abseil-cpp-20230802.1-150400.10.4.1.src.rpm">
          <filename>abseil-cpp-20230802.1-150400.10.4.1.src.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="x86_64" src="x86_64/libabsl2308_0_0-20230802.1-150400.10.4.1.x86_64.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.x86_64.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="x86_64" src="x86_64/libprotobuf-lite25_1_0-25.1-150400.9.3.1.x86_64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.x86_64.rpm</filename>
        </package>
        <package name="protobuf" epoch="0" version="25.1" release="150400.9.3.1" arch="src" src="src/protobuf-25.1-150400.9.3.1.src.rpm">
          <filename>protobuf-25.1-150400.9.3.1.src.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="s390x" src="s390x/libabsl2308_0_0-20230802.1-150400.10.4.1.s390x.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.s390x.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="s390x" src="s390x/libprotobuf-lite25_1_0-25.1-150400.9.3.1.s390x.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.s390x.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="ppc64le" src="ppc64le/libabsl2308_0_0-20230802.1-150400.10.4.1.ppc64le.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.ppc64le.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="ppc64le" src="ppc64le/libprotobuf-lite25_1_0-25.1-150400.9.3.1.ppc64le.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.ppc64le.rpm</filename>
        </package>
        <package name="libabsl2308_0_0" epoch="0" version="20230802.1" release="150400.10.4.1" arch="aarch64" src="aarch64/libabsl2308_0_0-20230802.1-150400.10.4.1.aarch64.rpm">
          <filename>libabsl2308_0_0-20230802.1-150400.10.4.1.aarch64.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.3.1" arch="aarch64" src="aarch64/libprotobuf-lite25_1_0-25.1-150400.9.3.1.aarch64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-844</id>
    <title>Recommended update for raspberrypi-firmware-dt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710234157"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219094" id="1219094" title="hardware:boot/raspberrypi-firmware-dt: Spi overlays are using spidev compatible string" type="bugzilla"/>
    </references>
    <description>This update for raspberrypi-firmware-dt fixes the following issue:

- Extend &quot;ARM: dts: bcm27xx: Use better name for spidev&quot; patch coverage.
  Change compatible &quot;spidev&quot; to &quot;rohm,dh2228fv&quot; in overlay files too. (bsc#1219094)
</description>
    <pkglist>
      <collection>
        <package name="raspberrypi-firmware-dt" epoch="0" version="2021.11.19" release="150400.5.6.1" arch="noarch" src="noarch/raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.noarch.rpm">
          <filename>raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.noarch.rpm</filename>
        </package>
        <package name="raspberrypi-firmware-dt" epoch="0" version="2021.11.19" release="150400.5.6.1" arch="src" src="src/raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.src.rpm">
          <filename>raspberrypi-firmware-dt-2021.11.19-150400.5.6.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-904</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710488539"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218632" id="1218632" title="Sles15-Sp6 - seeing the following usage message from kdumptool while running supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218812" id="1218812" title="supportconfig throws error when processing PODMAN" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219639" id="1219639" title="SLES15 SP4: [nvidia-persistenced] Gathering the NVIDIA Persistence Daemon (supportutils) SUSE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219241" id="1219241" title="supportconfig has incomplete display output on sle micro 6.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214713" id="1214713" title="supportconfig - sles 15 sp4 Xen - on large hardware system seems to take an excessive amount of time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218814" id="1218814" title="supportconfig: duplicate non root podman entries" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

- Update toversion 3.1.29
- Extended scaling for performance (bsc#1214713)
- Fixed kdumptool output error (bsc#1218632)
- Corrected podman ID errors (bsc#1218812)
- Duplicate non root podman entries removed (bsc#1218814)
- Corrected get_sles_ver for SLE Micro (bsc#1219241)
- Check nvidida-persistenced state (bsc#1219639)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.29" release="150300.7.35.27.1" arch="noarch" src="noarch/supportutils-3.1.29-150300.7.35.27.1.noarch.rpm">
          <filename>supportutils-3.1.29-150300.7.35.27.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.29" release="150300.7.35.27.1" arch="src" src="src/supportutils-3.1.29-150300.7.35.27.1.src.rpm">
          <filename>supportutils-3.1.29-150300.7.35.27.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-476</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1707935728"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1108281" id="1108281" title="kernel-source-azure should only be built for x86_64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177529" id="1177529" title="BUG: workqueue lockup - pool cpus=17 node=1 flags=0x0 nice=0 stuck for 35s! seen when SWAP is on SSD" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="Partner-L3: An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212091" id="1212091" title="PVT:1030:virt:vNIC: Add MVF with vNIC backup adapter on SLES 15 SP4 lpar got failed with error HSCL127D (HNV) (vpmem) (Documentation bug 199985)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215885" id="1215885" title="L3: clocksource / TSC found unstable after boot, possibly due to broken bios" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216016" id="1216016" title="Emerald Rapids C-state support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217217" id="1217217" title="L3: tsc: Marking TSC unstable due to clocksource watchdog" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217670" id="1217670" title="L3: NFS access hangs on diskless system with swap on NFS — ref:_00D1igLOd._500Tr1MQUl:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217895" id="1217895" title="L3-Question: kworker threads causing jitter on cpus with nohz_full configured - ref:_00D1igLOd._500Tr28oxm:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218689" id="1218689" title="VUL-0: CVE-2024-0340: kernel: information disclosure in vhost/vhost.c:vhost_new_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218713" id="1218713" title="Reduce old changelog entries and keep in kernel-docs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218730" id="1218730" title="VUL-0: CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218752" id="1218752" title="VUL-0: CVE-2023-6040: kernel: netfilter out-of-bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218757" id="1218757" title="VUL-0: CVE-2023-51782: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free because of a rose_accept race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218768" id="1218768" title="[SLE15SP6] sysctl-loggers fails to build with the latest 6.4 kernel of the week" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218804" id="1218804" title="VUL-0: CVE-2023-6915: kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218832" id="1218832" title="VUL-0: CVE-2024-0565: kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218836" id="1218836" title="VUL-0: CVE-2023-46838: kernel-source: netback processing of zero-length transmit fragment (XSA-448)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218916" id="1218916" title="VUL-0: CVE-2024-0641: kernel-source: deadlock leading to denail of service in tipc_crypto_key_revoke" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218929" id="1218929" title="{sck 9.0} sck 9.0 beta2-3 [Marble Beta1][Micro + KVM - Full] Install Kit on SUT fails for the KVM section of testing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218930" id="1218930" title="{sck 9.0} sck 9.0 beta3-1 [SLE Micro 6.0 Beta2][SLES 15 SP6 Beta3] Install Kit on SUT test - Error:1: 1 Unable to get multipath info." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218968" id="1218968" title="L3: NFS 4.0 LOCK calls getting constant NFS4ERR_BAD_SEQID" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219053" id="1219053" title="VUL-0: CVE-2024-0775: kernel: use-after-free while changing the mount option in __ext4_remount leading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219120" id="1219120" title="VUL-0: CVE-2023-51043: kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219128" id="1219128" title="VUL-0: CVE-2023-51042: kernel-source: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219349" id="1219349" title="SLE-15SP5 KOTD: nfslock test causes kernel oops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219412" id="1219412" title="VUL-0: CVE-2021-33631: kernel: integer overflow in ext4_write_inline_data_end()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219429" id="1219429" title="VUL-0: CVE-2024-1085: kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219434" id="1219434" title="VUL-0: CVE-2024-1086: kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219490" id="1219490" title="L3: trace_event_file null-ptr-deref in tracing_open_file_tr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219608" id="1219608" title="VUL-0: CVE-2024-24860: kernel-source,kernel-source-azure,kernel-source-rt: race condition in {min,max}_key_size_set() can lead to a kernel panic" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0340" id="CVE-2024-0340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" id="CVE-2024-24860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" id="CVE-2024-1085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1085" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" id="CVE-2024-1086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1086" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" id="CVE-2023-51042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" id="CVE-2023-51780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" id="CVE-2023-46838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" id="CVE-2021-33631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" id="CVE-2023-51043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" id="CVE-2024-0775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" id="CVE-2023-6040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" id="CVE-2024-0641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0641" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" id="CVE-2024-0565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" id="CVE-2023-6915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6915" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" id="CVE-2023-51782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51782" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689).
- CVE-2024-24860: Fixed a denial of service caused by a race condition in {min,max}_key_size_set() (bsc#1219608).
- CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429).
- CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434).
- CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
- CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730).
- CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836).
- CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702).
- CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120).
- CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053).
- CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752).
- CVE-2024-0641: Fixed a denial of service vulnerability in tipc_crypto_key_revoke in net/tipc/crypto.c (bsc#1218916).
- CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1218832).
- CVE-2023-6915: Fixed a NULL pointer dereference problem in ida_free in lib/idr.c (bsc#1218804).
- CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757).

The following non-security bugs were fixed:

- Store the old kernel changelog entries in kernel-docs package (bsc#1218713).
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (git-fixes).
- bcache: Remove unnecessary NULL point check in node allocations (git-fixes).
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (git-fixes).
- bcache: avoid NULL checking to c-&gt;root in run_cache_set() (git-fixes).
- bcache: avoid oversize memory allocation by small stripe_size (git-fixes).
- bcache: check return value from btree_node_alloc_replacement() (git-fixes).
- bcache: fixup btree_cache_wait list damage (git-fixes).
- bcache: fixup init dirty data errors (git-fixes).
- bcache: fixup lock c-&gt;root error (git-fixes).
- bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race (git-fixes).
- bcache: prevent potential division by zero error (git-fixes).
- bcache: remove redundant assignment to variable cur_idx (git-fixes).
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (git-fixes).
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (git-fixes).
- block: Fix kabi header include (bsc#1218929).
- block: free the extended dev_t minor later (bsc#1218930).
- clocksource: Skip watchdog check for large watchdog intervals (bsc#1217217).
- clocksource: disable watchdog checks on TSC when TSC is watchdog (bsc#1215885).
- dm cache policy smq: ensure IO does not prevent cleaner policy progress (git-fixes).
- dm cache: add cond_resched() to various workqueue loops (git-fixes).
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (git-fixes).
- dm crypt: add cond_resched() to dmcrypt_write() (git-fixes).
- dm crypt: avoid accessing uninitialized tasklet (git-fixes).
- dm flakey: do not corrupt the zero page (git-fixes).
- dm flakey: fix a crash with invalid table line (git-fixes).
- dm flakey: fix logic when corrupting a bio (git-fixes).
- dm init: add dm-mod.waitfor to wait for asynchronously probed block devices (git-fixes).
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (git-fixes).
- dm integrity: reduce vmalloc space footprint on 32-bit architectures (git-fixes).
- dm raid: clean up four equivalent goto tags in raid_ctr() (git-fixes).
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (git-fixes).
- dm stats: check for and propagate alloc_percpu failure (git-fixes).
- dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (git-fixes).
- dm thin metadata: check fail_io before using data_sm (git-fixes).
- dm thin: add cond_resched() to various workqueue loops (git-fixes).
- dm thin: fix deadlock when swapping to thin device (bsc#1177529).
- dm verity: do not perform FEC for failed readahead IO (git-fixes).
- dm verity: fix error handling for check_at_most_once on FEC (git-fixes).
- dm verity: skip redundant verity_handle_err() on I/O errors (git-fixes).
- dm zoned: free dmz-&gt;ddev array in dmz_put_zoned_devices (git-fixes).
- dm-delay: fix a race between delay_presuspend and delay_bio (git-fixes).
- dm-integrity: do not modify bio's immutable bio_vec in integrity_metadata() (git-fixes).
- dm-verity: align struct dm_verity_fec_io properly (git-fixes).
- dm: add cond_resched() to dm_wq_work() (git-fixes).
- dm: do not lock fs when the map is NULL during suspend or resume (git-fixes).
- dm: do not lock fs when the map is NULL in process of resume (git-fixes).
- dm: remove flush_scheduled_work() during local_exit() (git-fixes).
- dm: send just one event on resize, not two (git-fixes).
- doc/README.KSYMS: Add to repo.
- hv_netvsc: rndis_filter needs to select NLS (git-fixes).
- intel_idle: add Emerald Rapids Xeon support (bsc#1216016).
- kabi, vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
- kernel-source: Fix description typo
- loop: suppress uevents while reconfiguring the device (git-fixes).
- nbd: Fix debugfs_create_dir error checking (git-fixes).
- nbd: fix incomplete validation of ioctl arg (git-fixes).
- nbd: use the correct block_device in nbd_bdev_reset (git-fixes).
- nfsd4: add refcount for nfsd4_blocked_lock (bsc#1218968 bsc#1219349).
- nfsd: fix RELEASE_LOCKOWNER (bsc#1218968).
- null_blk: Always check queue mode setting from configfs (git-fixes).
- powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device (bsc#1212091 ltc#199106 git-fixes).
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (git-fixes).
- rbd: decouple header read-in from updating rbd_dev-&gt;header (git-fixes).
- rbd: decouple parent info read-in from updating rbd_dev (git-fixes).
- rbd: get snapshot context after exclusive lock is ensured to be held (git-fixes).
- rbd: harden get_lock_owner_info() a bit (git-fixes).
- rbd: make get_lock_owner_info() return a single locker or NULL (git-fixes).
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (git-fixes).
- rbd: move rbd_dev_refresh() definition (git-fixes).
- rbd: prevent busy loop when requesting exclusive lock (git-fixes).
- rbd: retrieve and check lock owner twice before blocklisting (git-fixes).
- rbd: take header_rwsem in rbd_dev_refresh() only when updating (git-fixes).
- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- scsi: ibmvfc: Implement channel queue depth and event buffer accounting (bsc#1209834 ltc#202097).
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (bsc#1209834 ltc#202097).
- trace,smp: Add tracepoints around remotelly called functions (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs (bsc#1217895).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.68.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.68.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.68.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.68.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.68.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.68.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-565</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708496332"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219425" id="1219425" title="[SLEM][6.0][Build10.15] SUSEConnect can not be used inside transactional-update shell" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Allow SUSEConnect on read write transactional systems (bsc#1219425)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150400.3.25.1" arch="src" src="src/suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.src.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150400.3.25.1" arch="x86_64" src="x86_64/suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.x86_64.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150400.3.25.1" arch="s390x" src="s390x/suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.s390x.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.7.0~git0.5338270" release="150400.3.25.1" arch="aarch64" src="aarch64/suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.aarch64.rpm">
          <filename>suseconnect-ng-1.7.0~git0.5338270-150400.3.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-614</id>
    <title>Recommended update for rpm</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708943496"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216752" id="1216752" title="systemd: lua script error: rpm.execute() is missing in rpm 5.14 in SLE" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- backport lua support for rpm.execute to ease migrating from SLE Micro 5.5 to 6.0 (bsc#1216752)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="src" src="src/python-rpm-4.14.3-150400.59.7.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.7.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.7.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="src" src="src/rpm-4.14.3-150400.59.7.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.7.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.7.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.7.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.7.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.7.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.7.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.7.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.7.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.7.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.7.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.7.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.7.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.7.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.7.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-596</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708628753"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51385" id="CVE-2023-51385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51385" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218215" id="1218215" title="VUL-0: CVE-2023-51385: openssh: command injection via user name or host name metacharacters" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2023-51385: Limit the use of shell metacharacters in host- and
  user names to avoid command injection. (bsc#1218215)
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="src" src="src/openssh-8.4p1-150300.3.30.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.30.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.30.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.30.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.30.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.30.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.30.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.30.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.30.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.30.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1368</id>
    <title>Security update for shim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713776800"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40546" id="CVE-2023-40546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40546" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40548" id="CVE-2023-40548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40548" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40547" id="CVE-2023-40547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40547" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40549" id="CVE-2023-40549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40551" id="CVE-2023-40551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40551" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40550" id="CVE-2023-40550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" id="CVE-2022-28737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215102" id="1215102" title="VUL-0: CVE-2023-40550: shim: pe: Fix an out-of-bound read in verify_buffer_sbat()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215103" id="1215103" title="VUL-0: CVE-2023-40551: shim: pe-relocate: Fix bounds check for MZ binaries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219460" id="1219460" title="shim is built failed due to fde-tpm-helper-rpm-macros" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205855" id="1205855" title="GRUB2 installation failed in fresh install" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215100" id="1215100" title="VUL-0: CVE-2023-40548: shim: Fix integer overflow on SBAT section size on 32-bit system" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198101" id="1198101" title="VUL-0: shim: openSUSE tumbleweed not fully locked down? Add opensuse-cert-prompt back to openSUSE shim" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215098" id="1215098" title="VUL-0: CVE-2023-40547: shim: trusting http headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213945" id="1213945" title="AUDIT-TRACKER: fde-tools,pcr-oracle,grub2: TPM based unattended disk unlocking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210382" id="1210382" title="The bootx64.efi in EFI boot partition is not updated after shim be upgraded." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215099" id="1215099" title="VUL-0: CVE-2023-40546: shim: format specifier issues when calling LogError" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215101" id="1215101" title="VUL-0: CVE-2023-40549: shim: Authenticode: verify that the signature header is in bounds." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205588" id="1205588" title="Page Fault when booting with PE NX-compatibility DLL Characteristic flag" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-922" id="PED-922" title="https://jira.suse.com/browse/PED-922" type="jira"/>
    </references>
    <description>This update for shim fixes the following issues:

- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
- Limit the requirement of fde-tpm-helper-macros to the distro with
  suse_version 1600 and above (bsc#1219460)

Update to version 15.8:

Security issues fixed:

- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)

        
The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.

- Generate dbx during build so we don't include binary files in sources
- Don't require grub so shim can still be used with systemd-boot
- Update shim-install to fix boot failure of ext4 root file system
  on RAID10 (bsc#1205855)
- Adopt the macros from fde-tpm-helper-macros to update the
  signature in the sealed key after a bootloader upgrade

- Update shim-install to amend full disk encryption support
  - Adopt TPM 2.0 Key File for grub2 TPM 2.0 protector
  - Use the long name to specify the grub2 key protector
  - cryptodisk: support TPM authorized policies
  - Do not use tpm_record_pcrs unless the command is in command.lst

- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to
  enable the NX compatibility flag when using post-process-pe after
  discussed with grub2 experts in mail. It's useful for further development
  and testing. (bsc#1205588)
</description>
    <pkglist>
      <collection>
        <package name="shim" epoch="0" version="15.8" release="150300.4.20.2" arch="src" src="src/shim-15.8-150300.4.20.2.src.rpm">
          <filename>shim-15.8-150300.4.20.2.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.8" release="150300.4.20.2" arch="x86_64" src="x86_64/shim-15.8-150300.4.20.2.x86_64.rpm">
          <filename>shim-15.8-150300.4.20.2.x86_64.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.8" release="150300.4.20.2" arch="aarch64" src="aarch64/shim-15.8-150300.4.20.2.aarch64.rpm">
          <filename>shim-15.8-150300.4.20.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-586</id>
    <title>Security update for docker</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708592086"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219267" id="1219267" title="VUL-0: CVE-2024-23651: docker: race condition in mount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219438" id="1219438" title="VUL-0: CVE-2024-23653: buildkit: BuildKit API doesn't validate entitlement on container creation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219268" id="1219268" title="VUL-0: CVE-2024-23652: docker: arbitrary deletion of files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" id="CVE-2024-23653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" id="CVE-2024-23652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" id="CVE-2024-23651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" type="cve"/>
    </references>
    <description>This update for docker fixes the following issues:

Vendor latest buildkit v0.11 including bugfixes for the following:

* CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438).
* CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).
* CVE-2024-23651: Fixed race condition in mount (bsc#1219267).
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="src" src="src/docker-24.0.7_ce-150000.193.1.src.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="x86_64" src="x86_64/docker-24.0.7_ce-150000.193.1.x86_64.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="s390x" src="s390x/docker-24.0.7_ce-150000.193.1.s390x.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.193.1" arch="aarch64" src="aarch64/docker-24.0.7_ce-150000.193.1.aarch64.rpm">
          <filename>docker-24.0.7_ce-150000.193.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-597</id>
    <title>Security update for mozilla-nss</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708628842"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216198" id="1216198" title="VUL-0: CVE-2023-5388: mozilla-nss: timing attack against RSA decryption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" id="CVE-2023-5388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" type="cve"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Update to NSS 3.90.2:

- CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/libfreebl3-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>libfreebl3-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/libsoftokn3-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>libsoftokn3-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="src" src="src/mozilla-nss-3.90.2-150400.3.39.1.src.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/mozilla-nss-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.2" release="150400.3.39.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.90.2-150400.3.39.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.90.2-150400.3.39.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/libfreebl3-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>libfreebl3-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/libsoftokn3-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>libsoftokn3-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/mozilla-nss-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/mozilla-nss-certs-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.2" release="150400.3.39.1" arch="s390x" src="s390x/mozilla-nss-tools-3.90.2-150400.3.39.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.90.2-150400.3.39.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/libfreebl3-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>libfreebl3-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/libsoftokn3-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>libsoftokn3-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/mozilla-nss-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>mozilla-nss-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.90.2" release="150400.3.39.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.90.2-150400.3.39.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.90.2-150400.3.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1133</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712568562"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220061" id="1220061" title="VUL-1: CVE-2023-45918: ncurses: NULL pointer dereference via corrupted xterm-256color file" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45918" id="CVE-2023-45918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45918" type="cve"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2023-45918: Fixed NULL pointer dereference via corrupted xterm-256color file (bsc#1220061).
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.24.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.24.1" arch="src" src="src/ncurses-6.1-150000.5.24.1.src.rpm">
          <filename>ncurses-6.1-150000.5.24.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.24.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.24.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.24.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.24.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.24.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/libncurses6-6.1-150000.5.24.1.s390x.rpm">
          <filename>libncurses6-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/ncurses-utils-6.1-150000.5.24.1.s390x.rpm">
          <filename>ncurses-utils-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/terminfo-6.1-150000.5.24.1.s390x.rpm">
          <filename>terminfo-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.24.1" arch="s390x" src="s390x/terminfo-base-6.1-150000.5.24.1.s390x.rpm">
          <filename>terminfo-base-6.1-150000.5.24.1.s390x.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.24.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.24.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.24.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.24.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.24.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.24.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-980</id>
    <title>Recommended update for pam-config</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711343925"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219767" id="1219767" title="nullok option of pam_unix doesn't work as expected when logging in via a tty with an empty password" type="bugzilla"/>
    </references>
    <description>This update for pam-config fixes the following issues:

- Fix pam_gnome_keyring module for AUTH (bsc#1219767)
</description>
    <pkglist>
      <collection>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="src" src="src/pam-config-1.1-150200.3.6.1.src.rpm">
          <filename>pam-config-1.1-150200.3.6.1.src.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="x86_64" src="x86_64/pam-config-1.1-150200.3.6.1.x86_64.rpm">
          <filename>pam-config-1.1-150200.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="s390x" src="s390x/pam-config-1.1-150200.3.6.1.s390x.rpm">
          <filename>pam-config-1.1-150200.3.6.1.s390x.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="1.1" release="150200.3.6.1" arch="aarch64" src="aarch64/pam-config-1.1-150200.3.6.1.aarch64.rpm">
          <filename>pam-config-1.1-150200.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1476</id>
    <title>Recommended update for python-docutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714467628"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219501" id="1219501" title="python311-docutils generates file conflicts" type="bugzilla"/>
    </references>
    <description>This update for python-docutils fixes the following issue:

- Use update-alternatives for all binary scripts and provide
  /usr/bin/docutils to avoid conflict with python311-docutils (bsc#1219501)
</description>
    <pkglist>
      <collection>
        <package name="python-docutils" epoch="0" version="0.14" release="150000.3.4.1" arch="src" src="src/python-docutils-0.14-150000.3.4.1.src.rpm">
          <filename>python-docutils-0.14-150000.3.4.1.src.rpm</filename>
        </package>
        <package name="python3-docutils" epoch="0" version="0.14" release="150000.3.4.1" arch="noarch" src="noarch/python3-docutils-0.14-150000.3.4.1.noarch.rpm">
          <filename>python3-docutils-0.14-150000.3.4.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-735</id>
    <title>Recommended update for libindicator7, libdbusmenu-gtk4</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709215329"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219244" id="1219244" title="https://bugzilla.suse.com/show_bug.cgi?id=1219244" type="bugzilla"/>
    </references>
    <description>This update for libindicator7, libdbusmenu-gtk4 fixes the following issues:
    
- Add missing packages to Package Hub 15 SP5 (bsc#1219244, jsc#MSC-751)
</description>
    <pkglist>
      <collection>
        <package name="libdbusmenu-glib4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="x86_64" src="x86_64/libdbusmenu-glib4-16.04.0-150200.3.2.1.x86_64.rpm">
          <filename>libdbusmenu-glib4-16.04.0-150200.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk2" epoch="0" version="16.04.0" release="150200.3.2.1" arch="src" src="src/libdbusmenu-gtk2-16.04.0-150200.3.2.1.src.rpm">
          <filename>libdbusmenu-gtk2-16.04.0-150200.3.2.1.src.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3" epoch="0" version="16.04.0" release="150200.3.2.1" arch="src" src="src/libdbusmenu-gtk3-16.04.0-150200.3.2.1.src.rpm">
          <filename>libdbusmenu-gtk3-16.04.0-150200.3.2.1.src.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3-4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="x86_64" src="x86_64/libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.x86_64.rpm">
          <filename>libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libindicator" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="src" src="src/libindicator-16.10.0+bzr20171205-150200.3.2.1.src.rpm">
          <filename>libindicator-16.10.0+bzr20171205-150200.3.2.1.src.rpm</filename>
        </package>
        <package name="libindicator3-7" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="x86_64" src="x86_64/libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.x86_64.rpm">
          <filename>libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libdbusmenu-glib4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="s390x" src="s390x/libdbusmenu-glib4-16.04.0-150200.3.2.1.s390x.rpm">
          <filename>libdbusmenu-glib4-16.04.0-150200.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3-4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="s390x" src="s390x/libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.s390x.rpm">
          <filename>libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libindicator3-7" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="s390x" src="s390x/libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.s390x.rpm">
          <filename>libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.s390x.rpm</filename>
        </package>
        <package name="libdbusmenu-glib4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="aarch64" src="aarch64/libdbusmenu-glib4-16.04.0-150200.3.2.1.aarch64.rpm">
          <filename>libdbusmenu-glib4-16.04.0-150200.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="libdbusmenu-gtk3-4" epoch="0" version="16.04.0" release="150200.3.2.1" arch="aarch64" src="aarch64/libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.aarch64.rpm">
          <filename>libdbusmenu-gtk3-4-16.04.0-150200.3.2.1.aarch64.rpm</filename>
        </package>
        <package name="libindicator3-7" epoch="0" version="16.10.0+bzr20171205" release="150200.3.2.1" arch="aarch64" src="aarch64/libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.aarch64.rpm">
          <filename>libindicator3-7-16.10.0+bzr20171205-150200.3.2.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-982</id>
    <title>Recommended update for systemd-rpm-macros</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711367809"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217964" id="1217964" title="[Build 44.1] openQA test fails in check_upgraded_service - named can't be auto active after migration" type="bugzilla"/>
    </references>
    <description>This update for systemd-rpm-macros fixes the following issue:

- Order packages that requires systemd after systemd-sysvcompat if needed. (bsc#1217964)
</description>
    <pkglist>
      <collection>
        <package name="systemd-rpm-macros" epoch="0" version="15" release="150000.7.39.1" arch="noarch" src="noarch/systemd-rpm-macros-15-150000.7.39.1.noarch.rpm">
          <filename>systemd-rpm-macros-15-150000.7.39.1.noarch.rpm</filename>
        </package>
        <package name="systemd-rpm-macros" epoch="0" version="15" release="150000.7.39.1" arch="src" src="src/systemd-rpm-macros-15-150000.7.39.1.src.rpm">
          <filename>systemd-rpm-macros-15-150000.7.39.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-610</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1708921933"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213594" id="1213594" title="[SLEM5.5] SELinux denial in haveged" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Allow haveged to manage tmpfs directories (bsc#1213594)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git14.93d944dd" release="150400.4.27.1" arch="noarch" src="noarch/selinux-policy-20230511+git14.93d944dd-150400.4.27.1.noarch.rpm">
          <filename>selinux-policy-20230511+git14.93d944dd-150400.4.27.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git14.93d944dd" release="150400.4.27.1" arch="src" src="src/selinux-policy-20230511+git14.93d944dd-150400.4.27.1.src.rpm">
          <filename>selinux-policy-20230511+git14.93d944dd-150400.4.27.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git14.93d944dd" release="150400.4.27.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git14.93d944dd-150400.4.27.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git14.93d944dd-150400.4.27.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git14.93d944dd" release="150400.4.27.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git14.93d944dd-150400.4.27.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git14.93d944dd-150400.4.27.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1136</id>
    <title>Security update for c-ares</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712568633"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25629" id="CVE-2024-25629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25629" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220279" id="1220279" title="VUL-0: CVE-2024-25629: c-ares: out of bounds read in ares__read_line()" type="bugzilla"/>
    </references>
    <description>This update for c-ares fixes the following issues:

- CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
</description>
    <pkglist>
      <collection>
        <package name="c-ares" epoch="0" version="1.19.1" release="150000.3.26.1" arch="src" src="src/c-ares-1.19.1-150000.3.26.1.src.rpm">
          <filename>c-ares-1.19.1-150000.3.26.1.src.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.26.1" arch="x86_64" src="x86_64/libcares2-1.19.1-150000.3.26.1.x86_64.rpm">
          <filename>libcares2-1.19.1-150000.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.26.1" arch="s390x" src="s390x/libcares2-1.19.1-150000.3.26.1.s390x.rpm">
          <filename>libcares2-1.19.1-150000.3.26.1.s390x.rpm</filename>
        </package>
        <package name="libcares2" epoch="0" version="1.19.1" release="150000.3.26.1" arch="aarch64" src="aarch64/libcares2-1.19.1-150000.3.26.1.aarch64.rpm">
          <filename>libcares2-1.19.1-150000.3.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-795</id>
    <title>Security update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709886962"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220389" id="1220389" title="[Build 20240226-1] openQA test fails in yast2_nfs4_client - root is not in the sudoers file." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219026" id="1219026" title="VUL-0: CVE-2023-42465: sudo: row hammer attacks hardening" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" id="CVE-2023-42465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" type="cve"/>
    </references>
    <description>This update for sudo fixes the following issues:

NOTE: This update has been retracted as some logic was not correct. 

- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.33.1" arch="src" src="src/sudo-1.9.9-150400.4.33.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.33.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.33.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.33.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.33.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.33.1" arch="s390x" src="s390x/sudo-1.9.9-150400.4.33.1.s390x.rpm">
          <filename>sudo-1.9.9-150400.4.33.1.s390x.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.33.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.33.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-760</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709641518"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220164" id="1220164" title="target failover does not work when an update server is down" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220165" id="1220165" title="target failover does not work when an update server is down" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.7" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.1.7-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.1.7-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.1.7" release="150000.6.108.1" arch="src" src="src/cloud-regionsrv-client-10.1.7-150000.6.108.1.src.rpm">
          <filename>cloud-regionsrv-client-10.1.7-150000.6.108.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.4" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.4-150000.6.108.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.108.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.108.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-819</id>
    <title>Security update for wpa_supplicant</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709895924"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160" id="CVE-2023-52160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219975" id="1219975" title="VUL-0: CVE-2023-52160: wpa_supplicant: Bypassing WiFi Authentication" type="bugzilla"/>
    </references>
    <description>This update for wpa_supplicant fixes the following issues:

- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
</description>
    <pkglist>
      <collection>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="150000.4.39.1" arch="src" src="src/wpa_supplicant-2.9-150000.4.39.1.src.rpm">
          <filename>wpa_supplicant-2.9-150000.4.39.1.src.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="150000.4.39.1" arch="x86_64" src="x86_64/wpa_supplicant-2.9-150000.4.39.1.x86_64.rpm">
          <filename>wpa_supplicant-2.9-150000.4.39.1.x86_64.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="150000.4.39.1" arch="s390x" src="s390x/wpa_supplicant-2.9-150000.4.39.1.s390x.rpm">
          <filename>wpa_supplicant-2.9-150000.4.39.1.s390x.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="150000.4.39.1" arch="aarch64" src="aarch64/wpa_supplicant-2.9-150000.4.39.1.aarch64.rpm">
          <filename>wpa_supplicant-2.9-150000.4.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-901</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710434982"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219666" id="1219666" title="VUL-0: CVE-2023-6597: python,python3,python310,python311,python36,python39: tempfile.TemporaryDirectory fails removing dir in some edge cases related to symlinks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214691" id="1214691" title="VUL-0: CVE-2022-48566: python-base,python36,python3,python: Use CRYPTO_memcmp() for compare_digest" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48566" id="CVE-2022-48566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" id="CVE-2023-6597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).
- CVE-2022-48566: Make compare_digest more constant-time (bsc#1214691).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.57.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.57.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.57.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="src" src="src/python3-3.6.15-150300.10.57.1.src.rpm">
          <filename>python3-3.6.15-150300.10.57.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.57.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.57.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.57.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.57.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.57.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.57.1" arch="src" src="src/python3-core-3.6.15-150300.10.57.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.57.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.57.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.57.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.57.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.57.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.57.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.57.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.57.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.57.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.57.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.57.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.57.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.57.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.57.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.57.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.57.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.57.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.57.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1177</id>
    <title>Recommended update for multipath-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712653303"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213809" id="1213809" title="multipath command changes recovery_tmo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212440" id="1212440" title="no path re-add or path reinstated for the multipath maps while doing IBM firmware updates  - ref:_00D1igLOd._5005qRtBqJ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220374" id="1220374" title="multipath-tools bug fix backports from SLE15-SP6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219142" id="1219142" title="Some LVM VG are not activated at boot" type="bugzilla"/>
    </references>
    <description>This update for multipath-tools fixes the following issues:

- Fixed activation of LVM volume groups during coldplug (bsc#1219142)
- Avoid changing SCSI timeouts in &quot;multipath -d&quot; (bsc#1213809)
- Fixed dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):

  * Avoid setting queue_if_no_path on multipath maps for which the no_path_retry timeout has expired
  * Fixed memory and error handling for code using aio (marginal path code, directio path checker)
  * libmultipath: fixed max_sectors_kb on adding path
  * Fixed warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
  * multipathd.service: remove &quot;Also=multipathd.socket&quot;
  * libmultipathd: avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fixed &quot;smart&quot; bug with failed valid path check
  * libmpathpersist: fixed resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
</description>
    <pkglist>
      <collection>
        <package name="kpartx" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="x86_64" src="x86_64/kpartx-0.9.0+161+suse.a26bd4c-150400.4.19.1.x86_64.rpm">
          <filename>kpartx-0.9.0+161+suse.a26bd4c-150400.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="x86_64" src="x86_64/libmpath0-0.9.0+161+suse.a26bd4c-150400.4.19.1.x86_64.rpm">
          <filename>libmpath0-0.9.0+161+suse.a26bd4c-150400.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="src" src="src/multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.src.rpm">
          <filename>multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.src.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="x86_64" src="x86_64/multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.x86_64.rpm">
          <filename>multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="s390x" src="s390x/kpartx-0.9.0+161+suse.a26bd4c-150400.4.19.1.s390x.rpm">
          <filename>kpartx-0.9.0+161+suse.a26bd4c-150400.4.19.1.s390x.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="s390x" src="s390x/libmpath0-0.9.0+161+suse.a26bd4c-150400.4.19.1.s390x.rpm">
          <filename>libmpath0-0.9.0+161+suse.a26bd4c-150400.4.19.1.s390x.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="s390x" src="s390x/multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.s390x.rpm">
          <filename>multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.s390x.rpm</filename>
        </package>
        <package name="kpartx" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="aarch64" src="aarch64/kpartx-0.9.0+161+suse.a26bd4c-150400.4.19.1.aarch64.rpm">
          <filename>kpartx-0.9.0+161+suse.a26bd4c-150400.4.19.1.aarch64.rpm</filename>
        </package>
        <package name="libmpath0" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="aarch64" src="aarch64/libmpath0-0.9.0+161+suse.a26bd4c-150400.4.19.1.aarch64.rpm">
          <filename>libmpath0-0.9.0+161+suse.a26bd4c-150400.4.19.1.aarch64.rpm</filename>
        </package>
        <package name="multipath-tools" epoch="0" version="0.9.0+161+suse.a26bd4c" release="150400.4.19.1" arch="aarch64" src="aarch64/multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.aarch64.rpm">
          <filename>multipath-tools-0.9.0+161+suse.a26bd4c-150400.4.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-871</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710331685"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217324" id="1217324" title="VUL-0: CVE-2023-48234: vim: overflow in nv_z_get_count" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217432" id="1217432" title="VUL-0: CVE-2023-48706: vim: heap-use-after-free in ex_substitute" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215005" id="1215005" title="VUL-0: CVE-2023-4750: vim: Heap use-after-free in function bt_quickfix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219581" id="1219581" title="VUL-0: CVE-2024-22667: vim: stack-based buffer overflow in did_set_langmap function in map.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217326" id="1217326" title="VUL-0: CVE-2023-48235: vim: overflow in ex address parsing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217316" id="1217316" title="VUL-0: CVE-2023-48231: vim: Use-After-Free in win_close()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217330" id="1217330" title="VUL-0: CVE-2023-48237: vim: overflow in shift_line" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217320" id="1217320" title="VUL-0: CVE-2023-48232: vim: Floating point Exception in adjust_plines_for_skipcol()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217329" id="1217329" title="VUL-0: CVE-2023-48236: vim: overflow in get_number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217321" id="1217321" title="VUL-0: CVE-2023-48233: vim: overflow with count for :s command" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48233" id="CVE-2023-48233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48237" id="CVE-2023-48237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48237" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48706" id="CVE-2023-48706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48706" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4750" id="CVE-2023-4750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4750" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22667" id="CVE-2024-22667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48231" id="CVE-2023-48231" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48231" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48232" id="CVE-2023-48232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48232" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48235" id="CVE-2023-48235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48236" id="CVE-2023-48236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48236" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48234" id="CVE-2023-48234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48234" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-48231: Fixed  Use-After-Free in win_close() (bsc#1217316).
- CVE-2023-48232: Fixed Floating point Exception in adjust_plines_for_skipcol() (bsc#1217320).
- CVE-2023-48233: Fixed overflow with count for :s command (bsc#1217321).
- CVE-2023-48234: Fixed overflow in nv_z_get_count (bsc#1217324).
- CVE-2023-48235: Fixed overflow in ex address parsing (bsc#1217326).
- CVE-2023-48236: Fixed overflow in get_number (bsc#1217329).
- CVE-2023-48237: Fixed overflow in shift_line (bsc#1217330).
- CVE-2023-48706: Fixed heap-use-after-free in ex_substitute (bsc#1217432).
- CVE-2024-22667: Fixed stack-based buffer overflow in did_set_langmap function in map.c (bsc#1219581).
- CVE-2023-4750: Fixed heap use-after-free in function bt_quickfix (bsc#1215005).

Updated to version 9.1 with patch level 0111:
https://github.com/vim/vim/compare/v9.0.2103...v9.1.0111
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.0111" release="150000.5.60.1" arch="src" src="src/vim-9.1.0111-150000.5.60.1.src.rpm">
          <filename>vim-9.1.0111-150000.5.60.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.0111" release="150000.5.60.1" arch="noarch" src="noarch/vim-data-common-9.1.0111-150000.5.60.1.noarch.rpm">
          <filename>vim-data-common-9.1.0111-150000.5.60.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0111" release="150000.5.60.1" arch="x86_64" src="x86_64/vim-small-9.1.0111-150000.5.60.1.x86_64.rpm">
          <filename>vim-small-9.1.0111-150000.5.60.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0111" release="150000.5.60.1" arch="s390x" src="s390x/vim-small-9.1.0111-150000.5.60.1.s390x.rpm">
          <filename>vim-small-9.1.0111-150000.5.60.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0111" release="150000.5.60.1" arch="aarch64" src="aarch64/vim-small-9.1.0111-150000.5.60.1.aarch64.rpm">
          <filename>vim-small-9.1.0111-150000.5.60.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-766</id>
    <title>Recommended update for libssh</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709643038"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220385" id="1220385" title="[Build 14.2] openQA test fails in zypper_migration - Failed post db handling Post process failed /usr/sbin/semodule:  Failed!" type="bugzilla"/>
    </references>
    <description>This update for libssh fixes the following issues:

- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.9.8" release="150400.3.6.1" arch="src" src="src/libssh-0.9.8-150400.3.6.1.src.rpm">
          <filename>libssh-0.9.8-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.6.1" arch="x86_64" src="x86_64/libssh-config-0.9.8-150400.3.6.1.x86_64.rpm">
          <filename>libssh-config-0.9.8-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.6.1" arch="x86_64" src="x86_64/libssh4-0.9.8-150400.3.6.1.x86_64.rpm">
          <filename>libssh4-0.9.8-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.6.1" arch="s390x" src="s390x/libssh-config-0.9.8-150400.3.6.1.s390x.rpm">
          <filename>libssh-config-0.9.8-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.6.1" arch="s390x" src="s390x/libssh4-0.9.8-150400.3.6.1.s390x.rpm">
          <filename>libssh4-0.9.8-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.9.8" release="150400.3.6.1" arch="aarch64" src="aarch64/libssh-config-0.9.8-150400.3.6.1.aarch64.rpm">
          <filename>libssh-config-0.9.8-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.9.8" release="150400.3.6.1" arch="aarch64" src="aarch64/libssh4-0.9.8-150400.3.6.1.aarch64.rpm">
          <filename>libssh4-0.9.8-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-934</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710849819"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219885" id="1219885" title="VUL-0: CVE-2023-46841: xen: x86: shadow stack vs exceptions from emulation stubs" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46841" id="CVE-2023-46841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46841" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46841: Fixed shadow stack vs exceptions from emulation stubs (XSA-451) (bsc#1219885).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_14" release="150400.4.49.1" arch="src" src="src/xen-4.16.5_14-150400.4.49.1.src.rpm">
          <filename>xen-4.16.5_14-150400.4.49.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_14" release="150400.4.49.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_14-150400.4.49.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_14-150400.4.49.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-781</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1709733933"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219454" id="1219454" title="Double assignment of IPv4 address in GCE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220718" id="1220718" title="Latest cloud-netconfig-azure has wrong path for SCRIPTDIR" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d parent directory

- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.11" release="150000.25.17.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.11-150000.25.17.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.11-150000.25.17.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.11" release="150000.25.17.1" arch="src" src="src/cloud-netconfig-azure-1.11-150000.25.17.1.src.rpm">
          <filename>cloud-netconfig-azure-1.11-150000.25.17.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.11" release="150000.25.17.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.11-150000.25.17.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.11-150000.25.17.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.11" release="150000.25.17.1" arch="src" src="src/cloud-netconfig-ec2-1.11-150000.25.17.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.11-150000.25.17.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.11" release="150000.25.17.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.11-150000.25.17.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.11-150000.25.17.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.11" release="150000.25.17.1" arch="src" src="src/cloud-netconfig-gce-1.11-150000.25.17.1.src.rpm">
          <filename>cloud-netconfig-gce-1.11-150000.25.17.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-838</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710222396"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220117" id="1220117" title="Processes not cleaned up after failed SSH session are using up 100% CPU" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- Processes not cleaned up after failed SSH session are using up 100% CPU (bsc#1220117)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.26.1" arch="src" src="src/util-linux-2.37.2-150400.8.26.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.26.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.26.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.26.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.26.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.26.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.26.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.26.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/libblkid1-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>libblkid1-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/libfdisk1-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>libfdisk1-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/libmount1-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>libmount1-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/libsmartcols1-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/libuuid1-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>libuuid1-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/util-linux-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>util-linux-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.26.1" arch="s390x" src="s390x/util-linux-systemd-2.37.2-150400.8.26.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.26.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.26.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.26.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.26.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1129</id>
    <title>Security update for expat</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712560344"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" id="CVE-2023-52425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" id="CVE-2024-28757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219559" id="1219559" title="VUL-0: CVE-2023-52425: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221289" id="1221289" title="VUL-0: CVE-2024-28757: expat: libexpat: XML Entity Expansion" type="bugzilla"/>
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2023-52425: Fixed a DoS caused by processing large tokens. (bsc#1219559) 
- CVE-2024-28757: Fixed an XML Entity Expansion. (bsc#1221289)
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.4.4" release="150400.3.17.1" arch="src" src="src/expat-2.4.4-150400.3.17.1.src.rpm">
          <filename>expat-2.4.4-150400.3.17.1.src.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.17.1" arch="x86_64" src="x86_64/libexpat1-2.4.4-150400.3.17.1.x86_64.rpm">
          <filename>libexpat1-2.4.4-150400.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.17.1" arch="s390x" src="s390x/libexpat1-2.4.4-150400.3.17.1.s390x.rpm">
          <filename>libexpat1-2.4.4-150400.3.17.1.s390x.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.4.4" release="150400.3.17.1" arch="aarch64" src="aarch64/libexpat1-2.4.4-150400.3.17.1.aarch64.rpm">
          <filename>libexpat1-2.4.4-150400.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1176</id>
    <title>Recommended update for hwdata</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712652242"/>
    <references/>
    <description>This update for hwdata fixes the following issues:

- Update to 0.380
- Update pci, usb and vendor ids
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.380" release="150000.3.68.1" arch="noarch" src="noarch/hwdata-0.380-150000.3.68.1.noarch.rpm">
          <filename>hwdata-0.380-150000.3.68.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.380" release="150000.3.68.1" arch="src" src="src/hwdata-0.380-150000.3.68.1.src.rpm">
          <filename>hwdata-0.380-150000.3.68.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-939</id>
    <title>Security update for shadow</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710921820"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188307" id="1188307" title="passwd -S -a segfaults when with passwd: files compat in nsswitch.conf - ref:_00D1igLOd._5001ifxuUP:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1144060" id="1144060" title="Please add &quot;pam_keyinit.so&quot; to the /etc/pam.d/... configuration file(s)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206627" id="1206627" title="Yast can no longer modify NIS users and groups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210507" id="1210507" title="VUL-0: CVE-2023-29383: shadow: apparent /etc/shadow manipulation via chfn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213189" id="1213189" title="the lock file /etc/subgid.lock remains after forced power interruptions." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205502" id="1205502" title="useradd audit event user id field cannot be interpreted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203823" id="1203823" title="shadow incorrectly added pam_keyinit into its PAM config files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1176006" id="1176006" title="chage date miscalcuation" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29383" id="CVE-2023-29383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29383" type="cve"/>
    </references>
    <description>This update for shadow fixes the following issues:

- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).

The following non-security bugs were fixed:

- bsc#1176006: Fix chage date miscalculation
- bsc#1188307: Fix passwd segfault
- bsc#1203823: Remove pam_keyinit from PAM config files
- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
- bsc#1205502: useradd audit event user id field cannot be interpretedd 
</description>
    <pkglist>
      <collection>
        <package name="login_defs" epoch="0" version="4.8.1" release="150400.3.6.1" arch="noarch" src="noarch/login_defs-4.8.1-150400.3.6.1.noarch.rpm">
          <filename>login_defs-4.8.1-150400.3.6.1.noarch.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.6.1" arch="src" src="src/shadow-4.8.1-150400.3.6.1.src.rpm">
          <filename>shadow-4.8.1-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.6.1" arch="x86_64" src="x86_64/shadow-4.8.1-150400.3.6.1.x86_64.rpm">
          <filename>shadow-4.8.1-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.6.1" arch="s390x" src="s390x/shadow-4.8.1-150400.3.6.1.s390x.rpm">
          <filename>shadow-4.8.1-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="shadow" epoch="0" version="4.8.1" release="150400.3.6.1" arch="aarch64" src="aarch64/shadow-4.8.1-150400.3.6.1.aarch64.rpm">
          <filename>shadow-4.8.1-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1104</id>
    <title>Recommended update for docker, containerd, rootlesskit, catatonit, slirp4netns, fuse-overlayfs</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712147425"/>
    <references/>
    <description>This update for docker fixes the following issues:

- Overlay files are world-writable (bsc#1220339)
- Allow disabling apparmor support (some products only support SELinux)

The other packages in the update (containerd, rootlesskit, catatonit, slirp4netns, fuse-overlayfs)
are no-change rebuilds required because the corresponding binary packages were missing in a number
of repositories, thus making docker not installable on some products.
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.5.2" arch="src" src="src/catatonit-0.1.7-150300.10.5.2.src.rpm">
          <filename>catatonit-0.1.7-150300.10.5.2.src.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.5.2" arch="x86_64" src="x86_64/catatonit-0.1.7-150300.10.5.2.x86_64.rpm">
          <filename>catatonit-0.1.7-150300.10.5.2.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="src" src="src/containerd-1.7.10-150000.108.1.src.rpm">
          <filename>containerd-1.7.10-150000.108.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="x86_64" src="x86_64/containerd-1.7.10-150000.108.1.x86_64.rpm">
          <filename>containerd-1.7.10-150000.108.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="src" src="src/docker-24.0.7_ce-150000.198.2.src.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="x86_64" src="x86_64/docker-24.0.7_ce-150000.198.2.x86_64.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.x86_64.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="src" src="src/fuse-overlayfs-1.1.2-150100.3.11.1.src.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.src.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="x86_64" src="x86_64/fuse-overlayfs-1.1.2-150100.3.11.1.x86_64.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.7.1" arch="src" src="src/slirp4netns-1.2.0-150300.8.7.1.src.rpm">
          <filename>slirp4netns-1.2.0-150300.8.7.1.src.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.7.1" arch="x86_64" src="x86_64/slirp4netns-1.2.0-150300.8.7.1.x86_64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.7.1.x86_64.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.5.2" arch="s390x" src="s390x/catatonit-0.1.7-150300.10.5.2.s390x.rpm">
          <filename>catatonit-0.1.7-150300.10.5.2.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="s390x" src="s390x/containerd-1.7.10-150000.108.1.s390x.rpm">
          <filename>containerd-1.7.10-150000.108.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="s390x" src="s390x/docker-24.0.7_ce-150000.198.2.s390x.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.s390x.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="s390x" src="s390x/fuse-overlayfs-1.1.2-150100.3.11.1.s390x.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.s390x.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.7.1" arch="s390x" src="s390x/slirp4netns-1.2.0-150300.8.7.1.s390x.rpm">
          <filename>slirp4netns-1.2.0-150300.8.7.1.s390x.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.1.7" release="150300.10.5.2" arch="aarch64" src="aarch64/catatonit-0.1.7-150300.10.5.2.aarch64.rpm">
          <filename>catatonit-0.1.7-150300.10.5.2.aarch64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.10" release="150000.108.1" arch="aarch64" src="aarch64/containerd-1.7.10-150000.108.1.aarch64.rpm">
          <filename>containerd-1.7.10-150000.108.1.aarch64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="24.0.7_ce" release="150000.198.2" arch="aarch64" src="aarch64/docker-24.0.7_ce-150000.198.2.aarch64.rpm">
          <filename>docker-24.0.7_ce-150000.198.2.aarch64.rpm</filename>
        </package>
        <package name="fuse-overlayfs" epoch="0" version="1.1.2" release="150100.3.11.1" arch="aarch64" src="aarch64/fuse-overlayfs-1.1.2-150100.3.11.1.aarch64.rpm">
          <filename>fuse-overlayfs-1.1.2-150100.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.7.1" arch="aarch64" src="aarch64/slirp4netns-1.2.0-150300.8.7.1.aarch64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-837</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710214576"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220361" id="1220361" title="SELinux is preventing agetty from using the checkpoint_restore capability" type="bugzilla"/>
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Fixed SELinux preventing agetty from using the checkpoint_restore capability (bsc#1220361)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230511+git16.5733e724" release="150400.4.30.1" arch="noarch" src="noarch/selinux-policy-20230511+git16.5733e724-150400.4.30.1.noarch.rpm">
          <filename>selinux-policy-20230511+git16.5733e724-150400.4.30.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230511+git16.5733e724" release="150400.4.30.1" arch="src" src="src/selinux-policy-20230511+git16.5733e724-150400.4.30.1.src.rpm">
          <filename>selinux-policy-20230511+git16.5733e724-150400.4.30.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230511+git16.5733e724" release="150400.4.30.1" arch="noarch" src="noarch/selinux-policy-devel-20230511+git16.5733e724-150400.4.30.1.noarch.rpm">
          <filename>selinux-policy-devel-20230511+git16.5733e724-150400.4.30.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230511+git16.5733e724" release="150400.4.30.1" arch="noarch" src="noarch/selinux-policy-targeted-20230511+git16.5733e724-150400.4.30.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230511+git16.5733e724-150400.4.30.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1397</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713871894"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209055" id="1209055" title="gcc12 packages missing from SUSE-PackageHub-15-SP5-Pool" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/MSC-766" id="MSC-766" title="Please add gcc12-d (and possibly gcc12-d-32bit) to Package Hub Subpackages SLE-15-SP5" type="jira"/>
    </references>
    <description>
This update for gcc12 fixes the following issues:

- gcc12 D language packages are shipped to PackageHub 15 SP5.
</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.3.0+git1204" release="150000.1.18.1" arch="src" src="src/gcc12-12.3.0+git1204-150000.1.18.1.src.rpm">
          <filename>gcc12-12.3.0+git1204-150000.1.18.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1091</id>
    <title>Recommended update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712053153"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7246" id="PED-7246" title="https://jira.suse.com/browse/PED-7246" type="jira"/>
    </references>
    <description>This update for rpm fixes the following issues:

- Turn on IMA/EVM file signature support, move the imaevm code that needs the
  libiamevm library into a plugin, and install this plugin as part of a new
  &quot;rpm-imaevmsign&quot; subpackage (jsc#PED-7246).

- Backport signature reserved space handling from upstream.
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="src" src="src/python-rpm-4.14.3-150400.59.10.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.10.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.10.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.10.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="src" src="src/rpm-4.14.3-150400.59.10.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.10.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.10.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.10.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.10.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.10.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.10.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.10.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.10.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.10.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.10.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.10.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.10.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.10.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.10.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1144</id>
    <title>Security update for buildah</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712568857"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" id="CVE-2024-1753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221677" id="1221677" title="VUL-0: CVE-2024-1753: buildah: full container escape at build time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220568" id="1220568" title="Missing cni-plugins in buildah" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219563" id="1219563" title="docker v.25.0 breaks API compatibility with skopeo/buildah [ref:_00D1igLOd._500Tr4rZDT:ref]" type="bugzilla"/>
    </references>
    <description>This update for buildah fixes the following issues:

- CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
- Update to version 1.34.1 for compatibility with Docker 25.0
  (which is not in SLES yet, but will eventually be) (bsc#1219563).
  See the corresponding release notes:
  * https://github.com/containers/buildah/releases/tag/v1.34.1
  * https://github.com/containers/buildah/releases/tag/v1.34.0
  * https://github.com/containers/buildah/releases/tag/v1.33.0
  * https://github.com/containers/buildah/releases/tag/v1.32.0
  * https://github.com/containers/buildah/releases/tag/v1.31.0
  * https://github.com/containers/buildah/releases/tag/v1.30.0

- Require cni-plugins (bsc#1220568)
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.18.1" arch="src" src="src/cni-0.7.1-150100.3.18.1.src.rpm">
          <filename>cni-0.7.1-150100.3.18.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.18.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.18.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.22.3" arch="src" src="src/cni-plugins-0.8.6-150100.3.22.3.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.22.3.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.22.3" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.22.3.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.22.3.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.18.1" arch="s390x" src="s390x/cni-0.7.1-150100.3.18.1.s390x.rpm">
          <filename>cni-0.7.1-150100.3.18.1.s390x.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.22.3" arch="s390x" src="s390x/cni-plugins-0.8.6-150100.3.22.3.s390x.rpm">
          <filename>cni-plugins-0.8.6-150100.3.22.3.s390x.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.18.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.18.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.22.3" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.22.3.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.22.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-877</id>
    <title>Security update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710345379"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" id="CVE-2023-42465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42465" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221151" id="1221151" title="L3: sudo stops working after upgrading to latest package sudo-1.8.27-4.45.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221134" id="1221134" title="sudo latest update broke NOPASSWORD" type="bugzilla"/>
    </references>
    <description>This update for sudo fixes the following issues:

- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.36.1" arch="src" src="src/sudo-1.9.9-150400.4.36.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.36.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.36.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.36.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.36.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.36.1" arch="s390x" src="s390x/sudo-1.9.9-150400.4.36.1.s390x.rpm">
          <filename>sudo-1.9.9-150400.4.36.1.s390x.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.36.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.36.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.36.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-869</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710323349"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221202" id="1221202" title="Update to cloud-netconfig-ec2 to support IMDS IPv6 endpoint has broken ability to communicate with IPv4 endpoint" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.12 (bsc#1221202)
  * If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.12" release="150000.25.20.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.12-150000.25.20.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.12-150000.25.20.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.12" release="150000.25.20.1" arch="src" src="src/cloud-netconfig-azure-1.12-150000.25.20.1.src.rpm">
          <filename>cloud-netconfig-azure-1.12-150000.25.20.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.12" release="150000.25.20.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.12-150000.25.20.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.12-150000.25.20.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.12" release="150000.25.20.1" arch="src" src="src/cloud-netconfig-ec2-1.12-150000.25.20.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.12-150000.25.20.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.12" release="150000.25.20.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.12-150000.25.20.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.12-150000.25.20.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.12" release="150000.25.20.1" arch="src" src="src/cloud-netconfig-gce-1.12-150000.25.20.1.src.rpm">
          <filename>cloud-netconfig-gce-1.12-150000.25.20.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-900</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710434840"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211515" id="1211515" title="Partner-L3: NVMe-oF TCP: mount mapped volumes over network latency is very slow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: EMBARGOED: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214064" id="1214064" title="Partner-L3: tasks are not progressing due to syscall on NVME stuck - SLES 15.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218195" id="1218195" title="VUL-0: CVE-2023-6817: kernel: use-after-free in nft_pipapo_walk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218216" id="1218216" title="VUL-0: CVE-2023-5197: kernel: use-after-free due to addition and removal of rules from chain bindings within the same transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218915" id="1218915" title="VUL-0: CVE-2024-0607: kernel: nf_tables: pointer math issue in nft_byteorder_eval()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219073" id="1219073" title="[mdadm] system crashed during md raid device attach/detach operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219127" id="1219127" title="VUL-0: CVE-2024-23849: kernel: in rds_recv_track_latency in net/rds/af_rds.c an off-by-one error results in out-of bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219146" id="1219146" title="VUL-0: CVE-2024-23851: kernel: copy_params in drivers/md/dm-ioctl.c can lead to crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219295" id="1219295" title="VUL-0: CVE-2023-52340: kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219633" id="1219633" title="L3: L3-Question: kernel workqueue and soft lockups for extended periods with NFS involved in backtraces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219653" id="1219653" title="Enable CONFIG_GDB_SCRIPTS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219827" id="1219827" title="VUL-0: CVE-2023-52429: kernel-source,kernel-source-azure,kernel-source-rt: potential DoS in dm_table_create in drivers/md/dm-table.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219835" id="1219835" title="VUL-0: CVE-2024-1151: kernel-source,kernel-source-azure,kernel-source-rt: kernel: stack overflow problem in Open vSwitch kernel module leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220009" id="1220009" title="VUL-1: CVE-2024-26593: kernel: i2c: i801: missing data buffer index reset could lead to a data leakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220140" id="1220140" title="VUL-0: CVE-2023-52439: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free in uio_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220187" id="1220187" title="VUL-0: CVE-2024-26585: kernel-source,kernel-source-azure,kernel-source-rt: tls: race condition between tx work scheduling and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220238" id="1220238" title="VUL-0: CVE-2023-52449: kernel: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220240" id="1220240" title="VUL-0: CVE-2023-52443: kernel-source,kernel-source-azure,kernel-source-rt: apparmor: crash when parsed profile name is empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220241" id="1220241" title="VUL-0: CVE-2023-52445: kernel-source,kernel-source-azure,kernel-source-rt: media: pvrusb2: fix use after free on context disconnection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220243" id="1220243" title="VUL-0: CVE-2024-26586: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: stack corruption via an excessive number of ACLs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220250" id="1220250" title="VUL-0: CVE-2023-52451: kernel-source,kernel-source-azure,kernel-source-rt: powerpc/pseries/memhp: out of bounds read when doing a memory hotplug remove of an invalid address" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220253" id="1220253" title="VUL-0: CVE-2023-52448: kernel-source,kernel-source-azure,kernel-source-rt: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220254" id="1220254" title="VUL-0: CVE-2024-26591: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix re-attachment branch in bpf_tracing_prog_attach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220255" id="1220255" title="VUL-0: CVE-2024-26589: kernel-source,kernel-source-azure,kernel-source-rt: bpf: out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220257" id="1220257" title="VUL-0: CVE-2023-52452: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Fix accesses to uninit stack slots" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220326" id="1220326" title="VUL-0: CVE-2024-26598: kernel-source,kernel-source-azure,kernel-source-rt: kvm: Avoid potential UAF in LPI translation cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220330" id="1220330" title="VUL-0: CVE-2023-52464: kernel: EDAC/thunderx: Fix possible out-of-bounds string access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220335" id="1220335" title="VUL-0: CVE-2024-26603: kernel: x86/fpu: user-defined xsave buffer size can lead to infinite loop via #PF handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220344" id="1220344" title="VUL-0: CVE-2024-26595: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: NULL pointer dereference in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220350" id="1220350" title="VUL-0: CVE-2023-52457: kernel-source,kernel-source-azure,kernel-source-rt: serial 8250 omap don't skip resource freeing if pm_runtime_resume_and_get() failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220364" id="1220364" title="VUL-0: CVE-2023-52456: kernel-source,kernel-source-azure,kernel-source-rt: imx: fix tx statemachine deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220409" id="1220409" title="VUL-0: CVE-2019-25162: kernel-source,kernel-source-azure,kernel-source-rt: i2c: Fix a potential use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220433" id="1220433" title="VUL-0: CVE-2023-52467: kernel: mfd: syscon: potential NULL pointer dereference in of_syscon_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220444" id="1220444" title="VUL-0: CVE-2021-46932: kernel-source,kernel-source-azure,kernel-source-rt: input: appletouch: missing work initialization before device registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220457" id="1220457" title="VUL-0: CVE-2021-46923: kernel-source,kernel-source-azure,kernel-source-rt: fs/mount_setattr: always cleanup mount_kattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220459" id="1220459" title="VUL-0: CVE-2021-46924: kernel-source,kernel-source-azure,kernel-source-rt: NFC: st21nfca: fix memory leak in device probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220469" id="1220469" title="VUL-0: CVE-2021-46934: kernel-source,kernel-source-azure,kernel-source-rt: i2c: wrong user data may cause warning in i2c_transfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220649" id="1220649" title="VUL-0: CVE-2023-52475: kernel: Input: powermate: fix use-after-free in powermate_config_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220735" id="1220735" title="VUL-0: CVE-2023-52482: kernel: x86/srso: speculative return stack overflow in Hygon processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220736" id="1220736" title="VUL-0: CVE-2024-26607: kernel: drm/bridge: sii902x: probing race condition leads to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220796" id="1220796" title="VUL-0: CVE-2023-52478: kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220797" id="1220797" title="VUL-0: CVE-2023-52484: kernel: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220825" id="1220825" title="VUL-0: CVE-2024-26622: kernel: tomoyo: use after free in in tomoyo_write_control()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220845" id="1220845" title="VUL-0: CVE-2022-48627: kernel: vt: fix memory overlapping when deleting chars in the buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220917" id="1220917" title="VUL-0: CVE-2021-47083: kernel: pinctrl: mediatek: fix global-out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220930" id="1220930" title="VUL-0: CVE-2023-52530: kernel: wifi: mac80211: fix potential key use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220931" id="1220931" title="VUL-0: CVE-2023-52531: kernel: wifi: iwlwifi: mvm: Fix a memory corruption issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220933" id="1220933" title="VUL-0: CVE-2023-52559: kernel: iommu/vt-d: Avoid memory allocation in iommu_suspend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" id="CVE-2023-52559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" id="CVE-2021-46934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" id="CVE-2023-52530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" id="CVE-2023-52531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" id="CVE-2021-47083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" id="CVE-2024-26607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" id="CVE-2022-48627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" id="CVE-2023-52482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" id="CVE-2023-52467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" id="CVE-2024-26591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" id="CVE-2024-26589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" id="CVE-2023-52484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" id="CVE-2024-26585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" id="CVE-2023-52340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" id="CVE-2024-0607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" id="CVE-2023-6817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" id="CVE-2024-26622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" id="CVE-2023-52452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" id="CVE-2023-52457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" id="CVE-2023-52456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" id="CVE-2023-52451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" id="CVE-2021-46932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" id="CVE-2019-25162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" id="CVE-2023-52449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" id="CVE-2021-46923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" id="CVE-2023-52478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" id="CVE-2023-52475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" id="CVE-2024-26598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" id="CVE-2024-26603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" id="CVE-2021-46924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" id="CVE-2023-52445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" id="CVE-2023-52439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" id="CVE-2023-52443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" id="CVE-2024-26593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" id="CVE-2024-26586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" id="CVE-2024-26595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" id="CVE-2023-52464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" id="CVE-2023-52448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" id="CVE-2024-1151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" id="CVE-2023-5197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" id="CVE-2024-23849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" id="CVE-2023-52429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" id="CVE-2024-23851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
- CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close  (bsc#1220187).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
- CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
- CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
- CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
- CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
- CVE-2023-52443: Fixed crash when parsed profile name is empty  (bsc#1220240).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
- CVE-2024-26586: Fixed stack corruption (bsc#1220243).
- CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
- CVE-2024-1151: Fixed unlimited number of recursions from action  sets (bsc#1219835).
- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
- CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv  (bsc#1219127).
- CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).

The following non-security bugs were fixed:

- bpf: Fix verification of indirect var-off stack access (git-fixes).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes).
- KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes).
- NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633).
- nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
- nvme: remove nvme_alloc_request and nvme_alloc_request_qid (bsc#1214064).
- nvme: start keep-alive after admin queue setup (bsc#1211515).
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (git-fixes).
- x86/bugs: Add asm helpers for executing VERW (git-fixes). 
- x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (git-fixes).
- x86/entry_32: Add VERW just before userspace transition (git-fixes).
- x86/entry_64: Add VERW just before userspace transition (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.111.2" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.111.2.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.111.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.111.2" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.111.2.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.111.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.111.2.150400.24.52.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.111.2.150400.24.52.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.111.2.150400.24.52.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.111.2.150400.24.52.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.111.2.150400.24.52.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.111.2.150400.24.52.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.111.2" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.111.2.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.111.2.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.111.2" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.111.2.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.111.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.111.2.150400.24.52.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.111.2.150400.24.52.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.111.2.150400.24.52.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1076</id>
    <title>Recommended update for Libreoffice</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711961504"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-7496" id="PED-7496" title="https://jira.suse.com/browse/PED-7496" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-8096" id="PED-8096" title="https://jira.suse.com/browse/PED-8096" type="jira"/>
    </references>
    <description>This update for Libreoffice fixes the following issue:

libreoffice was updated from version 7.6.2.1 to 24.2.1.2 (jsc#PED-7496, jsc#PED-8096):

- Highlights of changes up to version 24.2.1.2 are listed in the following release notes:

    * https://wiki.documentfoundation.org/ReleaseNotes/24.2
    * https://wiki.documentfoundation.org/Releases/24.2.1/RC2
    * https://wiki.documentfoundation.org/Releases/24.2.1/RC1
    * https://wiki.documentfoundation.org/Releases/7.6.4/RC1
    * https://wiki.documentfoundation.org/Releases/7.6.3/RC2
    * https://wiki.documentfoundation.org/Releases/7.6.3/RC1
    * https://wiki.documentfoundation.org/Releases/7.6.2/RC2

- Update bundled dependencies:

    * curl version update from 8.2.1 to 8.6.0
    * gpgme version update from 1.18.0 to 1.20.0
    * harfbuzz version update from 8.0.0 to 8.2.2
    * libcmis version update from 0.5.2 to 0.6.1
    * libgpg-error version update from 1.43 to 1.47
    * pdfium version update from 5778 to 6179
    * poppler version update from 23.06.0 to 23.09.0
    * skia version from m111-a31e897fb3dcbc96b2b40999751611d029bf5404 to m116-2ddcf183eb260f63698aa74d1bb380f247ad7ccd   

- New bundled dependencies:

    * Java-WebSocket-1.5.4.tar.gz
    * fontconfig-2.14.2.tar.xz
    * freetype-2.13.0.tar.xz
    * phc-winner-argon2-20190702.tar.gz
    * tiff-4.6.0.tar.xz

- New required dependencies:

  * zxcvbn

- Build Libreoffice using OpenSSL instead of NSS, since the bundled curl does
  not support the NSS backend any more

abseil-cpp was updated from version 20230802.1 to 20240116.1:

  * Added absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Added configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Changes:
  
    + AbslHashValue() no longer accepts C-style arrays as a parameter, caller need to wrap C-string literals in
      absl::string_view.
    + absl::weak_equality and absl::strong_equality have been removed. The corresponding std types were removed
      before C++20 was finalized

libixion was updated from version 0.18.1 to 0.19.0:

- C++ API:
  
  * Added support for renaming sheets after they have been created.
- Formula interpreter:
  
  * Added support for inline arrays.

liborcus was updated from version 0.18.1 to 0.19.2:

- Changes in version 0.19.2:

  * Fixed a build issue with gcc 14 due to a missing include for std::find_if
    and std::for_each.
  * Fixed a segmentation fault with the orcus-test-xml-mapped test which
    manifested on hppa hardware, as originally reported on
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054376.
  * Fixed a crash when loading a document that includes a style record
    referencing an unnamed style record as its parent.  In Excel-generated
    documents, styles only reference named styles as their parents.  But in
    3rd-party generated documents, styles referencing unnamed styles as their
    parents can occur.
  * Fixed a crash when the document model returned a null pointer when a
    reference resolver interface was requested.

- Changes in version 0.19.1:

  * Implemented orcus::create_filter() which instantiates a filter object of
    specified type.  The returned object is of type
    orcus::iface::import_filter.
  * Moved test cases for format detection to the respective filter test files.
  * Fixed a bug where the import filter did not set the formula grammer prior
    to importing.

- Changes in version 0.19.0:

  * Added support for allowing use of std::filesystem,
    std::experimental::filesystem or boost::filesystem per build
    configuration.
  * Refactored styles import to use style indices returned by the document
    model implementer rather than using the indices stored in the file.  This
    allows the implementer to aggregate some style records and re-use the same
    index for records that are stored as different records in the original
    file.
  * Fixed a bug where column styles were not applied to the correct columns
    when the starting column index was not 0.
  * Overhauled the Gnumeric import filter to fix many bugs and support many
    missing features relative to the other filters included in orcus.  Most
    notable mentions are:

    + cell styles
    + rich-text strings
    + named ranges
    + row heights and column widths
    + merged cells

  * Added partial support for Apache Parquet import filter. This is still
    heavily experimental.

zxcvbn:

- New RPM package zxcvbn implementation needed as dependency for Libreoffice

</description>
    <pkglist>
      <collection>
        <package name="abseil-cpp" epoch="0" version="20240116.1" release="150500.13.3.5" arch="src" src="src/abseil-cpp-20240116.1-150500.13.3.5.src.rpm">
          <filename>abseil-cpp-20240116.1-150500.13.3.5.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1139</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712568704"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221323" id="1221323" title="VUL-0: CVE-2023-28746: ucode-intel: 20240312 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43490" id="CVE-2023-43490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38575" id="CVE-2023-38575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22655" id="CVE-2023-22655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39368" id="CVE-2023-39368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39368" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
- CVE-2023-39368: Protection mechanism failure of bus lock regulator
  for some Intel Processors may allow an unauthenticated user to
  potentially enable denial of service via network access
- CVE-2023-38575: Non-transparent sharing of return predictor targets
  between contexts in some Intel Processors may allow an authorized
  user to potentially enable information disclosure via local access.
- CVE-2023-28746: Information exposure through microarchitectural
  state after transient execution from some register files for some
  Intel Atom Processors may allow an authenticated user to potentially
  enable information disclosure via local access.
- CVE-2023-22655 Protection mechanism failure in some 3rd and 4th
  Generation Intel Xeon Processors when using Intel SGX or Intel TDX
  may allow a privileged user to potentially enable escalation of
  privilege via local access.
- CVE-2023-43490: Incorrect calculation in microcode keying mechanism
  for some Intel Xeon D Processors with Intel® SGX may allow a
  privileged user to potentially enable information disclosure via
  local access.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240312" release="150200.38.1" arch="src" src="src/ucode-intel-20240312-150200.38.1.src.rpm">
          <filename>ucode-intel-20240312-150200.38.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20240312" release="150200.38.1" arch="x86_64" src="x86_64/ucode-intel-20240312-150200.38.1.x86_64.rpm">
          <filename>ucode-intel-20240312-150200.38.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-942</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1710922502"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220679" id="1220679" title="System not registered after rollback from 6.0" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Allow &quot;--rollback&quot; flag to run on readonly filesystem (bsc#1220679)
- Update to version 1.7.0
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150400.3.28.1" arch="src" src="src/suseconnect-ng-1.8.0-150400.3.28.1.src.rpm">
          <filename>suseconnect-ng-1.8.0-150400.3.28.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150400.3.28.1" arch="x86_64" src="x86_64/suseconnect-ng-1.8.0-150400.3.28.1.x86_64.rpm">
          <filename>suseconnect-ng-1.8.0-150400.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150400.3.28.1" arch="s390x" src="s390x/suseconnect-ng-1.8.0-150400.3.28.1.s390x.rpm">
          <filename>suseconnect-ng-1.8.0-150400.3.28.1.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.8.0" release="150400.3.28.1" arch="aarch64" src="aarch64/suseconnect-ng-1.8.0-150400.3.28.1.aarch64.rpm">
          <filename>suseconnect-ng-1.8.0-150400.3.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-973</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711103015"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" id="CVE-2023-38288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38288" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41175" id="CVE-2023-41175" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41175" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40745" id="CVE-2023-40745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40745" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214686" id="1214686" title="VUL-0: CVE-2023-41175: tiff: potential integer overflow in raw2tiff.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213590" id="1213590" title="VUL-0: CVE-2023-38288: tiff: potential integer overflow in raw2tiff.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214687" id="1214687" title="VUL-0: CVE-2023-40745: tiff: integer overflow in tiffcp.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221187" id="1221187" title="CVE-L3: [EAR - NOT FOR USA Citizens] PTF request for tiff and CVE-2023-40745, CVE-2023-41175 for SLES 11 SP3 Extended Reactive LTSS - DT" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).
- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).
- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.41.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.41.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.41.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.41.1" arch="src" src="src/tiff-4.0.9-150000.45.41.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.41.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.41.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.41.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.41.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.41.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.41.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.41.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2022</id>
    <title>Recommended update for chrony</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718288027"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213551" id="1213551" title="Customer request for chrony TEST packages including specific upstream fixes" type="bugzilla"/>
    </references>
    <description>This update for chrony fixes the following issues:

- Use shorter NTS-KE retry interval when network is down (bsc#1213551)
- Use make quickcheck instead of make check to avoid more than 1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable
</description>
    <pkglist>
      <collection>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="src" src="src/chrony-4.1-150400.21.5.7.src.rpm">
          <filename>chrony-4.1-150400.21.5.7.src.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="x86_64" src="x86_64/chrony-4.1-150400.21.5.7.x86_64.rpm">
          <filename>chrony-4.1-150400.21.5.7.x86_64.rpm</filename>
        </package>
        <package name="chrony-pool-suse" epoch="0" version="4.1" release="150400.21.5.7" arch="noarch" src="noarch/chrony-pool-suse-4.1-150400.21.5.7.noarch.rpm">
          <filename>chrony-pool-suse-4.1-150400.21.5.7.noarch.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="s390x" src="s390x/chrony-4.1-150400.21.5.7.s390x.rpm">
          <filename>chrony-4.1-150400.21.5.7.s390x.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.1" release="150400.21.5.7" arch="aarch64" src="aarch64/chrony-4.1-150400.21.5.7.aarch64.rpm">
          <filename>chrony-4.1-150400.21.5.7.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1015</id>
    <title>Recommended update for sed</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711602509"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221218" id="1221218" title="sed: couldn't close ./sed43pg2F: Permission denied" type="bugzilla"/>
    </references>
    <description>This update for sed fixes the following issues:

- &quot;sed -i&quot; now creates temporary files with correct umask (bsc#1221218)
</description>
    <pkglist>
      <collection>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="src" src="src/sed-4.4-150300.13.3.1.src.rpm">
          <filename>sed-4.4-150300.13.3.1.src.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="x86_64" src="x86_64/sed-4.4-150300.13.3.1.x86_64.rpm">
          <filename>sed-4.4-150300.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="s390x" src="s390x/sed-4.4-150300.13.3.1.s390x.rpm">
          <filename>sed-4.4-150300.13.3.1.s390x.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.4" release="150300.13.3.1" arch="aarch64" src="aarch64/sed-4.4-150300.13.3.1.aarch64.rpm">
          <filename>sed-4.4-150300.13.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1487</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714639459"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221407" id="1221407" title="L3: home and end button not working from ssh client (Putty)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222547" id="1222547" title="L3-Question: Update of aaa_base not possible if /usr/sbin/userdel.local exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211721" id="1211721" title="[s390x] kernel: sched_min_granularity_ns sysctl moved to debugfs in kernel 5.13" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221361" id="1221361" title="/etc/profile.d/alljava.csh sets JAVA_HOME incorrectly" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile
- drop the stderr redirection for csh (bsc#1221361)
- drop sysctl.d/50-default-s390.conf (bsc#1211721)
- make sure the script does not exit with 1 if a file with content is found (bsc#1222547)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.17.3" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.17.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1010</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711552072"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221470" id="1221470" title="update-bootloader and pbl --install don't report install failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218842" id="1218842" title="perl-bootloader: /usr/share/grub2/arm64-efi/grub.efi': No such file or directory" type="bugzilla"/>
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- Log grub2-install errors correctly (bsc#1221470)
- Update to version 0.947
- Support old grub versions that used /usr/lib (bsc#1218842)
- Create EFI boot fallback directory if necessary
</description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="src" src="src/perl-Bootloader-0.947-150400.3.12.1.src.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="x86_64" src="x86_64/perl-Bootloader-0.947-150400.3.12.1.x86_64.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="s390x" src="s390x/perl-Bootloader-0.947-150400.3.12.1.s390x.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.s390x.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="0.947" release="150400.3.12.1" arch="aarch64" src="aarch64/perl-Bootloader-0.947-150400.3.12.1.aarch64.rpm">
          <filename>perl-Bootloader-0.947-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-977</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711118024"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211515" id="1211515" title="Partner-L3: NVMe-oF TCP: mount mapped volumes over network latency is very slow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214064" id="1214064" title="Partner-L3: tasks are not progressing due to syscall on NVME stuck - SLES 15.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218195" id="1218195" title="VUL-0: CVE-2023-6817: kernel: use-after-free in nft_pipapo_walk" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218216" id="1218216" title="VUL-0: CVE-2023-5197: kernel: use-after-free due to addition and removal of rules from chain bindings within the same transaction" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218915" id="1218915" title="VUL-0: CVE-2024-0607: kernel: nf_tables: pointer math issue in nft_byteorder_eval()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219073" id="1219073" title="[mdadm] system crashed during md raid device attach/detach operations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219127" id="1219127" title="VUL-0: CVE-2024-23849: kernel: in rds_recv_track_latency in net/rds/af_rds.c an off-by-one error results in out-of bounds access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219146" id="1219146" title="VUL-0: CVE-2024-23851: kernel: copy_params in drivers/md/dm-ioctl.c can lead to crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219295" id="1219295" title="VUL-0: CVE-2023-52340: kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219633" id="1219633" title="L3: L3-Question: kernel workqueue and soft lockups for extended periods with NFS involved in backtraces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219653" id="1219653" title="Enable CONFIG_GDB_SCRIPTS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219827" id="1219827" title="VUL-0: CVE-2023-52429: kernel-source,kernel-source-azure,kernel-source-rt: potential DoS in dm_table_create in drivers/md/dm-table.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219835" id="1219835" title="VUL-0: CVE-2024-1151: kernel-source,kernel-source-azure,kernel-source-rt: kernel: stack overflow problem in Open vSwitch kernel module leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220009" id="1220009" title="VUL-1: CVE-2024-26593: kernel: i2c: i801: missing data buffer index reset could lead to a data leakage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220140" id="1220140" title="VUL-0: CVE-2023-52439: kernel-source,kernel-source-azure,kernel-source-rt: use-after-free in uio_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220187" id="1220187" title="VUL-0: CVE-2024-26585: kernel-source,kernel-source-azure,kernel-source-rt: tls: race condition between tx work scheduling and socket close" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220238" id="1220238" title="VUL-0: CVE-2023-52449: kernel: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220240" id="1220240" title="VUL-0: CVE-2023-52443: kernel-source,kernel-source-azure,kernel-source-rt: apparmor: crash when parsed profile name is empty" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220241" id="1220241" title="VUL-0: CVE-2023-52445: kernel-source,kernel-source-azure,kernel-source-rt: media: pvrusb2: fix use after free on context disconnection" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220243" id="1220243" title="VUL-0: CVE-2024-26586: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: stack corruption via an excessive number of ACLs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220250" id="1220250" title="VUL-0: CVE-2023-52451: kernel-source,kernel-source-azure,kernel-source-rt: powerpc/pseries/memhp: out of bounds read when doing a memory hotplug remove of an invalid address" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220253" id="1220253" title="VUL-0: CVE-2023-52448: kernel-source,kernel-source-azure,kernel-source-rt: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220254" id="1220254" title="VUL-0: CVE-2024-26591: kernel-source,kernel-source-azure,kernel-source-rt: bpf: fix re-attachment branch in bpf_tracing_prog_attach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220255" id="1220255" title="VUL-0: CVE-2024-26589: kernel-source,kernel-source-azure,kernel-source-rt: bpf: out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220257" id="1220257" title="VUL-0: CVE-2023-52452: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Fix accesses to uninit stack slots" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220326" id="1220326" title="VUL-0: CVE-2024-26598: kernel-source,kernel-source-azure,kernel-source-rt: kvm: Avoid potential UAF in LPI translation cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220330" id="1220330" title="VUL-0: CVE-2023-52464: kernel: EDAC/thunderx: Fix possible out-of-bounds string access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220335" id="1220335" title="VUL-0: CVE-2024-26603: kernel: x86/fpu: user-defined xsave buffer size can lead to infinite loop via #PF handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220344" id="1220344" title="VUL-0: CVE-2024-26595: kernel-source,kernel-source-azure,kernel-source-rt: mlxsw: spectrum_acl_tcam: NULL pointer dereference in error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220350" id="1220350" title="VUL-0: CVE-2023-52457: kernel-source,kernel-source-azure,kernel-source-rt: serial 8250 omap don't skip resource freeing if pm_runtime_resume_and_get() failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220364" id="1220364" title="VUL-0: CVE-2023-52456: kernel-source,kernel-source-azure,kernel-source-rt: imx: fix tx statemachine deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220398" id="1220398" title="VUL-0: CVE-2024-26602: kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220409" id="1220409" title="VUL-0: CVE-2019-25162: kernel-source,kernel-source-azure,kernel-source-rt: i2c: Fix a potential use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220433" id="1220433" title="VUL-0: CVE-2023-52467: kernel: mfd: syscon: potential NULL pointer dereference in of_syscon_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220444" id="1220444" title="VUL-0: CVE-2021-46932: kernel-source,kernel-source-azure,kernel-source-rt: input: appletouch: missing work initialization before device registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220457" id="1220457" title="VUL-0: CVE-2021-46923: kernel-source,kernel-source-azure,kernel-source-rt: fs/mount_setattr: always cleanup mount_kattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220459" id="1220459" title="VUL-0: CVE-2021-46924: kernel-source,kernel-source-azure,kernel-source-rt: NFC: st21nfca: fix memory leak in device probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220469" id="1220469" title="VUL-0: CVE-2021-46934: kernel-source,kernel-source-azure,kernel-source-rt: i2c: wrong user data may cause warning in i2c_transfer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220649" id="1220649" title="VUL-0: CVE-2023-52475: kernel: Input: powermate: fix use-after-free in powermate_config_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220735" id="1220735" title="VUL-0: CVE-2023-52482: kernel: x86/srso: speculative return stack overflow in Hygon processors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220736" id="1220736" title="VUL-0: CVE-2024-26607: kernel: drm/bridge: sii902x: probing race condition leads to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220796" id="1220796" title="VUL-0: CVE-2023-52478: kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220797" id="1220797" title="VUL-0: CVE-2023-52484: kernel: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220825" id="1220825" title="VUL-0: CVE-2024-26622: kernel: tomoyo: use after free in in tomoyo_write_control()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220845" id="1220845" title="VUL-0: CVE-2022-48627: kernel: vt: fix memory overlapping when deleting chars in the buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220917" id="1220917" title="VUL-0: CVE-2021-47083: kernel: pinctrl: mediatek: fix global-out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220930" id="1220930" title="VUL-0: CVE-2023-52530: kernel: wifi: mac80211: fix potential key use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220931" id="1220931" title="VUL-0: CVE-2023-52531: kernel: wifi: iwlwifi: mvm: Fix a memory corruption issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220933" id="1220933" title="VUL-0: CVE-2023-52559: kernel: iommu/vt-d: Avoid memory allocation in iommu_suspend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" id="CVE-2023-52463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" id="CVE-2023-52559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" id="CVE-2021-46934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" id="CVE-2023-52530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52530" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" id="CVE-2023-52531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" id="CVE-2021-47083" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47083" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" id="CVE-2024-26607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" id="CVE-2022-48627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" id="CVE-2023-52482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" id="CVE-2023-52467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" id="CVE-2024-26591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" id="CVE-2024-26589" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26589" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" id="CVE-2023-52484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" id="CVE-2024-26585" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26585" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" id="CVE-2023-52340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52340" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" id="CVE-2024-0607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" id="CVE-2023-6817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" id="CVE-2024-26622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26622" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" id="CVE-2023-52452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" id="CVE-2023-52457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" id="CVE-2023-52456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" id="CVE-2023-52451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" id="CVE-2021-46932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46932" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" id="CVE-2019-25162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25162" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" id="CVE-2023-52449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" id="CVE-2021-46923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" id="CVE-2023-52478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" id="CVE-2023-52475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" id="CVE-2024-26598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" id="CVE-2024-26603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26603" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" id="CVE-2021-46924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46924" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" id="CVE-2023-52445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" id="CVE-2023-52439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" id="CVE-2023-52443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" id="CVE-2024-26602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" id="CVE-2024-26593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26593" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" id="CVE-2024-26586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26586" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" id="CVE-2024-26595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" id="CVE-2023-52464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" id="CVE-2023-52448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" id="CVE-2024-1151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1151" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" id="CVE-2023-5197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" id="CVE-2024-23849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" id="CVE-2023-52429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" id="CVE-2024-23851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23851" type="cve"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
- CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
- CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
- CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
- CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
- CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
- CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
- CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
- CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
- CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
- CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
- CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
- CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
- CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
- CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
- CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2024-26586: Fixed stack corruption (bsc#1220243).
- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
- CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
- CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
- CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).

The following non-security bugs were fixed:

- bpf: fix verification of indirect var-off stack access (git-fixes).
- bpf: guard stack limits against 32bit overflow (git-fixes).
- drop 2 git-fixes patches which are suspicious to introduce regression reported in bsc#1219073
- fix unresolved hunks in readme.branch
- kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes).
- kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git-fixes).
- nfs: avoid infinite loop in pnfs_update_layout (bsc#1219633).
- nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
- nvme: remove nvme_alloc_request and nvme_alloc_request_qid (bsc#1214064).
- nvme: start keep-alive after admin queue setup (bsc#1211515).
- readme.branch: use correct mail for roy
- rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created.
- x86/asm: add _asm_rip() macro for x86-64 (%rip) suffix (git-fixes).
- x86/bugs: add asm helpers for executing verw (git-fixes).
- x86/bugs: use alternative() instead of mds_user_clear static key (git-fixes). also add the removed mds_user_clear symbol to kabi severities as it is exposed just for kvm module and is generally a core kernel component so removing it is low risk.
- x86/entry_32: add verw just before userspace transition (git-fixes).
- x86/entry_64: Add VERW just before userspace transition (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.71.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.71.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.71.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.71.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.71.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.71.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-984</id>
    <title>Recommended update for runc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711379109"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192051" id="1192051" title="docker and podman block faccessat2 syscall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221050" id="1221050" title="runc: runtime/cgo: pthread_create failed: Operation not permitted in bci-base 15.6" type="bugzilla"/>
    </references>
    <description>This update for runc fixes the following issues:

- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050

  This allows running 15 SP6 containers on older distributions.
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="src" src="src/runc-1.1.12-150000.64.1.src.rpm">
          <filename>runc-1.1.12-150000.64.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="x86_64" src="x86_64/runc-1.1.12-150000.64.1.x86_64.rpm">
          <filename>runc-1.1.12-150000.64.1.x86_64.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="s390x" src="s390x/runc-1.1.12-150000.64.1.s390x.rpm">
          <filename>runc-1.1.12-150000.64.1.s390x.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.12" release="150000.64.1" arch="aarch64" src="aarch64/runc-1.1.12-150000.64.1.aarch64.rpm">
          <filename>runc-1.1.12-150000.64.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-985</id>
    <title>Recommended update for python-kiwi</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711386680"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221469" id="1221469" title="grub2-zipl-setup fails on non-CDL s390x images due to config left by kiwi" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218095" id="1218095" title="[Beta1][SelfInstall ISO] installation grub can't show up in serial console and reports `gfxterm is not found`" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Make sure temporary modifications to the zipl template and configuration file
  are not effective in the later system (bsc#1221469)
  
- Differentiate between output and input console settings for grub terminal setup,
  and run sanity checks on the provided values (bsc#1218095)
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.71.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.71.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.71.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.71.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.71.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.71.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.71.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.71.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.71.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.71.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.71.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.71.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.71.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.71.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.71.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.71.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.71.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.71.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.71.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.71.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1100</id>
    <title>Security update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712146156"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2494" id="CVE-2024-2494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2494" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221749" id="1221749" title="L3: libvirtd memory leak on SLE 15 SP4  [ ref:_00D1igLOd._500Tr7NdmE:ref ]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221815" id="1221815" title="VUL-0: CVE-2024-2494: libvirt: negative g_new0 length can lead to unbounded memory allocation" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential DoS. (bsc#1221815)

The following non-security bug was fixed:

-  Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() (bsc#1221749).
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="8.0.0" release="150400.7.11.2" arch="src" src="src/libvirt-8.0.0-150400.7.11.2.src.rpm">
          <filename>libvirt-8.0.0-150400.7.11.2.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-client-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-client-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-daemon-qemu-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.11.2" arch="x86_64" src="x86_64/libvirt-libs-8.0.0-150400.7.11.2.x86_64.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.11.2.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-client-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-client-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-interface-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-network-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-nodedev-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-qemu-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-secret-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-core-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-daemon-qemu-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.11.2" arch="s390x" src="s390x/libvirt-libs-8.0.0-150400.7.11.2.s390x.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.11.2.s390x.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-client-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-client-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-interface-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-network-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-nodedev-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-nwfilter-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-qemu-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-secret-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-core-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-disk-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-logical-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-daemon-qemu-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-daemon-qemu-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="8.0.0" release="150400.7.11.2" arch="aarch64" src="aarch64/libvirt-libs-8.0.0-150400.7.11.2.aarch64.rpm">
          <filename>libvirt-libs-8.0.0-150400.7.11.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1006</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711532926"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461" id="CVE-2024-26461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458" id="CVE-2024-26458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220771" id="1220771" title="VUL-0: CVE-2024-26461: krb5: memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220770" id="1220770" title="VUL-0: CVE-2024-26458: krb5: memory leak at /krb5/src/lib/rpc/pmap_rmt.c" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770).
- CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.9.1" arch="src" src="src/krb5-1.19.2-150400.3.9.1.src.rpm">
          <filename>krb5-1.19.2-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.9.1" arch="x86_64" src="x86_64/krb5-1.19.2-150400.3.9.1.x86_64.rpm">
          <filename>krb5-1.19.2-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.9.1" arch="s390x" src="s390x/krb5-1.19.2-150400.3.9.1.s390x.rpm">
          <filename>krb5-1.19.2-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.9.1" arch="aarch64" src="aarch64/krb5-1.19.2-150400.3.9.1.aarch64.rpm">
          <filename>krb5-1.19.2-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1128</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712552865"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221358" id="1221358" title="15SP6: nvme-tcp: failed to read NBFT table, is &quot;nvme show-nbft&quot; supported?" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221194" id="1221194" title="save_y2logs (YaST logs, Wicked logs) reveal the wifi password" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220996" id="1220996" title="Regression in launch time for latest SLES 15 SP 5 AMI" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Fix fallback-lease drop in addrconf (bsc#1220996)
- Use upstream `nvme nbft show` (bsc#1221358)
- Hide secrets in debug log (bsc#1221194)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.16.1" arch="src" src="src/wicked-0.6.74-150400.3.16.1.src.rpm">
          <filename>wicked-0.6.74-150400.3.16.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.16.1" arch="x86_64" src="x86_64/wicked-0.6.74-150400.3.16.1.x86_64.rpm">
          <filename>wicked-0.6.74-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.16.1" arch="x86_64" src="x86_64/wicked-service-0.6.74-150400.3.16.1.x86_64.rpm">
          <filename>wicked-service-0.6.74-150400.3.16.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.16.1" arch="s390x" src="s390x/wicked-0.6.74-150400.3.16.1.s390x.rpm">
          <filename>wicked-0.6.74-150400.3.16.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.16.1" arch="s390x" src="s390x/wicked-service-0.6.74-150400.3.16.1.s390x.rpm">
          <filename>wicked-service-0.6.74-150400.3.16.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.16.1" arch="aarch64" src="aarch64/wicked-0.6.74-150400.3.16.1.aarch64.rpm">
          <filename>wicked-0.6.74-150400.3.16.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.16.1" arch="aarch64" src="aarch64/wicked-service-0.6.74-150400.3.16.1.aarch64.rpm">
          <filename>wicked-service-0.6.74-150400.3.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1058</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711633848"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" id="CVE-2024-1753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221677" id="1221677" title="VUL-0: CVE-2024-1753: buildah: full container escape at build time" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2024-1753: Fixed full container escape at build time (bsc#1221677).
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.22.1" arch="src" src="src/podman-4.4.4-150400.4.22.1.src.rpm">
          <filename>podman-4.4.4-150400.4.22.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.22.1" arch="x86_64" src="x86_64/podman-4.4.4-150400.4.22.1.x86_64.rpm">
          <filename>podman-4.4.4-150400.4.22.1.x86_64.rpm</filename>
        </package>
        <package name="podman-cni-config" epoch="0" version="4.4.4" release="150400.4.22.1" arch="noarch" src="noarch/podman-cni-config-4.4.4-150400.4.22.1.noarch.rpm">
          <filename>podman-cni-config-4.4.4-150400.4.22.1.noarch.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.22.1" arch="s390x" src="s390x/podman-4.4.4-150400.4.22.1.s390x.rpm">
          <filename>podman-4.4.4-150400.4.22.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.4.4" release="150400.4.22.1" arch="aarch64" src="aarch64/podman-4.4.4-150400.4.22.1.aarch64.rpm">
          <filename>podman-4.4.4-150400.4.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1085</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712049871"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221757" id="1221757" title="L3: cloud-netconfig[15927]: Cannot access instance metadata, skipping interface configuration for eth0" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.14" release="150000.25.23.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.14-150000.25.23.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.14-150000.25.23.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.14" release="150000.25.23.1" arch="src" src="src/cloud-netconfig-azure-1.14-150000.25.23.1.src.rpm">
          <filename>cloud-netconfig-azure-1.14-150000.25.23.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.14" release="150000.25.23.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.14-150000.25.23.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.14-150000.25.23.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.14" release="150000.25.23.1" arch="src" src="src/cloud-netconfig-ec2-1.14-150000.25.23.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.14-150000.25.23.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.14" release="150000.25.23.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.14-150000.25.23.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.14-150000.25.23.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.14" release="150000.25.23.1" arch="src" src="src/cloud-netconfig-gce-1.14-150000.25.23.1.src.rpm">
          <filename>cloud-netconfig-gce-1.14-150000.25.23.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1341</id>
    <title>Recommended update for tftp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713447003"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215520" id="1215520" title="[tftp] tftp.service is missing an [Install] Section" type="bugzilla"/>
    </references>
    <description>This update for tftp fixes the following issue:

- Allow enabling the service via `systemctl enable tftp` to create the tftp.socket symlink (bsc#1215520)
</description>
    <pkglist>
      <collection>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="src" src="src/tftp-5.2-150000.5.6.2.src.rpm">
          <filename>tftp-5.2-150000.5.6.2.src.rpm</filename>
        </package>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="x86_64" src="x86_64/tftp-5.2-150000.5.6.2.x86_64.rpm">
          <filename>tftp-5.2-150000.5.6.2.x86_64.rpm</filename>
        </package>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="s390x" src="s390x/tftp-5.2-150000.5.6.2.s390x.rpm">
          <filename>tftp-5.2-150000.5.6.2.s390x.rpm</filename>
        </package>
        <package name="tftp" epoch="0" version="5.2" release="150000.5.6.2" arch="aarch64" src="aarch64/tftp-5.2-150000.5.6.2.aarch64.rpm">
          <filename>tftp-5.2-150000.5.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1344</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713459064"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221525" id="1221525" title="AutoYaST not upgrading all packages for SLES12 to SLES15 offline upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218171" id="1218171" title="zypper &quot;lr&quot; URI doesnt always match what zypper &quot;ref&quot; or &quot;dup&quot; will use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1175678" id="1175678" title="complete packages --unneeded featureset (mostly &quot;apt-mark auto&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222086" id="1222086" title="zypper as non-root always reports repositories are out-of-date" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8014" id="PED-8014" title="https://jira.suse.com/browse/PED-8014" type="jira"/>
      <reference href="https://jira.suse.com/browse/OBS-301" id="OBS-301" title="https://jira.suse.com/browse/OBS-301" type="jira"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

- Fix creation of sibling cache dirs with too restrictive mode (bsc#1222398)
- Update RepoStatus fromCookieFile according to the files mtime (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed
- Fixup New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
- Add resolver option 'removeOrphaned' for distupgrade (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
- Add default stripe minimum
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config
- version 17.32.0
- ProblemSolution::skipsPatchesOnly overload to handout the patches
- Show active dry-run/download-only at the commit propmpt
- Add --skip-not-applicable-patches option
- Fix printing detailed solver problem description
- Fix bash-completion to work with right adjusted numbers in the 1st column too
- Set libzypp shutdown request signal on Ctrl+C
- In the detailed view show all baseurls not just the first one (bsc#1218171)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="src" src="src/libzypp-17.32.4-150400.3.61.1.src.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="x86_64" src="x86_64/libzypp-17.32.4-150400.3.61.1.x86_64.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="src" src="src/zypper-1.14.71-150400.3.45.2.src.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="x86_64" src="x86_64/zypper-1.14.71-150400.3.45.2.x86_64.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.71" release="150400.3.45.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.71-150400.3.45.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.71-150400.3.45.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="s390x" src="s390x/libzypp-17.32.4-150400.3.61.1.s390x.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="s390x" src="s390x/zypper-1.14.71-150400.3.45.2.s390x.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.4" release="150400.3.61.1" arch="aarch64" src="aarch64/libzypp-17.32.4-150400.3.61.1.aarch64.rpm">
          <filename>libzypp-17.32.4-150400.3.61.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.71" release="150400.3.45.2" arch="aarch64" src="aarch64/zypper-1.14.71-150400.3.45.2.aarch64.rpm">
          <filename>zypper-1.14.71-150400.3.45.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1151</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712569002"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221665" id="1221665" title="VUL-0: EMBARGOED: CVE-2024-2004: curl: Usage of disabled protocol" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221667" id="1221667" title="VUL-0: EMBARGOED: CVE-2024-2398: curl: HTTP/2 push headers memory-leak" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2004" id="CVE-2024-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398" id="CVE-2024-2398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665)
- CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="src" src="src/curl-8.0.1-150400.5.44.1.src.rpm">
          <filename>curl-8.0.1-150400.5.44.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="x86_64" src="x86_64/curl-8.0.1-150400.5.44.1.x86_64.rpm">
          <filename>curl-8.0.1-150400.5.44.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.44.1" arch="x86_64" src="x86_64/libcurl4-8.0.1-150400.5.44.1.x86_64.rpm">
          <filename>libcurl4-8.0.1-150400.5.44.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="s390x" src="s390x/curl-8.0.1-150400.5.44.1.s390x.rpm">
          <filename>curl-8.0.1-150400.5.44.1.s390x.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.44.1" arch="s390x" src="s390x/libcurl4-8.0.1-150400.5.44.1.s390x.rpm">
          <filename>libcurl4-8.0.1-150400.5.44.1.s390x.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.0.1" release="150400.5.44.1" arch="aarch64" src="aarch64/curl-8.0.1-150400.5.44.1.aarch64.rpm">
          <filename>curl-8.0.1-150400.5.44.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.0.1" release="150400.5.44.1" arch="aarch64" src="aarch64/libcurl4-8.0.1-150400.5.44.1.aarch64.rpm">
          <filename>libcurl4-8.0.1-150400.5.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1253</id>
    <title>Recommended update for gcc13</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712902574"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214934" id="1214934" title="Misaligned patch-site warnings during boot on AArch64 with 15-SP6/ALP kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221239" id="1221239" title="L3: Backport of GCC bug 111731" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217450" id="1217450" title="cross-amdgcn-gcc13 – broken link for accel/amdgcn-amdhsa/as" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219520" id="1219520" title="ASAN crypt_r interceptor uses wrong sizeof(struct crypt_data)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219031" id="1219031" title="Multiple cross-arm-none-gcc13 bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217667" id="1217667" title="gcc ICE: mariadb 11.x fails to build on i586 (builds on x86_64_" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218492" id="1218492" title="[Build 20231228] FTBFS: tvm fails to build against not libSPIRV" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220724" id="1220724" title="Packages pulling gcc14 (like emacs-x11 and emacs-nox) break clang" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210959" id="1210959" title="Modula-2 compiler doesn’t compile" type="bugzilla"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

- Fix unwinding for JIT code.  [bsc#1221239] 
- Revert libgccjit dependency change.  [bsc#1220724]
- Remove crypt and crypt_r interceptors. The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]
- Add support for -fmin-function-alignment.  [bsc#1214934]
- Use %{_target_cpu} to determine host and build.
- Fix for building TVM.  [bsc#1218492]
- Add cross-X-newlib-devel requires to newlib cross compilers.
  [bsc#1219031]
- Package m2rte.so plugin in the gcc13-m2 sub-package rather than in gcc13-devel.  [bsc#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs are linked against libstdc++6.
- Fixed building mariadb on i686.  [bsc#1217667]
- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="src" src="src/gcc13-13.2.1+git8285-150000.1.9.1.src.rpm">
          <filename>gcc13-13.2.1+git8285-150000.1.9.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="x86_64" src="x86_64/libgcc_s1-13.2.1+git8285-150000.1.9.1.x86_64.rpm">
          <filename>libgcc_s1-13.2.1+git8285-150000.1.9.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="x86_64" src="x86_64/libstdc++6-13.2.1+git8285-150000.1.9.1.x86_64.rpm">
          <filename>libstdc++6-13.2.1+git8285-150000.1.9.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="s390x" src="s390x/libgcc_s1-13.2.1+git8285-150000.1.9.1.s390x.rpm">
          <filename>libgcc_s1-13.2.1+git8285-150000.1.9.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="s390x" src="s390x/libstdc++6-13.2.1+git8285-150000.1.9.1.s390x.rpm">
          <filename>libstdc++6-13.2.1+git8285-150000.1.9.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="aarch64" src="aarch64/libgcc_s1-13.2.1+git8285-150000.1.9.1.aarch64.rpm">
          <filename>libgcc_s1-13.2.1+git8285-150000.1.9.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.2.1+git8285" release="150000.1.9.1" arch="aarch64" src="aarch64/libstdc++6-13.2.1+git8285-150000.1.9.1.aarch64.rpm">
          <filename>libstdc++6-13.2.1+git8285-150000.1.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1014</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1711560861"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" id="CVE-2023-38469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" id="CVE-2023-38471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216594" id="1216594" title="VUL-0: CVE-2023-38471: avahi: Reachable assertion in dbus_set_host_name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216598" id="1216598" title="VUL-0: CVE-2023-38469: avahi: CVEs assigned for reachable assertions in avahi" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-38471: Fixed reachable assertion in dbus_set_host_name (bsc#1216594).
- CVE-2023-38469: Fixed reachable assertions in avahi (bsc#1216598).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="src" src="src/avahi-0.8-150400.7.16.1.src.rpm">
          <filename>avahi-0.8-150400.7.16.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.16.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.16.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.16.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.16.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.16.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/avahi-0.8-150400.7.16.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.16.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.16.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.16.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.16.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.16.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.16.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.16.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.16.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.16.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.16.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1101</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712146185"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221332" id="1221332" title="VUL-0: CVE-2023-28746: xen: x86: Register File Data Sampling (XSA-452)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221334" id="1221334" title="VUL-0: CVE-2024-2193: xen: GhostRace: Speculative Race Conditions (XSA-453)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2193" id="CVE-2024-2193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2193" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-28746: Register File Data Sampling (bsc#1221332)
- CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (bsc#1221334)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.5_14" release="150400.4.52.1" arch="src" src="src/xen-4.16.5_14-150400.4.52.1.src.rpm">
          <filename>xen-4.16.5_14-150400.4.52.1.src.rpm</filename>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.5_14" release="150400.4.52.1" arch="x86_64" src="x86_64/xen-libs-4.16.5_14-150400.4.52.1.x86_64.rpm">
          <filename>xen-libs-4.16.5_14-150400.4.52.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1231</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712841669"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220441" id="1220441" title="Memory corruption and cores on SLES15SP4 with libjson-c.so.3.0.1" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- duplocale: protect use of global locale (bsc#1220441, BZ #23970)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="src" src="src/glibc-2.31-150300.71.1.src.rpm">
          <filename>glibc-2.31-150300.71.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.71.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.71.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.71.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.71.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.71.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.71.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.71.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.71.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.71.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1080</id>
    <title>Recommended update for xfsprogs-scrub</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712033424"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190495" id="1190495" title="https://bugzilla.suse.com/show_bug.cgi?id=1190495" type="bugzilla"/>
    </references>
    <description>This update for xfsprogs-scrub fixes the following issues:

- Added missing xfsprogs-scrub to Package Hub for SLE-15-SP5 and SLE-15-SP4 (bsc#1190495)</description>
    <pkglist>
      <collection>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="src" src="src/xfsprogs-5.13.0-150400.3.5.1.src.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.src.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="x86_64" src="x86_64/xfsprogs-5.13.0-150400.3.5.1.x86_64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="s390x" src="s390x/xfsprogs-5.13.0-150400.3.5.1.s390x.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.s390x.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.5.1" arch="aarch64" src="aarch64/xfsprogs-5.13.0-150400.3.5.1.aarch64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1169</id>
    <title>Security update for util-linux</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712649039"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28085" id="CVE-2024-28085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28085" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221831" id="1221831" title="VUL-0: CVE-2024-28085: util-linux: improper neutralization of escape sequences in wall" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220117" id="1220117" title="L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207987" id="1207987" title="libuuid/xfs regression" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/libblkid1-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>libblkid1-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/libfdisk1-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/libmount1-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>libmount1-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/libsmartcols1-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/libuuid1-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>libuuid1-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.29.1" arch="src" src="src/util-linux-2.37.2-150400.8.29.1.src.rpm">
          <filename>util-linux-2.37.2-150400.8.29.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/util-linux-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>util-linux-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.29.1" arch="src" src="src/util-linux-systemd-2.37.2-150400.8.29.1.src.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.29.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.29.1" arch="x86_64" src="x86_64/util-linux-systemd-2.37.2-150400.8.29.1.x86_64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.29.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/libblkid1-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>libblkid1-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/libfdisk1-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>libfdisk1-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/libmount1-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>libmount1-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/libsmartcols1-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/libuuid1-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>libuuid1-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/util-linux-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>util-linux-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.29.1" arch="s390x" src="s390x/util-linux-systemd-2.37.2-150400.8.29.1.s390x.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.29.1.s390x.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/libblkid1-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>libblkid1-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/libfdisk1-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>libfdisk1-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/libmount1-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>libmount1-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/libsmartcols1-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>libsmartcols1-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/libuuid1-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>libuuid1-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/util-linux-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>util-linux-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.37.2" release="150400.8.29.1" arch="aarch64" src="aarch64/util-linux-systemd-2.37.2-150400.8.29.1.aarch64.rpm">
          <filename>util-linux-systemd-2.37.2-150400.8.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1671</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715849813"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=952645" id="952645" title="vmtoolsd service cannot be (re)started" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222089" id="1222089" title="open-vm-tools 12.4.0 has been released - please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217796" id="1217796" title="SLES12sp5: error in open-vm-tools 12.3.0-4.65.1 dependencies on libxmlsec1.so.1 for SLES 12SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1172693" id="1172693" title="[RC3 vmtools 11.1.0 guestops] authentication failed when querying Guest User Mappings via VCenter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217478" id="1217478" title="protobuf21-source depends on python2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1171003" id="1171003" title="use common-auth/common-account for pam configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=994598" id="994598" title="open-vm-tools should add udev rule to avoid boot problems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1054800" id="1054800" title="open-vm-tools fails to correctly set screen resolution under Wayland" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1062837" id="1062837" title="deploy package plugin missing in open-vm-tools" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1121964" id="1121964" title="Please update vmtoolsd.service to support cloud-init customization by default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1133623" id="1133623" title="Please update vmtoolsd.service to let tools run after network ready" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141969" id="1141969" title="cloud-init-local.service: Breaking ordering cycle by deleting job vmtoolsd.service/start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1143452" id="1143452" title="[VMware] Found ordering cycle on vmtoolsd.service is blocking wicked to start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1171764" id="1171764" title="update open-vm-tools to 11.1.0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196803" id="1196803" title="Open-vm-tools 12.0.0 has been released" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196804" id="1196804" title="open-vm-tools - Potential FTBFS error: bora/lib/asyncsocket/asyncksocket.c: AsyncTCPSocketPollWork()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205962" id="1205962" title="open-vm-tools 12.1.5 has been released, please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=474076" id="474076" title="open-vm-tools aren't working..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=481137" id="481137" title="vmware-kmp-default does not provide all required modules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=944615" id="944615" title="Please update open-vm-tools to 10.0.0" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/ECO-2164" id="ECO-2164" title="Update open-vmtools to 11.1.0" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24094" id="SLE-24094" title="Update open-vm-tools 12.0.0 SLE15SP4" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24095" id="SLE-24095" title="Update open-vm-tools 12.0.0 SLE15SP3" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24096" id="SLE-24096" title="Update open-vm-tools 12.0.0 SLE12SP5" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-24097" id="SLE-24097" title="ECO: Update open-vm-tools 12.0.0" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Remove protobuf less than v22 dependency from spec file (bsc#1217478)
- Use for updating open-vm-tools to new version (bsc#1222089)
- There are no new features in the current open-vm-tools release
  This is primarily a maintenance release that addresses a few
  critical problems
- Use %patch -P N instead of deprecated %patchN
- Own %{_modulesloaddir}: used to be present via udev-mini - kmod - suse-module-tools dependency before
- Fix outdated libxmlsec1 dependency version
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 v1.2.37 or above. (bsc#1217796)
- limit to protobuf less than v22 for now until build failures have been fixed
  pam-vmtoolsd patch as instructed by vmware (bsc#1171003).
  This should fix both (bsc#1171003) and (bsc#1172693)
- Update vmtoolsd.service to support cloud-init customization by default (bsc#994598)
- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)
- Extensive rewrite of the spec file
- rename vmware-KMP to vmware-guest-KMP for easier identification</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.4.0" release="150300.49.11" arch="x86_64" src="x86_64/libvmtools0-12.4.0-150300.49.11.x86_64.rpm">
          <filename>libvmtools0-12.4.0-150300.49.11.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.4.0" release="150300.49.11" arch="src" src="src/open-vm-tools-12.4.0-150300.49.11.src.rpm">
          <filename>open-vm-tools-12.4.0-150300.49.11.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.4.0" release="150300.49.11" arch="x86_64" src="x86_64/open-vm-tools-12.4.0-150300.49.11.x86_64.rpm">
          <filename>open-vm-tools-12.4.0-150300.49.11.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1192</id>
    <title>Security update for less</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712733289"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48624" id="CVE-2022-48624" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48624" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219901" id="1219901" title="VUL-0: CVE-2022-48624: less: LESSCLOSE handling in less does not quote shell metacharacters" type="bugzilla"/>
    </references>
    <description>This update for less fixes the following issues:

- CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).
</description>
    <pkglist>
      <collection>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="src" src="src/less-590-150400.3.6.2.src.rpm">
          <filename>less-590-150400.3.6.2.src.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="x86_64" src="x86_64/less-590-150400.3.6.2.x86_64.rpm">
          <filename>less-590-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="s390x" src="s390x/less-590-150400.3.6.2.s390x.rpm">
          <filename>less-590-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.6.2" arch="aarch64" src="aarch64/less-590-150400.3.6.2.aarch64.rpm">
          <filename>less-590-150400.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1342</id>
    <title>Recommended update for unixODBC, libtool and libssh2_org</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713450972"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221622" id="1221622" title="libssh2-1.11.0 issue with 'etm' family of MAC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221941" id="1221941" title="deliver 2 additional 32bit rpms: unixODBC-32bit, libssh2-1-32bit" type="bugzilla"/>
    </references>
    <description>This update for unixODBC, libtool and libssh2_org fixes the following issue:

- Ship 2 additional 32bit packages: unixODBC-32bit and libssh2-1-32bit for SLES (bsc#1221941).
- Fix an issue with Encrypt-then-MAC family. (bsc#1221622)
</description>
    <pkglist>
      <collection>
        <package name="libltdl7" epoch="0" version="2.4.6" release="150000.3.6.2" arch="x86_64" src="x86_64/libltdl7-2.4.6-150000.3.6.2.x86_64.rpm">
          <filename>libltdl7-2.4.6-150000.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.29.1" arch="x86_64" src="x86_64/libssh2-1-1.11.0-150000.4.29.1.x86_64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.29.1.x86_64.rpm</filename>
        </package>
        <package name="libssh2_org" epoch="0" version="1.11.0" release="150000.4.29.1" arch="src" src="src/libssh2_org-1.11.0-150000.4.29.1.src.rpm">
          <filename>libssh2_org-1.11.0-150000.4.29.1.src.rpm</filename>
        </package>
        <package name="libtool" epoch="0" version="2.4.6" release="150000.3.6.2" arch="src" src="src/libtool-2.4.6-150000.3.6.2.src.rpm">
          <filename>libtool-2.4.6-150000.3.6.2.src.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.29.1" arch="s390x" src="s390x/libssh2-1-1.11.0-150000.4.29.1.s390x.rpm">
          <filename>libssh2-1-1.11.0-150000.4.29.1.s390x.rpm</filename>
        </package>
        <package name="libssh2-1" epoch="0" version="1.11.0" release="150000.4.29.1" arch="aarch64" src="aarch64/libssh2-1-1.11.0-150000.4.29.1.aarch64.rpm">
          <filename>libssh2-1-1.11.0-150000.4.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1201</id>
    <title>Recommended update for xfsprogs-scrub and jctools</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712825295"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190495" id="1190495" title="xfsprogs-scrub needs to be available in PackageHub for SLE15-SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213418" id="1213418" title="Missing dependencies for netty-4.1.75-150200.4.9.1.x86_64" type="bugzilla"/>
    </references>
    <description>This update for xfsprogs-scrub fixes the following issues:

- Added missing xfsprogs-scrub to Package Hub for SLE-15-SP5 (bsc#1190495)
- Added missing jctools to Package Hub for SLE-15-SP5 (bsc#1213418)</description>
    <pkglist>
      <collection>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="src" src="src/xfsprogs-5.13.0-150400.3.7.1.src.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="x86_64" src="x86_64/xfsprogs-5.13.0-150400.3.7.1.x86_64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="s390x" src="s390x/xfsprogs-5.13.0-150400.3.7.1.s390x.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.s390x.rpm</filename>
        </package>
        <package name="xfsprogs" epoch="0" version="5.13.0" release="150400.3.7.1" arch="aarch64" src="aarch64/xfsprogs-5.13.0-150400.3.7.1.aarch64.rpm">
          <filename>xfsprogs-5.13.0-150400.3.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1167</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712581895"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" id="CVE-2024-28182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221399" id="1221399" title="VUL-0: CVE-2024-28182: nghttp2: HTTP/2 CONTINUATION frames can be utilized for DoS attacks" type="bugzilla"/>
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.17.1" arch="x86_64" src="x86_64/libnghttp2-14-1.40.0-150200.17.1.x86_64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.17.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.40.0" release="150200.17.1" arch="src" src="src/nghttp2-1.40.0-150200.17.1.src.rpm">
          <filename>nghttp2-1.40.0-150200.17.1.src.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.17.1" arch="s390x" src="s390x/libnghttp2-14-1.40.0-150200.17.1.s390x.rpm">
          <filename>libnghttp2-14-1.40.0-150200.17.1.s390x.rpm</filename>
        </package>
        <package name="libnghttp2-14" epoch="0" version="1.40.0" release="150200.17.1" arch="aarch64" src="aarch64/libnghttp2-14-1.40.0-150200.17.1.aarch64.rpm">
          <filename>libnghttp2-14-1.40.0-150200.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1206</id>
    <title>Recommended update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712833005"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222259" id="1222259" title="rpm-ndb has imaevm plugin in main package" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- remove imaevmsign plugin from rpm-ndb [bsc#1222259]
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="src" src="src/python-rpm-4.14.3-150400.59.13.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.13.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.13.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.13.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="src" src="src/rpm-4.14.3-150400.59.13.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.13.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.13.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.13.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.13.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.13.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.13.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.13.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.13.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.13.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.13.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.13.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.13.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.13.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.13.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1371</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713781584"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219074" id="1219074" title="[Build 20240122] live images: grub2 falls back to text mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213595" id="1213595" title="Live ISOs fail to boot due to wrong by-label links" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207128" id="1207128" title="SLES12-SP5, Kiwi9 hardlink issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221915" id="1221915" title="Regression: kiwi9 hardlink fix missing in SLE 15 SP5" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Fixed Live ISO image (bsc#1213595):
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label.

- Set the default output console to gfxterm for grub (bsc#1219074):
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console.
  
- Use rsync defaults to sync the initrd root-tree (bsc#1207128, bsc#1221915)
  This fix makes use of rsync default options to sync the root-tree of the boot image for custom initrds.
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.76.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.76.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.76.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.76.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.76.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.76.1" arch="src" src="src/python-kiwi-9.24.43-150100.3.76.1.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.76.1.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.76.1" arch="s390x" src="s390x/dracut-kiwi-lib-9.24.43-150100.3.76.1.s390x.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.76.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.76.1" arch="s390x" src="s390x/dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.s390x.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.76.1" arch="s390x" src="s390x/dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.s390x.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.s390x.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.76.1" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.76.1.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.76.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.76.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.76.1.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.76.1" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.76.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1398</id>
    <title>Recommended update for systemd-default-settings</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713873538"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2276" id="PED-2276" title="https://jira.suse.com/browse/PED-2276" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-10123" id="SLE-10123" title="https://jira.suse.com/browse/SLE-10123" type="jira"/>
    </references>
    <description>This update for systemd-default-settings fixes the following issues:

- Disable pids controller limit under user instances (jsc#SLE-10123)
- Disable controllers by default (jsc#PED-2276)
- The usage of drop-ins is now the official way for configuring systemd and its various daemons on Factory/ALP, 
  hence the early drop-ins SUSE specific &quot;feature&quot; has been abandoned.
- User priority '26' for SLE-Micro
- Convert more drop-ins into early ones
</description>
    <pkglist>
      <collection>
        <package name="systemd-default-settings" epoch="0" version="0.10" release="150300.3.7.1" arch="noarch" src="noarch/systemd-default-settings-0.10-150300.3.7.1.noarch.rpm">
          <filename>systemd-default-settings-0.10-150300.3.7.1.noarch.rpm</filename>
        </package>
        <package name="systemd-default-settings" epoch="0" version="0.10" release="150300.3.7.1" arch="src" src="src/systemd-default-settings-0.10-150300.3.7.1.src.rpm">
          <filename>systemd-default-settings-0.10-150300.3.7.1.src.rpm</filename>
        </package>
        <package name="systemd-default-settings-branding-SLE-Micro" epoch="0" version="0.10" release="150300.3.7.1" arch="noarch" src="noarch/systemd-default-settings-branding-SLE-Micro-0.10-150300.3.7.1.noarch.rpm">
          <filename>systemd-default-settings-branding-SLE-Micro-0.10-150300.3.7.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1321</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713307555"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200599" id="1200599" title="VUL-0: CVE-2022-20154: kernel-source,kernel-source-rt,kernel-source-azure: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212514" id="1212514" title="VUL-0: CVE-2023-35827: kernel: use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213456" id="1213456" title="VUL-0: CVE-2023-28746: CPU: Register File Data Sampling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217987" id="1217987" title="VUL-0: CVE-2023-6356: kernel: NULL pointer dereference in nvmet_tcp_build_pdu_iovec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217988" id="1217988" title="VUL-0: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217989" id="1217989" title="VUL-0: CVE-2023-6536: kernel: NULL pointer dereference in __nvmet_req_complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220237" id="1220237" title="VUL-0: CVE-2023-52450: kernel: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220251" id="1220251" title="VUL-0: CVE-2023-52447: kernel-source,kernel-source-azure,kernel-source-rt: bpf: Defer the free of inner map when necessary" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220320" id="1220320" title="VUL-0: CVE-2023-52454: kernel: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220340" id="1220340" title="VUL-0: CVE-2024-26600: kernel: phy: ti: phy-omap-usb2: NULL pointer dereference for SRP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220366" id="1220366" title="VUL-0: CVE-2022-48626: kernel: moxart: fix potential use-after-free on remove path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220411" id="1220411" title="VUL-0: CVE-2023-52469: kernel-source,kernel-source-azure,kernel-source-rt: drivers/gpu/drm/amd/pm: fix a use-after-free in kv_parse_power_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220413" id="1220413" title="VUL-0: CVE-2023-52470: kernel-source,kernel-source-azure,kernel-source-rt: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220439" id="1220439" title="VUL-0: CVE-2021-46936: kernel-source,kernel-source-azure,kernel-source-rt: net: use-after-free in tw_timer_handler()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220443" id="1220443" title="VUL-0: CVE-2021-46927: kernel-source,kernel-source-azure,kernel-source-rt: nitro_enclaves: reachable assertion via get_user_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220445" id="1220445" title="VUL-0: CVE-2023-52474: kernel: IB/hfi1: fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220466" id="1220466" title="VUL-0: CVE-2021-46925: kernel-source,kernel-source-azure,kernel-source-rt: net/smc: fix kernel panic caused by race of smc_sock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220478" id="1220478" title="VUL-0: CVE-2021-46926: kernel: ALSA: hda: intel-sdw-acpi: harden detection of controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220482" id="1220482" title="VUL-0: CVE-2021-46929: kernel: sctp: use call_rcu to free endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220484" id="1220484" title="VUL-0: CVE-2021-46930: kernel-source,kernel-source-azure,kernel-source-rt: usb: mtu3: fix list_head check warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220486" id="1220486" title="VUL-0: CVE-2021-46931: kernel: net/mlx5e: wrap the tx reporter dump callback to extract the sq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220487" id="1220487" title="VUL-0: CVE-2021-46933: kernel: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220790" id="1220790" title="VUL-0: CVE-2023-52477: kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220831" id="1220831" title="VUL-0: CVE-2023-52502: kernel: net: nfc: race conditions in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220833" id="1220833" title="VUL-0: CVE-2023-52507: kernel: nfc: nci: invalid requested protocol can cause an out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220836" id="1220836" title="VUL-0: CVE-2023-52509: kernel: ravb: use-after-free in ravb_tx_timeout_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220839" id="1220839" title="VUL-0: CVE-2023-52567: kernel: serial: 8250_port: NULL pointer dereference when using IRQ polling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220840" id="1220840" title="VUL-0: CVE-2023-52525: kernel: wifi: mwifiex: invalid out-of-bounds check condition in mwifiex_process_rx_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220843" id="1220843" title="VUL-0: CVE-2023-52528: kernel: net: usb: smsc75xx: uninit-value access in __smsc75xx_read_reg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220870" id="1220870" title="VUL-0: CVE-2023-52574: kernel: team: fix null-ptr-deref when team device type is changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220871" id="1220871" title="VUL-0: CVE-2023-52575: kernel: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220872" id="1220872" title="VUL-0: CVE-2023-52576: kernel: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220878" id="1220878" title="VUL-0: CVE-2023-52582: kernel: netfs: Only call folio_start_fscache() one time for each folio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220879" id="1220879" title="VUL-0: CVE-2023-52497: kernel: erofs: fix lz4 inplace decompression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220885" id="1220885" title="VUL-0: CVE-2023-52501: kernel: ring-buffer: Do not attempt to read past &quot;commit&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220898" id="1220898" title="VUL-0: CVE-2023-52510: kernel: ieee802154: ca8210: potential UAF in ca8210_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220918" id="1220918" title="VUL-0: CVE-2023-52569: kernel: btrfs: remove BUG() after failure to insert delayed dir index item" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220920" id="1220920" title="VUL-0: CVE-2023-52519: kernel: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220921" id="1220921" title="VUL-0: CVE-2023-52520: kernel: platform/x86: think-lmi: Fix reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220926" id="1220926" title="VUL-0: CVE-2023-52523: kernel: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220927" id="1220927" title="VUL-0: CVE-2023-52524: kernel: net: nfc: llcp: Add lock when modifying device list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220929" id="1220929" title="VUL-0: CVE-2023-52529: kernel: HID: sony: Fix a potential memory leak in sony_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220932" id="1220932" title="VUL-0: CVE-2023-52532: kernel: net: mana: Fix TX CQE error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220938" id="1220938" title="VUL-0: CVE-2023-52564: kernel: Revert &amp;#34;tty: n_gsm: fix UAF in gsm_cleanup_mux&amp;#34;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220940" id="1220940" title="VUL-0: CVE-2023-52566: kernel: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220954" id="1220954" title="VUL-0: CVE-2021-47087: kernel: tee: optee: Fix incorrect page free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220955" id="1220955" title="VUL-0: CVE-2021-47099: kernel: veth: shared skbs in veth device may trigger BUG assertion if GRO is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220959" id="1220959" title="VUL-0: CVE-2021-47091: kernel: mac80211: fix locking in ieee80211_start_ap error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220960" id="1220960" title="VUL-0: CVE-2021-47104: kernel: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220961" id="1220961" title="VUL-0: CVE-2021-47105: kernel: ice: xsk: return xsk buffers back to pool when cleaning the ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220965" id="1220965" title="VUL-0: CVE-2021-47107: kernel: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), ..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220969" id="1220969" title="VUL-0: CVE-2021-47082: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220978" id="1220978" title="VUL-0: CVE-2021-47093: kernel: platform/x86: intel_pmc_core: fix memleak on registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220979" id="1220979" title="VUL-0: CVE-2021-47095: kernel: ipmi: ssif: initialize ssif_info-&gt;client early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220981" id="1220981" title="VUL-0: CVE-2021-47096: kernel: ALSA: rawmidi - fix the uninitalized user_pversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220982" id="1220982" title="VUL-0: CVE-2021-47097: kernel: Input: elantech - fix stack out of bound access in elantech_change_report_id()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220983" id="1220983" title="VUL-0: CVE-2021-47098: kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220985" id="1220985" title="VUL-0: CVE-2021-47100: kernel: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220986" id="1220986" title="VUL-0: CVE-2021-47108: kernel: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220987" id="1220987" title="VUL-0: CVE-2021-47101: kernel: asix: fix uninit-value in asix_mdio_read()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220989" id="1220989" title="VUL-0: CVE-2022-48629: kernel: crypto: qcom-rng - ensure buffer for generate is completely filled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220990" id="1220990" title="VUL-0: CVE-2022-48630: kernel: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221009" id="1221009" title="VUL-0: CVE-2021-47102: kernel: net: marvell: prestera: fix incorrect structure access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221012" id="1221012" title="VUL-0: CVE-2023-52511: kernel: spi: sun6i: reduce DMA RX transfer width to single byte" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221015" id="1221015" title="VUL-0: CVE-2023-52508: kernel: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221022" id="1221022" title="VUL-0: CVE-2023-52513: kernel: RDMA/siw: Fix connection failure handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221039" id="1221039" title="VUL-0: REJECTED: CVE-2023-52605: kernel: ACPI: extlog: potential NULL pointer dereference in extlog_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221040" id="1221040" title="VUL-0: CVE-2023-52597: kernel: KVM: s390: interrupt during guest fpc value test may lead to corrupted userspace registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221048" id="1221048" title="VUL-0: CVE-2023-52515: kernel: RDMA/srp: Do not call scsi_done() from srp_abort()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221055" id="1221055" title="VUL-0: CVE-2023-52517: kernel: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221058" id="1221058" title="VUL-0: CVE-2023-52583: kernel: ceph: fix deadlock or deadcode of misusing dget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221077" id="1221077" title="rpm cannot handle filenames with spaces in package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221276" id="1221276" title="VUL-0: CVE-2023-52492: kernel: dmaengine: fix NULL pointer in channel unregistration function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221551" id="1221551" title="VUL-0: CVE-2021-47094: kernel: KVM: x86/mmu: don't advance iterator after restart due to yielding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221553" id="1221553" title="VUL-0: CVE-2023-52504: kernel: x86/alternatives: Disable KASAN in apply_alternatives()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221725" id="1221725" title="VUL-0: CVE-2024-25742, CVE-2024-25743: kernel: insufficient validation during #VC instruction emulation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222073" id="1222073" title="VUL-0: CVE-2023-52621: kernel: bpf: check rcu_read_lock_trace_held() before calling bpf map helpers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" id="CVE-2023-52519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" id="CVE-2023-52529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" id="CVE-2023-52474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" id="CVE-2023-52513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" id="CVE-2023-52515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" id="CVE-2023-52564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" id="CVE-2023-52447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" id="CVE-2023-52621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" id="CVE-2023-52510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" id="CVE-2023-52524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" id="CVE-2023-52528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" id="CVE-2023-52507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" id="CVE-2023-52566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" id="CVE-2023-52508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" id="CVE-2023-6535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" id="CVE-2023-6536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" id="CVE-2023-6356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6356" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" id="CVE-2023-52454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" id="CVE-2023-52520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" id="CVE-2023-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" id="CVE-2023-52509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" id="CVE-2023-52501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" id="CVE-2023-52567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" id="CVE-2023-52517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" id="CVE-2023-52511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" id="CVE-2023-52525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" id="CVE-2023-52504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" id="CVE-2023-52575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" id="CVE-2022-48626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" id="CVE-2022-48629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" id="CVE-2022-48630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" id="CVE-2021-46926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" id="CVE-2021-47096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" id="CVE-2021-47104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" id="CVE-2021-47097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" id="CVE-2021-47094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" id="CVE-2021-47107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" id="CVE-2021-47101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" id="CVE-2021-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" id="CVE-2021-47098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" id="CVE-2021-47100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" id="CVE-2021-47095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" id="CVE-2021-47091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" id="CVE-2021-46936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" id="CVE-2021-47102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" id="CVE-2021-46925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" id="CVE-2021-46927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" id="CVE-2021-47093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" id="CVE-2022-20154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" id="CVE-2021-46929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" id="CVE-2021-47087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" id="CVE-2021-47082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" id="CVE-2021-46933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" id="CVE-2021-46930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" id="CVE-2021-47099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" id="CVE-2023-52492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" id="CVE-2023-52450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" id="CVE-2023-52583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" id="CVE-2023-52582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" id="CVE-2023-52477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" id="CVE-2023-52470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" id="CVE-2023-52469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" id="CVE-2023-52576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" id="CVE-2024-26600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" id="CVE-2023-52497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" id="CVE-2023-52605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" id="CVE-2023-52569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" id="CVE-2023-52502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" id="CVE-2023-52574" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" id="CVE-2023-52597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" id="CVE-2023-52523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" id="CVE-2021-47105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" id="CVE-2023-52532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" id="CVE-2021-46931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5759" id="PED-5759" title="https://jira.suse.com/browse/PED-5759" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
- CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
- CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
- CVE-2023-52513: Fixed connection failure handling  in RDMA/siw (bsc#1221022).
- CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
- CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
- CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
- CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
- CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
- CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
- CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
- CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
- CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
- CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
- CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
- CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
- CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
- CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
- CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
- CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
- CVE-2023-52567: Fixed possible Oops in  serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
- CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
- CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
- CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
- CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
- CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
- CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
- CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
- CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
- CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
- CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
- CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
- CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
- CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
- CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
- CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
- CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
- CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
- CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
- CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
- CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
- CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
- CVE-2021-47102: Fixed incorrect structure access In line: upper = info-&gt;upper_dev in net/marvell/prestera (bsc#1221009).
- CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
- CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
- CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
- CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
- CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
- CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
- CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
- CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
- CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058).
- CVE-2023-52582: Fixed possible oops in netfs (bsc#1220878).
- CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
- CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
- CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
- CVE-2023-52576: Fixed potential use after free in memblock_isolate_range() (bsc#1220872).
- CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).
- CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
- CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
- CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
- CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
- CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
- CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
- CVE-2023-52523: Fixed wrong redirects to non-TCP sockets in bpf (bsc#1220926).
- CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
- CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
- CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).

The following non-security bugs were fixed:

- doc/README.SUSE: Update information about module support status (jsc#PED-5759)
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.116.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.116.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.116.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.116.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.116.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.116.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.116.1.150400.24.54.5" arch="src" src="src/kernel-default-base-5.14.21-150400.24.116.1.150400.24.54.5.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.116.1.150400.24.54.5.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.116.1.150400.24.54.5" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.116.1.150400.24.54.5.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.116.1.150400.24.54.5.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.116.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.116.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.116.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.116.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.116.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.116.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.116.1.150400.24.54.5" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.116.1.150400.24.54.5.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.116.1.150400.24.54.5.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1279</id>
    <title>Recommended update for python3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712950541"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222109" id="1222109" title="python3: syslog leading '/' issue [ref:_00D1igLOd._500Tr7pGOb:ref]" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issue:

- Fix syslog making default &quot;ident&quot; from sys.argv (bsc#1222109)
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.60.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.60.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.60.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="src" src="src/python3-3.6.15-150300.10.60.1.src.rpm">
          <filename>python3-3.6.15-150300.10.60.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.60.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.60.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.60.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.60.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.60.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.60.1" arch="src" src="src/python3-core-3.6.15-150300.10.60.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.60.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.60.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.60.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.60.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.60.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.60.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.60.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.60.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.60.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.60.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.60.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.60.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.60.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.60.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.60.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.60.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.60.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.60.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1271</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712928966"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221746" id="1221746" title="VUL-0: CVE-2024-28834: gnutls: side-channel in the deterministic ECDSA" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221242" id="1221242" title="Memory leak in gnutls — ref:_00D1igLOd._500Tr6tLDN:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221747" id="1221747" title="VUL-0: CVE-2024-28835: gnutls: certtool crash when verifying a  certificate chain" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835" id="CVE-2024-28835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834" id="CVE-2024-28834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)
- CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747)

Other fixes:
  - jitterentropy: Release the memory of the entropy collector when
    using jitterentropy with phtreads as there is also a
    pre-intitization done in the main thread (bsc#1221242)
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="src" src="src/gnutls-3.7.3-150400.4.44.1.src.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.44.1.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.44.1" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.44.1.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.44.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.44.1" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.44.1.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.44.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.44.1.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.44.1" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.44.1.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.44.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.44.1" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.44.1.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.44.1.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.44.1" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.44.1.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.44.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.44.1" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.44.1.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.44.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.44.1" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.44.1.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1337</id>
    <title>Recommended update for wicked</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713444320"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222105" id="1222105" title="wicked interface with bridge_stp=on fails to boot up" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Do not convert sec to msec twice (bsc#1222105)
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.19.1" arch="src" src="src/wicked-0.6.74-150400.3.19.1.src.rpm">
          <filename>wicked-0.6.74-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.19.1" arch="x86_64" src="x86_64/wicked-0.6.74-150400.3.19.1.x86_64.rpm">
          <filename>wicked-0.6.74-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.19.1" arch="x86_64" src="x86_64/wicked-service-0.6.74-150400.3.19.1.x86_64.rpm">
          <filename>wicked-service-0.6.74-150400.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.19.1" arch="s390x" src="s390x/wicked-0.6.74-150400.3.19.1.s390x.rpm">
          <filename>wicked-0.6.74-150400.3.19.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.19.1" arch="s390x" src="s390x/wicked-service-0.6.74-150400.3.19.1.s390x.rpm">
          <filename>wicked-service-0.6.74-150400.3.19.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.74" release="150400.3.19.1" arch="aarch64" src="aarch64/wicked-0.6.74-150400.3.19.1.aarch64.rpm">
          <filename>wicked-0.6.74-150400.3.19.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.74" release="150400.3.19.1" arch="aarch64" src="aarch64/wicked-service-0.6.74-150400.3.19.1.aarch64.rpm">
          <filename>wicked-service-0.6.74-150400.3.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1366</id>
    <title>Recommended update for openssh</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713776695"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218871" id="1218871" title="SLES 15 SP4 MaintWeb - ssh closes /dev/z90crypt file handle too early for ssh login attempts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216474" id="1216474" title="SLES 15 SP5 - openssh clients unable to use local accelerator cards via openssl-ibmca" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221123" id="1221123" title="Hostbased ssh login fails occasionally with &quot; ... signature unverified: incorrect signature&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222831" id="1222831" title="openssh 9.6 now uses the system crypto-policies" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Fix hostbased ssh login failing occasionally with &quot;signature
  unverified: incorrect signature&quot; by fixing a typo in patch (bsc#1221123)
- Avoid closing IBM Z crypto devices nodes. (bsc#1218871)
- Allow usage of IBM Z crypto adapter cards in seccomp filters (bsc#1216474)

- Change the default value of UpdateHostKeys to Yes (unless
  VerifyHostKeyDNS is enabled).

  This makes ssh update the known_hosts stored keys with all published
  versions by the server (after it's authenticated with an existing
  key), which will allow to identify the server with a different key if
  the existing key is considered insecure at some point in the future
  (bsc#1222831).
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="src" src="src/openssh-8.4p1-150300.3.37.1.src.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.37.1" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.37.1.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-clients-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-clients-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-common-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-common-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-fips-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-fips-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.37.1" arch="s390x" src="s390x/openssh-server-8.4p1-150300.3.37.1.s390x.rpm">
          <filename>openssh-server-8.4p1-150300.3.37.1.s390x.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.37.1" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.37.1.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1259</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1712926996"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222453" id="1222453" title="VUL-0: CVE-2024-2201: xen: x86: Native Branch History Injection (XSA-456)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221984" id="1221984" title="VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may trigger Xen bug check (XSA-454)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222302" id="1222302" title="VUL-0: CVE-2024-31142: xen: x86: Incorrect logic for BTC/SRSO mitigations (XSA-455)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31142" id="CVE-2024-31142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31142" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" id="CVE-2024-2201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46842" id="CVE-2023-46842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46842" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2023-46842: Fixed denial of service due to Xen bug check triggered by HVM hypercalls (XSA-454) in xen x86 (bsc#1221984)
- CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455) in xen x86 (bsc#1222302)
- CVE-2024-2201: Fixed memory disclosure via Native Branch History Injection (XSA-456) in xen x86 (bsc#1222453)

Other fixes:

- Update to Xen 4.16.6 (bsc#1027519)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.6_02" release="150400.4.55.1" arch="src" src="src/xen-4.16.6_02-150400.4.55.1.src.rpm">
          <filename>xen-4.16.6_02-150400.4.55.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.6_02" release="150400.4.55.1" arch="x86_64" src="x86_64/xen-libs-4.16.6_02-150400.4.55.1.x86_64.rpm">
          <filename>xen-libs-4.16.6_02-150400.4.55.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1567</id>
    <title>Recommended update for catatonit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715250835"/>
    <references/>
    <description>This update for catatonit fixes the following issues:

- Update to catatonit v0.2.0
- Change license to GPL-2.0-or-later
</description>
    <pkglist>
      <collection>
        <package name="catatonit" epoch="0" version="0.2.0" release="150300.10.8.1" arch="src" src="src/catatonit-0.2.0-150300.10.8.1.src.rpm">
          <filename>catatonit-0.2.0-150300.10.8.1.src.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="150300.10.8.1" arch="x86_64" src="x86_64/catatonit-0.2.0-150300.10.8.1.x86_64.rpm">
          <filename>catatonit-0.2.0-150300.10.8.1.x86_64.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="150300.10.8.1" arch="s390x" src="s390x/catatonit-0.2.0-150300.10.8.1.s390x.rpm">
          <filename>catatonit-0.2.0-150300.10.8.1.s390x.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="150300.10.8.1" arch="aarch64" src="aarch64/catatonit-0.2.0-150300.10.8.1.aarch64.rpm">
          <filename>catatonit-0.2.0-150300.10.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1320</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713283448"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212514" id="1212514" title="VUL-0: CVE-2023-35827: kernel: use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220237" id="1220237" title="VUL-0: CVE-2023-52450: kernel: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220320" id="1220320" title="VUL-0: CVE-2023-52454: kernel: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220340" id="1220340" title="VUL-0: CVE-2024-26600: kernel: phy: ti: phy-omap-usb2: NULL pointer dereference for SRP" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220366" id="1220366" title="VUL-0: CVE-2022-48626: kernel: moxart: fix potential use-after-free on remove path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220411" id="1220411" title="VUL-0: CVE-2023-52469: kernel-source,kernel-source-azure,kernel-source-rt: drivers/gpu/drm/amd/pm: fix a use-after-free in kv_parse_power_table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220413" id="1220413" title="VUL-0: CVE-2023-52470: kernel-source,kernel-source-azure,kernel-source-rt: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220439" id="1220439" title="VUL-0: CVE-2021-46936: kernel-source,kernel-source-azure,kernel-source-rt: net: use-after-free in tw_timer_handler()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220443" id="1220443" title="VUL-0: CVE-2021-46927: kernel-source,kernel-source-azure,kernel-source-rt: nitro_enclaves: reachable assertion via get_user_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220445" id="1220445" title="VUL-0: CVE-2023-52474: kernel: IB/hfi1: fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220466" id="1220466" title="VUL-0: CVE-2021-46925: kernel-source,kernel-source-azure,kernel-source-rt: net/smc: fix kernel panic caused by race of smc_sock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220478" id="1220478" title="VUL-0: CVE-2021-46926: kernel: ALSA: hda: intel-sdw-acpi: harden detection of controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220482" id="1220482" title="VUL-0: CVE-2021-46929: kernel: sctp: use call_rcu to free endpoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220484" id="1220484" title="VUL-0: CVE-2021-46930: kernel-source,kernel-source-azure,kernel-source-rt: usb: mtu3: fix list_head check warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220486" id="1220486" title="VUL-0: CVE-2021-46931: kernel: net/mlx5e: wrap the tx reporter dump callback to extract the sq" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220487" id="1220487" title="VUL-0: CVE-2021-46933: kernel: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220790" id="1220790" title="VUL-0: CVE-2023-52477: kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220831" id="1220831" title="VUL-0: CVE-2023-52502: kernel: net: nfc: race conditions in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220833" id="1220833" title="VUL-0: CVE-2023-52507: kernel: nfc: nci: invalid requested protocol can cause an out of bounds shift" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220836" id="1220836" title="VUL-0: CVE-2023-52509: kernel: ravb: use-after-free in ravb_tx_timeout_work()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220839" id="1220839" title="VUL-0: CVE-2023-52567: kernel: serial: 8250_port: NULL pointer dereference when using IRQ polling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220840" id="1220840" title="VUL-0: CVE-2023-52525: kernel: wifi: mwifiex: invalid out-of-bounds check condition in mwifiex_process_rx_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220843" id="1220843" title="VUL-0: CVE-2023-52528: kernel: net: usb: smsc75xx: uninit-value access in __smsc75xx_read_reg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220870" id="1220870" title="VUL-0: CVE-2023-52574: kernel: team: fix null-ptr-deref when team device type is changed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220871" id="1220871" title="VUL-0: CVE-2023-52575: kernel: x86/srso: Fix SBPB enablement for spec_rstack_overflow=off" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220872" id="1220872" title="VUL-0: CVE-2023-52576: kernel: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220878" id="1220878" title="VUL-0: CVE-2023-52582: kernel: netfs: Only call folio_start_fscache() one time for each folio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220879" id="1220879" title="VUL-0: CVE-2023-52497: kernel: erofs: fix lz4 inplace decompression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220885" id="1220885" title="VUL-0: CVE-2023-52501: kernel: ring-buffer: Do not attempt to read past &quot;commit&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220898" id="1220898" title="VUL-0: CVE-2023-52510: kernel: ieee802154: ca8210: potential UAF in ca8210_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220918" id="1220918" title="VUL-0: CVE-2023-52569: kernel: btrfs: remove BUG() after failure to insert delayed dir index item" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220920" id="1220920" title="VUL-0: CVE-2023-52519: kernel: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220921" id="1220921" title="VUL-0: CVE-2023-52520: kernel: platform/x86: think-lmi: Fix reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220926" id="1220926" title="VUL-0: CVE-2023-52523: kernel: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220927" id="1220927" title="VUL-0: CVE-2023-52524: kernel: net: nfc: llcp: Add lock when modifying device list" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220929" id="1220929" title="VUL-0: CVE-2023-52529: kernel: HID: sony: Fix a potential memory leak in sony_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220932" id="1220932" title="VUL-0: CVE-2023-52532: kernel: net: mana: Fix TX CQE error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220938" id="1220938" title="VUL-0: CVE-2023-52564: kernel: Revert &amp;#34;tty: n_gsm: fix UAF in gsm_cleanup_mux&amp;#34;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220940" id="1220940" title="VUL-0: CVE-2023-52566: kernel: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220954" id="1220954" title="VUL-0: CVE-2021-47087: kernel: tee: optee: Fix incorrect page free bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220955" id="1220955" title="VUL-0: CVE-2021-47099: kernel: veth: shared skbs in veth device may trigger BUG assertion if GRO is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220959" id="1220959" title="VUL-0: CVE-2021-47091: kernel: mac80211: fix locking in ieee80211_start_ap error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220960" id="1220960" title="VUL-0: CVE-2021-47104: kernel: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220961" id="1220961" title="VUL-0: CVE-2021-47105: kernel: ice: xsk: return xsk buffers back to pool when cleaning the ring" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220965" id="1220965" title="VUL-0: CVE-2021-47107: kernel: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), ..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220969" id="1220969" title="VUL-0: CVE-2021-47082: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220978" id="1220978" title="VUL-0: CVE-2021-47093: kernel: platform/x86: intel_pmc_core: fix memleak on registration failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220979" id="1220979" title="VUL-0: CVE-2021-47095: kernel: ipmi: ssif: initialize ssif_info-&gt;client early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220981" id="1220981" title="VUL-0: CVE-2021-47096: kernel: ALSA: rawmidi - fix the uninitalized user_pversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220982" id="1220982" title="VUL-0: CVE-2021-47097: kernel: Input: elantech - fix stack out of bound access in elantech_change_report_id()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220983" id="1220983" title="VUL-0: CVE-2021-47098: kernel: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220985" id="1220985" title="VUL-0: CVE-2021-47100: kernel: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220986" id="1220986" title="VUL-0: CVE-2021-47108: kernel: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220987" id="1220987" title="VUL-0: CVE-2021-47101: kernel: asix: fix uninit-value in asix_mdio_read()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220989" id="1220989" title="VUL-0: CVE-2022-48629: kernel: crypto: qcom-rng - ensure buffer for generate is completely filled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220990" id="1220990" title="VUL-0: CVE-2022-48630: kernel: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221009" id="1221009" title="VUL-0: CVE-2021-47102: kernel: net: marvell: prestera: fix incorrect structure access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221012" id="1221012" title="VUL-0: CVE-2023-52511: kernel: spi: sun6i: reduce DMA RX transfer width to single byte" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221015" id="1221015" title="VUL-0: CVE-2023-52508: kernel: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221022" id="1221022" title="VUL-0: CVE-2023-52513: kernel: RDMA/siw: Fix connection failure handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221039" id="1221039" title="VUL-0: REJECTED: CVE-2023-52605: kernel: ACPI: extlog: potential NULL pointer dereference in extlog_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221040" id="1221040" title="VUL-0: CVE-2023-52597: kernel: KVM: s390: interrupt during guest fpc value test may lead to corrupted userspace registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221048" id="1221048" title="VUL-0: CVE-2023-52515: kernel: RDMA/srp: Do not call scsi_done() from srp_abort()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221055" id="1221055" title="VUL-0: CVE-2023-52517: kernel: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221058" id="1221058" title="VUL-0: CVE-2023-52583: kernel: ceph: fix deadlock or deadcode of misusing dget()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221077" id="1221077" title="rpm cannot handle filenames with spaces in package" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221276" id="1221276" title="VUL-0: CVE-2023-52492: kernel: dmaengine: fix NULL pointer in channel unregistration function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221551" id="1221551" title="VUL-0: CVE-2021-47094: kernel: KVM: x86/mmu: don't advance iterator after restart due to yielding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221553" id="1221553" title="VUL-0: CVE-2023-52504: kernel: x86/alternatives: Disable KASAN in apply_alternatives()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221725" id="1221725" title="VUL-0: CVE-2024-25742, CVE-2024-25743: kernel: insufficient validation during #VC instruction emulation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222073" id="1222073" title="VUL-0: CVE-2023-52621: kernel: bpf: check rcu_read_lock_trace_held() before calling bpf map helpers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" id="CVE-2021-46925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" id="CVE-2021-46926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" id="CVE-2021-46927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46927" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" id="CVE-2021-46929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" id="CVE-2021-46930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" id="CVE-2021-46931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46931" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" id="CVE-2021-46933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46933" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" id="CVE-2021-46936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46936" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" id="CVE-2021-47082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" id="CVE-2021-47087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47087" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" id="CVE-2021-47091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47091" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" id="CVE-2021-47093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47093" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" id="CVE-2021-47094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47094" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" id="CVE-2021-47095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" id="CVE-2021-47096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47096" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" id="CVE-2021-47097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47097" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" id="CVE-2021-47098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" id="CVE-2021-47099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" id="CVE-2021-47100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" id="CVE-2021-47101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" id="CVE-2021-47102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" id="CVE-2021-47104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" id="CVE-2021-47105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" id="CVE-2021-47107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" id="CVE-2021-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47108" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" id="CVE-2022-48626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" id="CVE-2022-48629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48629" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" id="CVE-2022-48630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" id="CVE-2023-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35827" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" id="CVE-2023-52450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" id="CVE-2023-52454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" id="CVE-2023-52469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" id="CVE-2023-52470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" id="CVE-2023-52474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" id="CVE-2023-52477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" id="CVE-2023-52492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" id="CVE-2023-52497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" id="CVE-2023-52501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" id="CVE-2023-52502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" id="CVE-2023-52504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52504" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" id="CVE-2023-52507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" id="CVE-2023-52508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52508" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" id="CVE-2023-52509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" id="CVE-2023-52510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" id="CVE-2023-52511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" id="CVE-2023-52513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" id="CVE-2023-52515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52515" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" id="CVE-2023-52517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52517" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" id="CVE-2023-52519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" id="CVE-2023-52520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" id="CVE-2023-52523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" id="CVE-2023-52524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" id="CVE-2023-52525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" id="CVE-2023-52528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" id="CVE-2023-52529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" id="CVE-2023-52532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52532" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" id="CVE-2023-52564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" id="CVE-2023-52566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" id="CVE-2023-52567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" id="CVE-2023-52569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52569" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" id="CVE-2023-52574" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52574" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" id="CVE-2023-52575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52575" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" id="CVE-2023-52576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52576" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" id="CVE-2023-52582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" id="CVE-2023-52583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52583" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" id="CVE-2023-52597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52597" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" id="CVE-2023-52605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" id="CVE-2023-52621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52621" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" id="CVE-2024-26600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26600" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-5759" id="PED-5759" title="https://jira.suse.com/browse/PED-5759" type="jira"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
- CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
- CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
- CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
- CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
- CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
- CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
- CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
- CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
- CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
- CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
- CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
- CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
- CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
- CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
- CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
- CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
- CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
- CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
- CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
- CVE-2021-47102: Fixed incorrect structure access In line: upper = info-&gt;upper_dev in net/marvell/prestera (bsc#1221009).
- CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
- CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
- CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
- CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
- CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
- CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
- CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
- CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
- CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
- CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
- CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
- CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
- CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
- CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
- CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
- CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
- CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
- CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
- CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
- CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
- CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
- CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
- CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
- CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
- CVE-2023-52513: Fixed connection failure handling  in RDMA/siw (bsc#1221022).
- CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
- CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
- CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
- CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
- CVE-2023-52523: Fixed wrong redirects to non-TCP sockets in bpf (bsc#1220926).
- CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
- CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
- CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
- CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
- CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
- CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
- CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
- CVE-2023-52567: Fixed possible Oops in  serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
- CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
- CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
- CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
- CVE-2023-52576: Fixed potential use after free in memblock_isolate_range() (bsc#1220872).
- CVE-2023-52582: Fixed possible oops in netfs (bsc#1220878).
- CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058).
- CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
- CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
- CVE-2023-52621: Fixed missing asserion in bpf (bsc#1222073).
- CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).

The following non-security bugs were fixed:

- doc/README.SUSE: Update information about module support status (jsc#PED-5759)
- group-source-files.pl: Quote filenames (boo#1221077).
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.76.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.76.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.76.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.76.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.76.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.76.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1429</id>
    <title>Recommended update for ca-certificates</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713964417"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221184" id="1221184" title="L3: update-ca-certificates failing file exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188500" id="1188500" title="update-ca-certificates failing often at deployment" type="bugzilla"/>
    </references>
    <description>This update for ca-certificates fixes the following issue:

- Update version (bsc#1221184)
  * Use flock to serialize calls (bsc#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates" epoch="0" version="2+git20240416.98ae794" release="150300.4.3.3" arch="noarch" src="noarch/ca-certificates-2+git20240416.98ae794-150300.4.3.3.noarch.rpm">
          <filename>ca-certificates-2+git20240416.98ae794-150300.4.3.3.noarch.rpm</filename>
        </package>
        <package name="ca-certificates" epoch="0" version="2+git20240416.98ae794" release="150300.4.3.3" arch="src" src="src/ca-certificates-2+git20240416.98ae794-150300.4.3.3.src.rpm">
          <filename>ca-certificates-2+git20240416.98ae794-150300.4.3.3.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1402</id>
    <title>Security update for opensc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713883940"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5992" id="CVE-2023-5992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5992" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219386" id="1219386" title="VUL-0: CVE-2023-5992: opensc: Side-channel leaks while stripping encryption PKCS#1 padding" type="bugzilla"/>
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="src" src="src/opensc-0.22.0-150400.3.9.1.src.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="x86_64" src="x86_64/opensc-0.22.0-150400.3.9.1.x86_64.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="s390x" src="s390x/opensc-0.22.0-150400.3.9.1.s390x.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.22.0" release="150400.3.9.1" arch="aarch64" src="aarch64/opensc-0.22.0-150400.3.9.1.aarch64.rpm">
          <filename>opensc-0.22.0-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1848</id>
    <title>Recommended update for supportutils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717044772"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222021" id="1222021" title="Add capability in supportconfig to insert keyword/value pairs into the summary.xml file from a command line option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220082" id="1220082" title="supportconfig: lvm.txt shows: File descriptor 4 (/dev/null) leaked on lvs invocation" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8211" id="PED-8211" title="https://jira.suse.com/browse/PED-8211" type="jira"/>
    </references>
    <description>This update for supportutils fixes the following issues:

- Suppress file descriptor leak warnings from lvm commands (bsc#1220082)
- Add -V key:value pair option (bsc#1222021, PED-8211)
- Avoid getting duplicate kernel verifications in boot.text
- Include container log timestamps
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.30" release="150300.7.35.30.1" arch="noarch" src="noarch/supportutils-3.1.30-150300.7.35.30.1.noarch.rpm">
          <filename>supportutils-3.1.30-150300.7.35.30.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.30" release="150300.7.35.30.1" arch="src" src="src/supportutils-3.1.30-150300.7.35.30.1.src.rpm">
          <filename>supportutils-3.1.30-150300.7.35.30.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1528</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714989101"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-760" id="MSQA-760" title="https://jira.suse.com/browse/MSQA-760" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211649" id="1211649" title="Salt-ssh environment: ssh-minion-action-executor stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211888" id="1211888" title="Ansible playbook directory tab only search for .yml files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216850" id="1216850" title="venv-salt-call pip.install ignores &quot;bin_env&quot; option" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218482" id="1218482" title="fileserver.update fails with &quot;passed invalid argument&quot; when it is triggered using orchestration module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219001" id="1219001" title="Openscap schedule via webUI is pending and fails after long time" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions on containers
- Discover Ansible playbook files as &quot;*.yml&quot; or &quot;*.yaml&quot; files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuiteand python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.57.2.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.57.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="src" src="src/salt-3006.0-150400.8.57.2.src.rpm">
          <filename>salt-3006.0-150400.8.57.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="x86_64" src="x86_64/salt-3006.0-150400.8.57.2.x86_64.rpm">
          <filename>salt-3006.0-150400.8.57.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.57.2" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.57.2.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.57.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.57.2" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.57.2.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.57.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.57.2.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.57.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="s390x" src="s390x/salt-3006.0-150400.8.57.2.s390x.rpm">
          <filename>salt-3006.0-150400.8.57.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.57.2" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.57.2.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.57.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.57.2" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.57.2.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.57.2.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.57.2.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.57.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.57.2" arch="aarch64" src="aarch64/salt-3006.0-150400.8.57.2.aarch64.rpm">
          <filename>salt-3006.0-150400.8.57.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.57.2" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.57.2.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.57.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.57.2" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.57.2.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.57.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1394</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713863770"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213269" id="1213269" title="VUL-0: CVE-2023-3019: qemu,kvm: e1000e: heap use-after-free in e1000e_write_packet_to_guest()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222845" id="1222845" title="VUL-0: CVE-2024-3447: qemu: sdhci: heap buffer overflow in sdhci_write_dataport()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220134" id="1220134" title="VUL-0: CVE-2024-24474: qemu: integer overflow results in buffer overflow via SCSI command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222843" id="1222843" title="VUL-0: CVE-2024-3446: qemu: virtio: DMA reentrancy issue leads to double free vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218889" id="1218889" title="VUL-0: CVE-2023-6683: qemu: VNC: NULL pointer dereference in qemu_clipboard_request()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6683" id="CVE-2023-6683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6683" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3019" id="CVE-2023-3019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3019" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3447" id="CVE-2024-3447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3446" id="CVE-2024-3446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3446" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24474" id="CVE-2024-24474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24474" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

 - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269)
 - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889)
 - CVE-2024-24474: Fixed integer overflow results in buffer overflow via SCSI command (bsc#1220134)
 - CVE-2024-3446: Fixed DM reentrancy issue that could lead to double free vulnerability (bsc#1222843)
 - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="src" src="src/qemu-6.2.0-150400.37.29.1.src.rpm">
          <filename>qemu-6.2.0-150400.37.29.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.29.1" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.29.1.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.29.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.29.1" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.29.1.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.29.1.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.29.1" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.29.1.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.29.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.29.1" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.29.1.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.29.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.29.1" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.29.1.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.29.1.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.29.1" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.29.1.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.29.1.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.29.1" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.29.1.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1375</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1713790606"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" id="CVE-2024-2961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222992" id="1222992" title="VUL-0: CVE-2024-2961: glibc: iconv() function in the GNU C Library may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961, bsc#1222992)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="src" src="src/glibc-2.31-150300.74.1.src.rpm">
          <filename>glibc-2.31-150300.74.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.74.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.74.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.74.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.74.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.74.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.74.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.74.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.74.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.74.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1471</id>
    <title>Recommended update for libzypp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714449407"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223094" id="1223094" title="`zypper ref` tries to refresh CD/DVD although metadata are present in the cache." type="bugzilla"/>
    </references>
    <description>This update for libzypp fixes the following issues:

- Don't try to refresh volatile media as long as raw metadata are present (bsc#1223094)
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="src" src="src/libzypp-17.32.5-150400.3.64.1.src.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="x86_64" src="x86_64/libzypp-17.32.5-150400.3.64.1.x86_64.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="s390x" src="s390x/libzypp-17.32.5-150400.3.64.1.s390x.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.32.5" release="150400.3.64.1" arch="aarch64" src="aarch64/libzypp-17.32.5-150400.3.64.1.aarch64.rpm">
          <filename>libzypp-17.32.5-150400.3.64.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1459</id>
    <title>Recommended update for vim</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714369699"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220763" id="1220763" title="vim gets Segmentation fault after updating to version 9.1.0111-150500.20.9.1" type="bugzilla"/>
    </references>
    <description>This update for vim fixes the following issues:

- Fix segmentation fault after updating to version 9.1.0111-150500.20.9.1 (bsc#1220763)
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.0330" release="150000.5.63.1" arch="src" src="src/vim-9.1.0330-150000.5.63.1.src.rpm">
          <filename>vim-9.1.0330-150000.5.63.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.0330" release="150000.5.63.1" arch="noarch" src="noarch/vim-data-common-9.1.0330-150000.5.63.1.noarch.rpm">
          <filename>vim-data-common-9.1.0330-150000.5.63.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0330" release="150000.5.63.1" arch="x86_64" src="x86_64/vim-small-9.1.0330-150000.5.63.1.x86_64.rpm">
          <filename>vim-small-9.1.0330-150000.5.63.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0330" release="150000.5.63.1" arch="s390x" src="s390x/vim-small-9.1.0330-150000.5.63.1.s390x.rpm">
          <filename>vim-small-9.1.0330-150000.5.63.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.0330" release="150000.5.63.1" arch="aarch64" src="aarch64/vim-small-9.1.0330-150000.5.63.1.aarch64.rpm">
          <filename>vim-small-9.1.0330-150000.5.63.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1439</id>
    <title>Security update for python-idna</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714081298"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651" id="CVE-2024-3651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222842" id="1222842" title="VUL-0: CVE-2024-3651: python-idna: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()" type="bugzilla"/>
    </references>
    <description>This update for python-idna fixes the following issues:

- CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode() (bsc#1222842).
</description>
    <pkglist>
      <collection>
        <package name="python-idna" epoch="0" version="2.6" release="150000.3.3.1" arch="src" src="src/python-idna-2.6-150000.3.3.1.src.rpm">
          <filename>python-idna-2.6-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-idna" epoch="0" version="2.6" release="150000.3.3.1" arch="noarch" src="noarch/python3-idna-2.6-150000.3.3.1.noarch.rpm">
          <filename>python3-idna-2.6-150000.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1474</id>
    <title>Recommended update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1714450886"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217119" id="1217119" title="cupsd stuck in poll() loop" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- Fix occasional stuck on poll() loop (bsc#1217119)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.54.1" arch="src" src="src/cups-2.2.7-150000.3.54.1.src.rpm">
          <filename>cups-2.2.7-150000.3.54.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.54.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.54.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.54.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.54.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.54.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.54.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.54.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.54.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.54.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.54.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.54.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.54.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.54.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.54.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.54.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.54.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.54.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.54.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1557</id>
    <title>Security update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715161381"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191175" id="1191175" title="VUL-1: CVE-2021-3521: rpm: RPM does not require subkeys to have a valid binding signature" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218686" id="1218686" title="Valid gpg key import fails with key 1 import failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189495" id="1189495" title="%autopatch missing -m and -M parameter" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3521" id="CVE-2021-3521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3521" type="cve"/>
    </references>
    <description>This update for rpm fixes the following issues:

Security fixes:
- CVE-2021-3521: Fixed missing subkey binding signature checking (bsc#1191175)

Other fixes:

- accept more signature subpackets marked as critical (bsc#1218686)
- backport limit support for the autopatch macro (bsc#1189495)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="src" src="src/python-rpm-4.14.3-150400.59.16.1.src.rpm">
          <filename>python-rpm-4.14.3-150400.59.16.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150400.59.16.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.16.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="src" src="src/rpm-4.14.3-150400.59.16.1.src.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="x86_64" src="x86_64/rpm-4.14.3-150400.59.16.1.x86_64.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="src" src="src/rpm-ndb-4.14.3-150400.59.16.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150400.59.16.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150400.59.16.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150400.59.16.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="s390x" src="s390x/rpm-4.14.3-150400.59.16.1.s390x.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150400.59.16.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150400.59.16.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150400.59.16.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150400.59.16.1" arch="aarch64" src="aarch64/rpm-4.14.3-150400.59.16.1.aarch64.rpm">
          <filename>rpm-4.14.3-150400.59.16.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150400.59.16.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150400.59.16.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150400.59.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1637</id>
    <title>Recommended update for google-cloud SDK</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715689376"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-6697" id="PED-6697" title="https://jira.suse.com/browse/PED-6697" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-7987" id="PED-7987" title="https://jira.suse.com/browse/PED-7987" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30608" id="CVE-2023-30608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30608" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210617" id="1210617" title="VUL-0: CVE-2023-30608: python-sqlparse: regular expression vulnerability" type="bugzilla"/>
    </references>
    <description>This update for  google-cloud SDK fixes the following issues:

- Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697)
- Bellow 5 binaries Obsolete the python3.6 counterpart:
    python311-google-resumable-media
    python311-google-api-core
    python311-google-cloud-storage
    python311-google-cloud-core
    python311-googleapis-common-protos

- Regular python311 updates (without Obsoletes):
    python-google-auth
    python-grpcio
    python-sqlparse

- New python311 packages:
    libcrc32c
    python-google-cloud-appengine-logging
    python-google-cloud-artifact-registry
    python-google-cloud-audit-log
    python-google-cloud-build
    python-google-cloud-compute
    python-google-cloud-dns
    python-google-cloud-domains
    python-google-cloud-iam
    python-google-cloud-kms-inventory
    python-google-cloud-kms
    python-google-cloud-logging
    python-google-cloud-run
    python-google-cloud-secret-manager
    python-google-cloud-service-directory
    python-google-cloud-spanner
    python-google-cloud-vpc-access
    python-google-crc32c
    python-grpc-google-iam-v1
    python-grpcio-status
    python-proto-plus

In python-sqlparse this security issue was fixed:

CVE-2023-30608: Fixed parser that contained a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (bsc#1210617)

</description>
    <pkglist>
      <collection>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="x86_64" src="x86_64/libprotobuf-lite25_1_0-25.1-150400.9.6.1.x86_64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="protobuf" epoch="0" version="25.1" release="150400.9.6.1" arch="src" src="src/protobuf-25.1-150400.9.6.1.src.rpm">
          <filename>protobuf-25.1-150400.9.6.1.src.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="s390x" src="s390x/libprotobuf-lite25_1_0-25.1-150400.9.6.1.s390x.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.s390x.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="ppc64le" src="ppc64le/libprotobuf-lite25_1_0-25.1-150400.9.6.1.ppc64le.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.ppc64le.rpm</filename>
        </package>
        <package name="libprotobuf-lite25_1_0" epoch="0" version="25.1" release="150400.9.6.1" arch="aarch64" src="aarch64/libprotobuf-lite25_1_0-25.1-150400.9.6.1.aarch64.rpm">
          <filename>libprotobuf-lite25_1_0-25.1-150400.9.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1578</id>
    <title>Security update for sssd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715262440"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" id="CVE-2023-3758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223100" id="1223100" title="VUL-0: CVE-2023-3758: sssd: race condition during authorization leads to GPO policies functioning inconsistently" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/libsss_certmap0-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/libsss_idmap0-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.27.1" arch="src" src="src/sssd-2.5.2-150400.4.27.1.src.rpm">
          <filename>sssd-2.5.2-150400.4.27.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/sssd-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>sssd-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/sssd-common-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>sssd-common-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.27.1" arch="x86_64" src="x86_64/sssd-ldap-2.5.2-150400.4.27.1.x86_64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/libsss_certmap0-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/libsss_idmap0-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/libsss_nss_idmap0-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/sssd-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>sssd-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/sssd-common-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>sssd-common-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/sssd-krb5-common-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.27.1" arch="s390x" src="s390x/sssd-ldap-2.5.2-150400.4.27.1.s390x.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/libsss_certmap0-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>libsss_certmap0-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/libsss_idmap0-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>libsss_idmap0-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/sssd-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>sssd-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/sssd-common-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>sssd-common-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/sssd-krb5-common-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>sssd-krb5-common-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.5.2" release="150400.4.27.1" arch="aarch64" src="aarch64/sssd-ldap-2.5.2-150400.4.27.1.aarch64.rpm">
          <filename>sssd-ldap-2.5.2-150400.4.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1598</id>
    <title>Security update for less</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715334648"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32487" id="CVE-2024-32487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32487" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222849" id="1222849" title="VUL-0: CVE-2024-32487: less: mishandling of \n character in paths when LESSOPEN is set leads to OS command execution" type="bugzilla"/>
    </references>
    <description>This update for less fixes the following issues:

- CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)
</description>
    <pkglist>
      <collection>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="src" src="src/less-590-150400.3.9.1.src.rpm">
          <filename>less-590-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="x86_64" src="x86_64/less-590-150400.3.9.1.x86_64.rpm">
          <filename>less-590-150400.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="s390x" src="s390x/less-590-150400.3.9.1.s390x.rpm">
          <filename>less-590-150400.3.9.1.s390x.rpm</filename>
        </package>
        <package name="less" epoch="0" version="590" release="150400.3.9.1" arch="aarch64" src="aarch64/less-590-150400.3.9.1.aarch64.rpm">
          <filename>less-590-150400.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1895</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717398055"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" id="CVE-2024-33601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" id="CVE-2024-33599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" id="CVE-2024-33600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" id="CVE-2024-33602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223424" id="1223424" title="VUL-0: CVE-2024-33600: glibc: null pointer dereference after failed netgroup cache insertion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223423" id="1223423" title="VUL-0: CVE-2024-33599: glibc: stack-based buffer overflow in netgroup cache" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223425" id="1223425" title="VUL-0: CVE-2024-33602: glibc: netgroup cache assumes NSS callback uses in-buffer strings" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221940" id="1221940" title="Partner-L3: Update in glibc-devel-2.31-150300.52.2 causes performance regression on Sapphire Rapids CPU for glibc compiled benchmarking tests" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423)
- CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424)
- CVE-2024-33600: Do not send missing not-found response in addgetnetgrentX in nscd (bsc#1223424)
- CVE-2024-33601, CVE-2024-33602: Fixed use of two buffers in addgetnetgrentX ( bsc#1223425)
- CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)

- Avoid creating userspace live patching prologue for _start routine (bsc#1221940)

</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="src" src="src/glibc-2.31-150300.83.1.src.rpm">
          <filename>glibc-2.31-150300.83.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.83.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.83.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.83.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.83.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.83.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.83.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.83.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.83.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.83.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1876</id>
    <title>Recommended update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717130881"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221361" id="1221361" title="/etc/profile.d/alljava.csh sets JAVA_HOME incorrectly" type="bugzilla"/>
    </references>
    <description>This update for aaa_base fixes the following issues:

- Fix the typo to set JAVA_BINDIR in the csh variant of the alljava profile script (bsc#1221361)
</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="src" src="src/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.src.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="s390x" src="s390x/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.s390x.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.s390x.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20180409.04c9dae" release="150300.10.20.1" arch="aarch64" src="aarch64/aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.aarch64.rpm">
          <filename>aaa_base-84.87+git20180409.04c9dae-150300.10.20.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-33664</id>
    <title>Recommended update for libsolv, libzypp, zypper, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718305416"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-8153" id="PED-8153" title="https://jira.suse.com/browse/PED-8153" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222086" id="1222086" title="zypper as non-root always reports repositories are out-of-date" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223766" id="1223766" title="Zypper should return error code 7 instead of 4." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223430" id="1223430" title="Zypper: Repo key fails to import, key url is rewritten by --gpg-auto-import-keys refresh" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224242" id="1224242" title="Dependency missing for Packagekit-backend-zypp on SUMA server" type="bugzilla"/>
    </references>
    <description>This update for libsolv, libzypp, zypper, PackageKit-branding-SLE, PackageKit, libyui, yast2-pkg-bindings fixes the following issues:

- Fix the dependency for Packagekit-backend-zypp in SUMa 4.3 (bsc#1224242)
- Improve updating of installed multiversion packages
- Fix decision introspection going into an endless loop in some cases
- Split libsolv-tools into libsolv-tools-base [jsc#PED-8153]
- Improve checks against corrupt rpm
- Fixed check for outdated repo metadata as non-root user (bsc#1222086)
- Add ZYPP_API for exported functions and switch to visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- Fix download from gpgkey URL (bsc#1223430)
- Delay zypp lock until command options are parsed (bsc#1223766)
- Unify message format
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.29" release="150400.3.22.4" arch="src" src="src/libsolv-0.7.29-150400.3.22.4.src.rpm">
          <filename>libsolv-0.7.29-150400.3.22.4.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.29" release="150400.3.22.4" arch="x86_64" src="x86_64/libsolv-tools-0.7.29-150400.3.22.4.x86_64.rpm">
          <filename>libsolv-tools-0.7.29-150400.3.22.4.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.29-150400.3.22.4.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="src" src="src/libzypp-17.34.1-150400.3.71.7.src.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="x86_64" src="x86_64/libzypp-17.34.1-150400.3.71.7.x86_64.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="src" src="src/zypper-1.14.73-150400.3.50.10.src.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="x86_64" src="x86_64/zypper-1.14.73-150400.3.50.10.x86_64.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.73" release="150400.3.50.10" arch="noarch" src="noarch/zypper-needs-restarting-1.14.73-150400.3.50.10.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.73-150400.3.50.10.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.29" release="150400.3.22.4" arch="s390x" src="s390x/libsolv-tools-0.7.29-150400.3.22.4.s390x.rpm">
          <filename>libsolv-tools-0.7.29-150400.3.22.4.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="s390x" src="s390x/libsolv-tools-base-0.7.29-150400.3.22.4.s390x.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="s390x" src="s390x/libzypp-17.34.1-150400.3.71.7.s390x.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="s390x" src="s390x/zypper-1.14.73-150400.3.50.10.s390x.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="ppc64le" src="ppc64le/libsolv-tools-base-0.7.29-150400.3.22.4.ppc64le.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.ppc64le.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.29" release="150400.3.22.4" arch="aarch64" src="aarch64/libsolv-tools-0.7.29-150400.3.22.4.aarch64.rpm">
          <filename>libsolv-tools-0.7.29-150400.3.22.4.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.29" release="150400.3.22.4" arch="aarch64" src="aarch64/libsolv-tools-base-0.7.29-150400.3.22.4.aarch64.rpm">
          <filename>libsolv-tools-base-0.7.29-150400.3.22.4.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.34.1" release="150400.3.71.7" arch="aarch64" src="aarch64/libzypp-17.34.1-150400.3.71.7.aarch64.rpm">
          <filename>libzypp-17.34.1-150400.3.71.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.73" release="150400.3.50.10" arch="aarch64" src="aarch64/zypper-1.14.73-150400.3.50.10.aarch64.rpm">
          <filename>zypper-1.14.73-150400.3.50.10.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1636</id>
    <title>Security update for tpm2.0-tools</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715679455"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223689" id="1223689" title="VUL-0: CVE-2024-29039: tpm2.0-tools: pcr selection value is not compared with the attest" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223687" id="1223687" title="VUL-0: CVE-2024-29038: tpm2.0-tools: arbitrary quote data may go undetected by tpm2_checkquote" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29038" id="CVE-2024-29038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29039" id="CVE-2024-29039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29039" type="cve"/>
    </references>
    <description>This update for tpm2.0-tools fixes the following issues:

- CVE-2024-29038: Fixed arbitrary quote data validation by tpm2_checkquote (bsc#1223687).
- CVE-2024-29039: Fixed pcr selection value to be compared with the attest (bsc#1223689).
</description>
    <pkglist>
      <collection>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="src" src="src/tpm2.0-tools-5.2-150400.6.3.1.src.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.src.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="x86_64" src="x86_64/tpm2.0-tools-5.2-150400.6.3.1.x86_64.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="s390x" src="s390x/tpm2.0-tools-5.2-150400.6.3.1.s390x.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.s390x.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.2" release="150400.6.3.1" arch="aarch64" src="aarch64/tpm2.0-tools-5.2-150400.6.3.1.aarch64.rpm">
          <filename>tpm2.0-tools-5.2-150400.6.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1635</id>
    <title>Security update for tpm2-0-tss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715679424"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29040" id="CVE-2024-29040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29040" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223690" id="1223690" title="VUL-0: CVE-2024-29040: tpm2-0-tss: arbitrary quote data may go undetected by Fapi_VerifyQuote" type="bugzilla"/>
    </references>
    <description>This update for tpm2-0-tss fixes the following issues:

- CVE-2024-29040: Fixed quote data validation by Fapi_VerifyQuote (bsc#1223690).
</description>
    <pkglist>
      <collection>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-esys0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-fapi1-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-mu0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-rc0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-sys1-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-tcti-device0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/libtss2-tctildr0-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="src" src="src/tpm2-0-tss-3.1.0-150400.3.6.1.src.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="x86_64" src="x86_64/tpm2-0-tss-3.1.0-150400.3.6.1.x86_64.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-esys0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-fapi1-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-mu0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-rc0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-sys1-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-tcti-device0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/libtss2-tctildr0-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="s390x" src="s390x/tpm2-0-tss-3.1.0-150400.3.6.1.s390x.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libtss2-esys0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-esys0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-esys0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-fapi1-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-fapi1-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-mu0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-mu0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-rc0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-rc0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-sys1-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-sys1-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-tcti-device0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-tcti-device0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/libtss2-tctildr0-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>libtss2-tctildr0-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="3.1.0" release="150400.3.6.1" arch="aarch64" src="aarch64/tpm2-0-tss-3.1.0-150400.3.6.1.aarch64.rpm">
          <filename>tpm2-0-tss-3.1.0-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1641</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715693828"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192145" id="1192145" title="Update Broadcom Emulex lpfc driver to 14.0.0.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="VUL-0: CVE-2023-4881: kernel-source: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216223" id="1216223" title="ibmvfc max_xfer_size is missing ref:_00D1igLOd._5005qXBPNc:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218336" id="1218336" title="VUL-0: CVE-2023-7042: kernel-source,kernel-source-azure,kernel-source-rt: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218479" id="1218479" title="VUL-0: CVE-2023-7192: kernel-source,kernel-source-azure,kernel-source-rt: refcount leak in ctnetlink_create_conntrack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219104" id="1219104" title="VUL-0: CVE-2024-23848: kernel: use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220342" id="1220342" title="VUL-0: CVE-2024-26601: kernel-source,kernel-source-azure,kernel-source-rt: ext4: buddy bitmap corruption via fast commit replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220703" id="1220703" title="VUL-0: CVE-2023-52476: kernel: perf/x86/lbr: perf sampling NMI during vsyscall can cause unhandled page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220761" id="1220761" title="VUL-0: CVE-2021-47047: kernel: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220883" id="1220883" title="VUL-0: CVE-2023-52500: kernel: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221061" id="1221061" title="VUL-0: CVE-2023-52607: kernel: powerpc/mm: potential null-pointer dereference in pgtable_cache_add() if kasprintf() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221088" id="1221088" title="VUL-0: CVE-2023-52590: kernel: ocfs2: Avoid touching renamed directory if parent does not change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221293" id="1221293" title="VUL-0: CVE-2024-26614: kernel: tcp: make sure init the accept_queue's spinlocks once" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221299" id="1221299" title="VUL-0: CVE-2024-26610: kernel: wifi: iwlwifi: fix a memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221612" id="1221612" title="VUL-0: CVE-2023-52616: kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221725" id="1221725" title="VUL-0: CVE-2024-25742: kernel: insufficient validation during #VC instruction emulation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221830" id="1221830" title="VUL-0: CVE-2024-26642: kernel: netfilter: nf_tables: disallow anonymous set with timeout flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222117" id="1222117" title="VUL-0: CVE-2023-52628: kernel: netfilter: nftables: exthdr: 4-byte stack OOB write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222422" id="1222422" title="VUL-0: CVE-2024-26704: kernel: ext4: fix double-free of blocks due to wrong extents moved_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222430" id="1222430" title="VUL-0: CVE-2024-26792: kernel: btrfs: fix double free of anonymous device after snapshot creation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222435" id="1222435" title="VUL-0: CVE-2024-26687: kernel: xen/events: close evtchn after mapping cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222482" id="1222482" title="VUL-0: CVE-2024-26688: kernel: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222503" id="1222503" title="VUL-0: CVE-2024-26689: kernel: ceph: prevent use-after-free in encode_cap_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222536" id="1222536" title="VUL-0: CVE-2024-26727: kernel: btrfs: do not ASSERT() if the newly created subvolume already got read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222585" id="1222585" title="VUL-0: CVE-2024-26733: kernel: arp: Prevent overflow in arp_req_get()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222618" id="1222618" title="VUL-0: CVE-2024-26773: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222624" id="1222624" title="VUL-0: CVE-2024-26816: kernel: startup_xen address leaked in user readable /sys/kernel/notes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222660" id="1222660" title="VUL-0: CVE-2021-47181: kernel: usb: musb: tusb6010: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222662" id="1222662" title="VUL-0: CVE-2021-47182: kernel: scsi: core: Fix scsi_mode_sense() buffer length handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222664" id="1222664" title="VUL-0: CVE-2021-47183: kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222666" id="1222666" title="VUL-0: CVE-2021-47184: kernel: i40e: Fix NULL ptr dereference on VSI filter sync" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222669" id="1222669" title="VUL-0: CVE-2021-47185: kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222671" id="1222671" title="VUL-0: CVE-2021-47188: kernel: scsi: ufs: core: Improve SCSI abort handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222703" id="1222703" title="VUL-0: CVE-2021-47187: kernel: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222704" id="1222704" title="VUL-0: CVE-2021-47215: kernel: net/mlx5e: kTLS, Fix crash in RX resync flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222706" id="1222706" title="VUL-0: CVE-2021-47189: kernel: btrfs: fix memory ordering between normal and ordered work functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222709" id="1222709" title="VUL-0: CVE-2021-47212: kernel: net/mlx5: Update error handler for UCTX and UMEM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222726" id="1222726" title="VUL-0: CVE-2024-26766: kernel: IB/hfi1: sdma.h tx-&gt;num_descs off-by-one error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222773" id="1222773" title="VUL-0: CVE-2021-47196: kernel: RDMA/core: Set send and receive CQ before forwarding to the driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222776" id="1222776" title="VUL-0: CVE-2021-47197: kernel: net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222785" id="1222785" title="VUL-0: CVE-2021-47199: kernel: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222787" id="1222787" title="VUL-0: CVE-2021-47204: kernel: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222790" id="1222790" title="VUL-0: CVE-2021-47207: kernel: ALSA: gus: null pointer dereference on pointer block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222791" id="1222791" title="VUL-0: CVE-2021-47218: kernel: selinux: fix NULL-pointer dereference when hashtab allocation fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222792" id="1222792" title="VUL-0: CVE-2021-47201: kernel: iavf: panic encountered when the interface is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222796" id="1222796" title="VUL-0: CVE-2021-47209: kernel: sched/fair: Prevent dead task groups from regaining cfs_rq's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222824" id="1222824" title="VUL-0: CVE-2021-47219: kernel: scsi: scsi_debug: out-of-bound read in resp_report_tgtpgs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222829" id="1222829" title="VUL-0: CVE-2021-47194: kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222832" id="1222832" title="VUL-0: CVE-2021-47195: kernel: spi: fix use-after-free of the add_lock mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222836" id="1222836" title="VUL-0: CVE-2021-47217: kernel: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222838" id="1222838" title="VUL-0: CVE-2021-47200: kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222866" id="1222866" title="VUL-0: CVE-2021-47191: kernel: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222867" id="1222867" title="VUL-0: CVE-2021-47192: kernel: scsi: core: sysfs: Fix hang when device state is set via sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222869" id="1222869" title="VUL-0: CVE-2021-47211: kernel: ALSA: usb-audio: null pointer dereference on pointer cs_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222876" id="1222876" title="VUL-0: CVE-2021-47216: kernel: scsi: advansys: kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222878" id="1222878" title="VUL-0: CVE-2021-47202: kernel: thermal: NULL pointer dereferences in of_thermal_ functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222879" id="1222879" title="VUL-0: CVE-2021-47193: kernel: scsi: pm80xx: Fix memory leak during rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222881" id="1222881" title="VUL-0: CVE-2021-47203: kernel: scsi: lpfc: list_add() corruption in lpfc_drain_txq()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222883" id="1222883" title="VUL-0: CVE-2021-47198: kernel: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222888" id="1222888" title="VUL-0: CVE-2021-47205: kernel: clk: sunxi-ng: Unregister clocks/resets when unbinding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222894" id="1222894" title="VUL-0: CVE-2021-47206: kernel: usb: host: ohci-tmio: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222901" id="1222901" title="VUL-0: CVE-2021-47210: kernel: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223016" id="1223016" title="VUL-0: CVE-2024-26898: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223187" id="1223187" title="VUL-0: CVE-2024-26903: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223380" id="1223380" title="L3: PANIC: &quot;Kernel panic - not syncing: NMI: Not continuing&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223474" id="1223474" title="VUL-0: CVE-2022-48653: kernel: ice: &quot;scheduling while atomic&quot; BUG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223475" id="1223475" title="VUL-0: CVE-2022-48631: kernel: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223477" id="1223477" title="VUL-0: CVE-2022-48655: kernel: firmware: arm_scmi: out-of-bound violations if the SCMI driver misbehave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223479" id="1223479" title="VUL-0: CVE-2022-48656: kernel: dmaengine: ti: refcount leak bug in of_xudma_dev_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223482" id="1223482" title="VUL-0: CVE-2022-48654: kernel: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223484" id="1223484" title="VUL-0: CVE-2022-48657: kernel: arm64: topology: possible overflow in amu_fie_setup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223487" id="1223487" title="VUL-0: CVE-2022-48660: kernel: gpiolib: cdev: warning in lineevent_state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223503" id="1223503" title="VUL-0: CVE-2022-48648: kernel: sfc: fix null pointer dereference in efx_hard_start_xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223509" id="1223509" title="VUL-0: CVE-2022-48650: kernel: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223513" id="1223513" title="VUL-0: CVE-2022-48651: kernel: ipvlan: Fix out-of-bound bugs caused by unset skb-&gt;mac_header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223516" id="1223516" title="VUL-0: CVE-2022-48668: kernel: smb3: fix temporary data corruption in collapse range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223517" id="1223517" title="VUL-0: CVE-2022-48637: kernel: bnxt: prevent skb UAF after handing over to PTP worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223518" id="1223518" title="VUL-0: CVE-2022-48667: kernel: smb3: fix temporary data corruption in insert range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223519" id="1223519" title="VUL-0: CVE-2022-48647: kernel: sfc: fix TX channel offset when using legacy interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223522" id="1223522" title="VUL-0: CVE-2022-48638: kernel: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223523" id="1223523" title="VUL-0: CVE-2022-48663: kernel: gpio: mockup: NULL pointer dereference when removing debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223705" id="1223705" title="VUL-0: CVE-2024-27389: kernel: pstore: inode: only d_invalidate() is needed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223824" id="1223824" title="VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" id="CVE-2024-27389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" id="CVE-2024-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" id="CVE-2024-26903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" id="CVE-2024-26898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" id="CVE-2024-26816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" id="CVE-2024-26792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" id="CVE-2024-26773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" id="CVE-2024-26766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" id="CVE-2024-26733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" id="CVE-2024-26727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" id="CVE-2024-26704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" id="CVE-2024-26689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" id="CVE-2024-26688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" id="CVE-2024-26687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" id="CVE-2024-26642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" id="CVE-2024-26614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" id="CVE-2024-26610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" id="CVE-2024-26601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" id="CVE-2024-25742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" id="CVE-2024-23848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" id="CVE-2023-7192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" id="CVE-2023-7042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" id="CVE-2023-52628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" id="CVE-2023-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" id="CVE-2023-52607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" id="CVE-2023-52590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" id="CVE-2023-52500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" id="CVE-2023-52476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" id="CVE-2023-4881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4881" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" id="CVE-2022-48668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" id="CVE-2022-48667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" id="CVE-2022-48663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" id="CVE-2022-48660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" id="CVE-2022-48657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" id="CVE-2022-48656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" id="CVE-2022-48655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" id="CVE-2022-48654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" id="CVE-2022-48653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" id="CVE-2022-48651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" id="CVE-2022-48650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" id="CVE-2022-48648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" id="CVE-2022-48647" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" id="CVE-2022-48638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" id="CVE-2022-48637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" id="CVE-2022-48631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" id="CVE-2021-47219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" id="CVE-2021-47218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" id="CVE-2021-47217" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" id="CVE-2021-47216" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" id="CVE-2021-47215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" id="CVE-2021-47212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" id="CVE-2021-47211" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" id="CVE-2021-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" id="CVE-2021-47209" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" id="CVE-2021-47207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" id="CVE-2021-47206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" id="CVE-2021-47205" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" id="CVE-2021-47204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" id="CVE-2021-47203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" id="CVE-2021-47202" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" id="CVE-2021-47201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" id="CVE-2021-47200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" id="CVE-2021-47199" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" id="CVE-2021-47198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" id="CVE-2021-47197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" id="CVE-2021-47196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" id="CVE-2021-47195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" id="CVE-2021-47194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" id="CVE-2021-47193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" id="CVE-2021-47192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" id="CVE-2021-47191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" id="CVE-2021-47189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" id="CVE-2021-47188" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" id="CVE-2021-47187" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" id="CVE-2021-47185" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" id="CVE-2021-47184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" id="CVE-2021-47183" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" id="CVE-2021-47182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" id="CVE-2021-47181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" id="CVE-2021-47047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 LTSS kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
- CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618). 
- CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
- CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
- CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
- CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
- CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
- CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
- CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
- CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
- CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-&gt;mac_header (bsc#1223513).
- CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
- CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
- CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
- CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
- CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
- CVE-2021-47182: Fixed scsi_mode_sense() buffer length handling (bsc#1222662).
- CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource()  (bsc#1222660).

The following non-security bugs were fixed:

- Call flush_delayed_fput() from nfsd main-loop (bsc#1223380).
- ibmvfc: make 'max_sectors' a module option (bsc#1216223).
- scsi: Update max_hw_sectors on rescan (bsc#1216223).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.119.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.119.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.119.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.119.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.119.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.119.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.119.1.150400.24.56.1" arch="src" src="src/kernel-default-base-5.14.21-150400.24.119.1.150400.24.56.1.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.119.1.150400.24.56.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.119.1.150400.24.56.1" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.119.1.150400.24.56.1.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.119.1.150400.24.56.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.119.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.119.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.119.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.119.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.119.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.119.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.119.1.150400.24.56.1" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.119.1.150400.24.56.1.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.119.1.150400.24.56.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1665</id>
    <title>Recommended update for coreutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715839224"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221632" id="1221632" title="Automount behavior change with ghost mountpoint enabled in SLES 12.5 vs 15.5" type="bugzilla"/>
    </references>
    <description>This update for coreutils fixes the following issues:

- ls: avoid triggering automounts (bsc#1221632)
</description>
    <pkglist>
      <collection>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="src" src="src/coreutils-8.32-150400.9.6.1.src.rpm">
          <filename>coreutils-8.32-150400.9.6.1.src.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="x86_64" src="x86_64/coreutils-8.32-150400.9.6.1.x86_64.rpm">
          <filename>coreutils-8.32-150400.9.6.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="s390x" src="s390x/coreutils-8.32-150400.9.6.1.s390x.rpm">
          <filename>coreutils-8.32-150400.9.6.1.s390x.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="8.32" release="150400.9.6.1" arch="aarch64" src="aarch64/coreutils-8.32-150400.9.6.1.aarch64.rpm">
          <filename>coreutils-8.32-150400.9.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1947</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717772776"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222548" id="1222548" title="VUL-0: CVE-2024-2511: openssl-1_1,openssl-3:Unbounded memory growth with session handling in TLSv1.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224388" id="1224388" title="VUL-0: CVE-2024-4603: openssl-3: excessive time spent checking DSA keys and parameters" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" id="CVE-2024-2511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603" id="CVE-2024-4603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603" type="cve"/>
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).
- CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.54.1" arch="x86_64" src="x86_64/libopenssl3-3.0.8-150400.4.54.1.x86_64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.54.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.0.8" release="150400.4.54.1" arch="src" src="src/openssl-3-3.0.8-150400.4.54.1.src.rpm">
          <filename>openssl-3-3.0.8-150400.4.54.1.src.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.54.1" arch="s390x" src="s390x/libopenssl3-3.0.8-150400.4.54.1.s390x.rpm">
          <filename>libopenssl3-3.0.8-150400.4.54.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.54.1" arch="ppc64le" src="ppc64le/libopenssl3-3.0.8-150400.4.54.1.ppc64le.rpm">
          <filename>libopenssl3-3.0.8-150400.4.54.1.ppc64le.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.54.1" arch="aarch64" src="aarch64/libopenssl3-3.0.8-150400.4.54.1.aarch64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.54.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1949</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717772862"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222548" id="1222548" title="VUL-0: CVE-2024-2511: openssl-1_1,openssl-3:Unbounded memory growth with session handling in TLSv1.3" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" id="CVE-2024-2511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.66.2.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.66.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.66.2.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.66.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.66.2.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.66.2.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.66.2.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.66.2.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.66.2.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.66.2.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.66.2.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.66.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.66.2.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.66.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.66.2.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.66.2.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.66.2.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.66.2.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.66.2.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.66.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.66.2.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.66.2.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.66.2.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.66.2.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.66.2" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.66.2.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.66.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1603</id>
    <title>Recommended update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715346057"/>
    <references>
      <reference href="https://jira.suse.com/browse/MSQA-779" id="MSQA-779" title="https://jira.suse.com/browse/MSQA-779" type="jira"/>
    </references>
    <description>This update for salt fixes the following issues:

- Make &quot;man&quot; a recommended package instead of required to fix installation issues with SLE Micro
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="x86_64" src="x86_64/python3-salt-3006.0-150400.8.60.1.x86_64.rpm">
          <filename>python3-salt-3006.0-150400.8.60.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="src" src="src/salt-3006.0-150400.8.60.1.src.rpm">
          <filename>salt-3006.0-150400.8.60.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="x86_64" src="x86_64/salt-3006.0-150400.8.60.1.x86_64.rpm">
          <filename>salt-3006.0-150400.8.60.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.60.1" arch="x86_64" src="x86_64/salt-minion-3006.0-150400.8.60.1.x86_64.rpm">
          <filename>salt-minion-3006.0-150400.8.60.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.60.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-150400.8.60.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.60.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="s390x" src="s390x/python3-salt-3006.0-150400.8.60.1.s390x.rpm">
          <filename>python3-salt-3006.0-150400.8.60.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="s390x" src="s390x/salt-3006.0-150400.8.60.1.s390x.rpm">
          <filename>salt-3006.0-150400.8.60.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.60.1" arch="s390x" src="s390x/salt-minion-3006.0-150400.8.60.1.s390x.rpm">
          <filename>salt-minion-3006.0-150400.8.60.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.60.1" arch="s390x" src="s390x/salt-transactional-update-3006.0-150400.8.60.1.s390x.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.60.1.s390x.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="aarch64" src="aarch64/python3-salt-3006.0-150400.8.60.1.aarch64.rpm">
          <filename>python3-salt-3006.0-150400.8.60.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="150400.8.60.1" arch="aarch64" src="aarch64/salt-3006.0-150400.8.60.1.aarch64.rpm">
          <filename>salt-3006.0-150400.8.60.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="150400.8.60.1" arch="aarch64" src="aarch64/salt-minion-3006.0-150400.8.60.1.aarch64.rpm">
          <filename>salt-minion-3006.0-150400.8.60.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="150400.8.60.1" arch="aarch64" src="aarch64/salt-transactional-update-3006.0-150400.8.60.1.aarch64.rpm">
          <filename>salt-transactional-update-3006.0-150400.8.60.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1827</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716972269"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205604" id="1205604" title="wicked configured network. ifdown on VLAN bond prevents ifup to start the bond again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219108" id="1219108" title="Incorrect MTU set by wickedd on an interface that is also part of a bond" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218926" id="1218926" title="Wicked ifcheck/ifreload inconsistency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224100" id="1224100" title="bridge/nic went in to &quot;link down&quot; status with new patch for &quot;wicked&quot;" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- client: fix ifreload to pull UP ports/links again when the config of their master/lower changed (bsc#1224100)
    
- Update to version 0.6.75:
  - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings
  - cleanup: fix overflow warnings in a socket testcase on i586
  - ifcheck: report new and deleted configs as changed (bsc#1218926)
  - man: improve ARP configuration options in the wicked-config.5
  - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108)
  - cleanup: fix interface dependencies and shutdown order (bsc#1205604)
    - Remove port arrays from bond,team,bridge,ovs-bridge (redundant)
      and consistently use config and state info attached to the port
      interface as in rtnetlink(7).
    - Cleanup ifcfg parsing, schema configuration and service properties
    - Migrate ports in xml config and policies already applied in nanny
    - Remove &quot;missed config&quot; generation from finite state machine, which
      is completed while parsing the config or while xml config migration.
    - Issue a warning when &quot;lower&quot; interface (e.g. eth0) config is missed
      while parsing config depending on it (e.g. eth0.42 vlan).
    - Resolve ovs master to the effective bridge in config and wickedd
    - Implement netif-check-state require checks using system relations
      from wickedd/kernel instead of config relations for ifdown and add
      linkDown and deleteDevice checks to all master and lower references.
    - Add a `wicked &lt;ifup|ifdown|ifreload&gt; --dry-run …` option to show the
      system/config interface hierarchies as notice with +/- marked
      interfaces to setup and/or shutdown.
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.24.1" arch="src" src="src/wicked-0.6.75-150400.3.24.1.src.rpm">
          <filename>wicked-0.6.75-150400.3.24.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.24.1" arch="x86_64" src="x86_64/wicked-0.6.75-150400.3.24.1.x86_64.rpm">
          <filename>wicked-0.6.75-150400.3.24.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150400.3.24.1" arch="x86_64" src="x86_64/wicked-service-0.6.75-150400.3.24.1.x86_64.rpm">
          <filename>wicked-service-0.6.75-150400.3.24.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.24.1" arch="s390x" src="s390x/wicked-0.6.75-150400.3.24.1.s390x.rpm">
          <filename>wicked-0.6.75-150400.3.24.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150400.3.24.1" arch="s390x" src="s390x/wicked-service-0.6.75-150400.3.24.1.s390x.rpm">
          <filename>wicked-service-0.6.75-150400.3.24.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.24.1" arch="aarch64" src="aarch64/wicked-0.6.75-150400.3.24.1.aarch64.rpm">
          <filename>wicked-0.6.75-150400.3.24.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150400.3.24.1" arch="aarch64" src="aarch64/wicked-service-0.6.75-150400.3.24.1.aarch64.rpm">
          <filename>wicked-service-0.6.75-150400.3.24.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1660</id>
    <title>Recommended update for pam_pkcs11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715769450"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221255" id="1221255" title="L3-Question: pam_pkcs11 package PATCH default configuration issue with nss_dir =" type="bugzilla"/>
    </references>
    <description>This update for pam_pkcs11 fixes the following issue:

- Fix 0001-Set-slot_num-configuration-parameter-to-0-by-default (bsc#1221255)
</description>
    <pkglist>
      <collection>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="src" src="src/pam_pkcs11-0.6.10-150100.3.3.2.src.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.src.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="x86_64" src="x86_64/pam_pkcs11-0.6.10-150100.3.3.2.x86_64.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="s390x" src="s390x/pam_pkcs11-0.6.10-150100.3.3.2.s390x.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.s390x.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.10" release="150100.3.3.2" arch="aarch64" src="aarch64/pam_pkcs11-0.6.10-150100.3.3.2.aarch64.rpm">
          <filename>pam_pkcs11-0.6.10-150100.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1704</id>
    <title>Security update for cairo</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716228605"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6462" id="CVE-2019-6462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6462" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1122321" id="1122321" title="VUL-1: CVE-2019-6462: cairo: An infinite loop in the function _arc_error_normalized in the file cairo-arc.c is discovered" type="bugzilla"/>
    </references>
    <description>This update for cairo fixes the following issues:

- CVE-2019-6462: Fixed a potentially infinite loop (bsc#1122321).
</description>
    <pkglist>
      <collection>
        <package name="cairo" epoch="0" version="1.16.0" release="150400.11.3.1" arch="src" src="src/cairo-1.16.0-150400.11.3.1.src.rpm">
          <filename>cairo-1.16.0-150400.11.3.1.src.rpm</filename>
        </package>
        <package name="libcairo-gobject2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="x86_64" src="x86_64/libcairo-gobject2-1.16.0-150400.11.3.1.x86_64.rpm">
          <filename>libcairo-gobject2-1.16.0-150400.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcairo2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="x86_64" src="x86_64/libcairo2-1.16.0-150400.11.3.1.x86_64.rpm">
          <filename>libcairo2-1.16.0-150400.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcairo-gobject2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="s390x" src="s390x/libcairo-gobject2-1.16.0-150400.11.3.1.s390x.rpm">
          <filename>libcairo-gobject2-1.16.0-150400.11.3.1.s390x.rpm</filename>
        </package>
        <package name="libcairo2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="s390x" src="s390x/libcairo2-1.16.0-150400.11.3.1.s390x.rpm">
          <filename>libcairo2-1.16.0-150400.11.3.1.s390x.rpm</filename>
        </package>
        <package name="libcairo-gobject2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="aarch64" src="aarch64/libcairo-gobject2-1.16.0-150400.11.3.1.aarch64.rpm">
          <filename>libcairo-gobject2-1.16.0-150400.11.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcairo2" epoch="0" version="1.16.0" release="150400.11.3.1" arch="aarch64" src="aarch64/libcairo2-1.16.0-150400.11.3.1.aarch64.rpm">
          <filename>libcairo2-1.16.0-150400.11.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1762</id>
    <title>Security update for perl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716387286"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082233" id="1082233" title="VUL-0: CVE-2018-6798: perl: heap buffer overflow bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213638" id="1213638" title="Perl: Can't locate object method &quot;del_session&quot; via package &quot;Net::FTP::_SSL_SingleSessionCache&quot; — ref:_00D1igLOd._5005qTfA6J:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082216" id="1082216" title="VUL-0: CVE-2018-6913: perl: heap buffer overflow bug" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6913" id="CVE-2018-6913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6913" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6798" id="CVE-2018-6798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6798" type="cve"/>
    </references>
    <description>This update for perl fixes the following issues:

Security issues fixed:

- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)
- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)

Non-security issue fixed:

- make Net::FTP work with TLS 1.3 (bsc#1213638)
</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="src" src="src/perl-5.26.1-150300.17.17.1.src.rpm">
          <filename>perl-5.26.1-150300.17.17.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="x86_64" src="x86_64/perl-5.26.1-150300.17.17.1.x86_64.rpm">
          <filename>perl-5.26.1-150300.17.17.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.17.1" arch="x86_64" src="x86_64/perl-base-5.26.1-150300.17.17.1.x86_64.rpm">
          <filename>perl-base-5.26.1-150300.17.17.1.x86_64.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="s390x" src="s390x/perl-5.26.1-150300.17.17.1.s390x.rpm">
          <filename>perl-5.26.1-150300.17.17.1.s390x.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.17.1" arch="s390x" src="s390x/perl-base-5.26.1-150300.17.17.1.s390x.rpm">
          <filename>perl-base-5.26.1-150300.17.17.1.s390x.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.17.1" arch="aarch64" src="aarch64/perl-5.26.1-150300.17.17.1.aarch64.rpm">
          <filename>perl-5.26.1-150300.17.17.1.aarch64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.17.1" arch="aarch64" src="aarch64/perl-base-5.26.1-150300.17.17.1.aarch64.rpm">
          <filename>perl-base-5.26.1-150300.17.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1647</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1715697056"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190576" id="1190576" title="Update Broadcom Emulex lpfc driver to 14.0.0.2 with bug fixes and Prism+ ASIC support" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192145" id="1192145" title="Update Broadcom Emulex lpfc driver to 14.0.0.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192354" id="1192354" title="Update sound drivers for SLE15-SP4 kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192837" id="1192837" title="Kernel bugs/lockups as consequence of cfs_rq leaf list corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203906" id="1203906" title="cgroup: cgroup_get_from_id() must check the looked-up kn is a  directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203935" id="1203935" title="qla2xxx: update driver to 10.02.07.900-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204614" id="1204614" title="VUL-0: CVE-2022-42432: kernel-source-rt,kernel-source-azure,kernel-source: nftables: leak of stale stack data to userspace via nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206881" id="1206881" title="[PATCH] ext4: fix bug in extents parsing when eh_entries == 0 and  eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215221" id="1215221" title="VUL-0: CVE-2023-4881: kernel-source: stack out-of-bounds write in nft_exthdr ip/tcp/sctp functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216223" id="1216223" title="ibmvfc max_xfer_size is missing ref:_00D1igLOd._5005qXBPNc:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218336" id="1218336" title="VUL-0: CVE-2023-7042: kernel-source,kernel-source-azure,kernel-source-rt: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218479" id="1218479" title="VUL-0: CVE-2023-7192: kernel-source,kernel-source-azure,kernel-source-rt: refcount leak in ctnetlink_create_conntrack()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219104" id="1219104" title="VUL-0: CVE-2024-23848: kernel: use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219126" id="1219126" title="VUL-0: CVE-2024-23850: kernel: in btrfs_get_root_ref in fs/btrfs/disk-io.c there can be an assertion failure leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219169" id="1219169" title="VUL-0: CVE-2024-23307: kernel-source,kernel-source-azure,kernel-source-rt: Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219264" id="1219264" title="VUL-0: DISPUTED: CVE-2024-0841: kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220342" id="1220342" title="VUL-0: CVE-2024-26601: kernel-source,kernel-source-azure,kernel-source-rt: ext4: buddy bitmap corruption via fast commit replay" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220703" id="1220703" title="VUL-0: CVE-2023-52476: kernel: perf/x86/lbr: perf sampling NMI during vsyscall can cause unhandled page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220761" id="1220761" title="VUL-0: CVE-2021-47047: kernel: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220883" id="1220883" title="VUL-0: CVE-2023-52500: kernel: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221061" id="1221061" title="VUL-0: CVE-2023-52607: kernel: powerpc/mm: potential null-pointer dereference in pgtable_cache_add() if kasprintf() fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221088" id="1221088" title="VUL-0: CVE-2023-52590: kernel: ocfs2: Avoid touching renamed directory if parent does not change" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221293" id="1221293" title="VUL-0: CVE-2024-26614: kernel: tcp: make sure init the accept_queue's spinlocks once" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221299" id="1221299" title="VUL-0: CVE-2024-26610: kernel: wifi: iwlwifi: fix a memory corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221612" id="1221612" title="VUL-0: CVE-2023-52616: kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221830" id="1221830" title="VUL-0: CVE-2024-26642: kernel: netfilter: nf_tables: disallow anonymous set with timeout flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222117" id="1222117" title="VUL-0: CVE-2023-52628: kernel: netfilter: nftables: exthdr: 4-byte stack OOB write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222422" id="1222422" title="VUL-0: CVE-2024-26704: kernel: ext4: fix double-free of blocks due to wrong extents moved_len" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222430" id="1222430" title="VUL-0: CVE-2024-26792: kernel: btrfs: fix double free of anonymous device after snapshot creation failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222435" id="1222435" title="VUL-0: CVE-2024-26687: kernel: xen/events: close evtchn after mapping cleanup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222482" id="1222482" title="VUL-0: CVE-2024-26688: kernel: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222503" id="1222503" title="VUL-0: CVE-2024-26689: kernel: ceph: prevent use-after-free in encode_cap_msg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222536" id="1222536" title="VUL-0: CVE-2024-26727: kernel: btrfs: do not ASSERT() if the newly created subvolume already got read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222585" id="1222585" title="VUL-0: CVE-2024-26733: kernel: arp: Prevent overflow in arp_req_get()." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222618" id="1222618" title="VUL-0: CVE-2024-26773: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222624" id="1222624" title="VUL-0: CVE-2024-26816: kernel: startup_xen address leaked in user readable /sys/kernel/notes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222660" id="1222660" title="VUL-0: CVE-2021-47181: kernel: usb: musb: tusb6010: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222662" id="1222662" title="VUL-0: CVE-2021-47182: kernel: scsi: core: Fix scsi_mode_sense() buffer length handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222664" id="1222664" title="VUL-0: CVE-2021-47183: kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222666" id="1222666" title="VUL-0: CVE-2021-47184: kernel: i40e: Fix NULL ptr dereference on VSI filter sync" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222671" id="1222671" title="VUL-0: CVE-2021-47188: kernel: scsi: ufs: core: Improve SCSI abort handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222703" id="1222703" title="VUL-0: CVE-2021-47187: kernel: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222704" id="1222704" title="VUL-0: CVE-2021-47215: kernel: net/mlx5e: kTLS, Fix crash in RX resync flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222706" id="1222706" title="VUL-0: CVE-2021-47189: kernel: btrfs: fix memory ordering between normal and ordered work functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222709" id="1222709" title="VUL-0: CVE-2021-47212: kernel: net/mlx5: Update error handler for UCTX and UMEM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222726" id="1222726" title="VUL-0: CVE-2024-26766: kernel: IB/hfi1: sdma.h tx-&gt;num_descs off-by-one error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222773" id="1222773" title="VUL-0: CVE-2021-47196: kernel: RDMA/core: Set send and receive CQ before forwarding to the driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222776" id="1222776" title="VUL-0: CVE-2021-47197: kernel: net/mlx5e: nullify cq-&gt;dbg pointer in mlx5_debug_cq_remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222785" id="1222785" title="VUL-0: CVE-2021-47199: kernel: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222787" id="1222787" title="VUL-0: CVE-2021-47204: kernel: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222790" id="1222790" title="VUL-0: CVE-2021-47207: kernel: ALSA: gus: null pointer dereference on pointer block" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222791" id="1222791" title="VUL-0: CVE-2021-47218: kernel: selinux: fix NULL-pointer dereference when hashtab allocation fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222792" id="1222792" title="VUL-0: CVE-2021-47201: kernel: iavf: panic encountered when the interface is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222796" id="1222796" title="VUL-0: CVE-2021-47209: kernel: sched/fair: Prevent dead task groups from regaining cfs_rq's" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222824" id="1222824" title="VUL-0: CVE-2021-47219: kernel: scsi: scsi_debug: out-of-bound read in resp_report_tgtpgs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222829" id="1222829" title="VUL-0: CVE-2021-47194: kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222832" id="1222832" title="VUL-0: CVE-2021-47195: kernel: spi: fix use-after-free of the add_lock mutex" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222836" id="1222836" title="VUL-0: CVE-2021-47217: kernel: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222838" id="1222838" title="VUL-0: CVE-2021-47200: kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222866" id="1222866" title="VUL-0: CVE-2021-47191: kernel: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222867" id="1222867" title="VUL-0: CVE-2021-47192: kernel: scsi: core: sysfs: Fix hang when device state is set via sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222869" id="1222869" title="VUL-0: CVE-2021-47211: kernel: ALSA: usb-audio: null pointer dereference on pointer cs_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222876" id="1222876" title="VUL-0: CVE-2021-47216: kernel: scsi: advansys: kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222878" id="1222878" title="VUL-0: CVE-2021-47202: kernel: thermal: NULL pointer dereferences in of_thermal_ functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222879" id="1222879" title="VUL-0: CVE-2021-47193: kernel: scsi: pm80xx: Fix memory leak during rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222881" id="1222881" title="VUL-0: CVE-2021-47203: kernel: scsi: lpfc: list_add() corruption in lpfc_drain_txq()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222883" id="1222883" title="VUL-0: CVE-2021-47198: kernel: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222888" id="1222888" title="VUL-0: CVE-2021-47205: kernel: clk: sunxi-ng: Unregister clocks/resets when unbinding" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222894" id="1222894" title="VUL-0: CVE-2021-47206: kernel: usb: host: ohci-tmio: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222901" id="1222901" title="VUL-0: CVE-2021-47210: kernel: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223016" id="1223016" title="VUL-0: CVE-2024-26898: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223187" id="1223187" title="VUL-0: CVE-2024-26903: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223380" id="1223380" title="L3: PANIC: &quot;Kernel panic - not syncing: NMI: Not continuing&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223474" id="1223474" title="VUL-0: CVE-2022-48653: kernel: ice: &quot;scheduling while atomic&quot; BUG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223475" id="1223475" title="VUL-0: CVE-2022-48631: kernel: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth &gt; 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223477" id="1223477" title="VUL-0: CVE-2022-48655: kernel: firmware: arm_scmi: out-of-bound violations if the SCMI driver misbehave" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223479" id="1223479" title="VUL-0: CVE-2022-48656: kernel: dmaengine: ti: refcount leak bug in of_xudma_dev_get()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223482" id="1223482" title="VUL-0: CVE-2022-48654: kernel: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223484" id="1223484" title="VUL-0: CVE-2022-48657: kernel: arm64: topology: possible overflow in amu_fie_setup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223487" id="1223487" title="VUL-0: CVE-2022-48660: kernel: gpiolib: cdev: warning in lineevent_state" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223503" id="1223503" title="VUL-0: CVE-2022-48648: kernel: sfc: fix null pointer dereference in efx_hard_start_xmit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223509" id="1223509" title="VUL-0: CVE-2022-48650: kernel: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223513" id="1223513" title="VUL-0: CVE-2022-48651: kernel: ipvlan: Fix out-of-bound bugs caused by unset skb-&gt;mac_header" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223516" id="1223516" title="VUL-0: CVE-2022-48668: kernel: smb3: fix temporary data corruption in collapse range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223517" id="1223517" title="VUL-0: CVE-2022-48637: kernel: bnxt: prevent skb UAF after handing over to PTP worker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223518" id="1223518" title="VUL-0: CVE-2022-48667: kernel: smb3: fix temporary data corruption in insert range" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223519" id="1223519" title="VUL-0: CVE-2022-48647: kernel: sfc: fix TX channel offset when using legacy interrupts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223522" id="1223522" title="VUL-0: CVE-2022-48638: kernel: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223523" id="1223523" title="VUL-0: CVE-2022-48663: kernel: gpio: mockup: NULL pointer dereference when removing debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223705" id="1223705" title="VUL-0: CVE-2024-27389: kernel: pstore: inode: only d_invalidate() is needed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223824" id="1223824" title="VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" id="CVE-2024-27389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" id="CVE-2024-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" id="CVE-2022-48631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48631" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" id="CVE-2024-23307" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23307" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" id="CVE-2024-23848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" id="CVE-2022-48663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" id="CVE-2022-48638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48638" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" id="CVE-2022-48647" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48647" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" id="CVE-2022-48667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48667" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" id="CVE-2022-48637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" id="CVE-2022-48668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48668" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" id="CVE-2022-48650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48650" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" id="CVE-2022-48648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48648" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" id="CVE-2022-48660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48660" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" id="CVE-2022-48657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48657" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" id="CVE-2022-48654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" id="CVE-2022-48656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" id="CVE-2022-48653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48653" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" id="CVE-2022-48651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48651" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" id="CVE-2022-48655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" id="CVE-2021-47047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47047" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" id="CVE-2023-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" id="CVE-2024-26816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" id="CVE-2024-26898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" id="CVE-2024-26903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" id="CVE-2024-0841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" id="CVE-2024-26688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" id="CVE-2024-23850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" id="CVE-2024-26792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" id="CVE-2024-26733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" id="CVE-2021-47207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47207" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" id="CVE-2021-47211" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47211" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" id="CVE-2021-47196" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47196" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" id="CVE-2021-47187" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47187" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" id="CVE-2021-47194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47194" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" id="CVE-2021-47205" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47205" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" id="CVE-2021-47200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" id="CVE-2021-47184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47184" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" id="CVE-2021-47201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" id="CVE-2021-47217" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47217" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" id="CVE-2021-47204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" id="CVE-2021-47212" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47212" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" id="CVE-2021-47199" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47199" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" id="CVE-2021-47215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47215" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" id="CVE-2021-47197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47197" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" id="CVE-2021-47209" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47209" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" id="CVE-2021-47216" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47216" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" id="CVE-2021-47192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" id="CVE-2021-47203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47203" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" id="CVE-2021-47198" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47198" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" id="CVE-2021-47193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" id="CVE-2021-47191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" id="CVE-2021-47219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47219" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" id="CVE-2021-47188" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47188" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" id="CVE-2021-47218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47218" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" id="CVE-2021-47202" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47202" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" id="CVE-2021-47185" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47185" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" id="CVE-2021-47206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" id="CVE-2021-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47210" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" id="CVE-2024-26610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" id="CVE-2024-26687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" id="CVE-2024-26601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" id="CVE-2024-26773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" id="CVE-2023-52590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52590" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" id="CVE-2021-47195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47195" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" id="CVE-2024-26766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" id="CVE-2021-47189" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47189" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" id="CVE-2021-47183" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47183" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" id="CVE-2021-47182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47182" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" id="CVE-2021-47181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" id="CVE-2024-26689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26689" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" id="CVE-2024-26727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" id="CVE-2024-26704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" id="CVE-2023-52500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" id="CVE-2023-52628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52628" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" id="CVE-2024-26642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" id="CVE-2023-7192" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7192" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" id="CVE-2024-26614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" id="CVE-2023-52607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" id="CVE-2023-7042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" id="CVE-2023-52476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52476" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
- CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-&gt;mac_header (bsc#1223513).
- CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
- CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).
- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
- CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
- CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
- CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
- CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).


The following non-security bugs were fixed:

- Call flush_delayed_fput() from nfsd main-loop (bsc#1223380).
- ibmvfc: make 'max_sectors' a module option (bsc#1216223).
- scsi: Update max_hw_sectors on rescan (bsc#1216223).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.79.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.79.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.79.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.79.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.79.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.79.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1797</id>
    <title>Recommended update for ipset</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716901302"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223370" id="1223370" title="re-compiling ipset against Linux kernel 5.14.21-150500.55.52.1 fails [ref:_00D1igLOd._500Tr9FKhG:ref]" type="bugzilla"/>
    </references>
    <description>This update for ipset fixes the following issue:

- Fix build with latest kernel (bsc#1223370)
</description>
    <pkglist>
      <collection>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="src" src="src/ipset-7.15-150400.12.6.4.src.rpm">
          <filename>ipset-7.15-150400.12.6.4.src.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="x86_64" src="x86_64/ipset-7.15-150400.12.6.4.x86_64.rpm">
          <filename>ipset-7.15-150400.12.6.4.x86_64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.6.4" arch="x86_64" src="x86_64/libipset13-7.15-150400.12.6.4.x86_64.rpm">
          <filename>libipset13-7.15-150400.12.6.4.x86_64.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="s390x" src="s390x/ipset-7.15-150400.12.6.4.s390x.rpm">
          <filename>ipset-7.15-150400.12.6.4.s390x.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.6.4" arch="s390x" src="s390x/libipset13-7.15-150400.12.6.4.s390x.rpm">
          <filename>libipset13-7.15-150400.12.6.4.s390x.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.6.4" arch="aarch64" src="aarch64/ipset-7.15-150400.12.6.4.aarch64.rpm">
          <filename>ipset-7.15-150400.12.6.4.aarch64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.6.4" arch="aarch64" src="aarch64/libipset13-7.15-150400.12.6.4.aarch64.rpm">
          <filename>libipset13-7.15-150400.12.6.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1940</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717769258"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223107" id="1223107" title="Register RMT server failed to verify certificate during installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220679" id="1220679" title="System not registered after rollback from 6.0" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Version update
  * Fix certificate import for Yast when using a registration proxy with
    self-signed SSL certificate (bsc#1223107) 
  * Allow &quot;--rollback&quot; flag to run on readonly filesystem (bsc#1220679)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150400.3.31.2" arch="src" src="src/suseconnect-ng-1.9.0-150400.3.31.2.src.rpm">
          <filename>suseconnect-ng-1.9.0-150400.3.31.2.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150400.3.31.2" arch="x86_64" src="x86_64/suseconnect-ng-1.9.0-150400.3.31.2.x86_64.rpm">
          <filename>suseconnect-ng-1.9.0-150400.3.31.2.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150400.3.31.2" arch="s390x" src="s390x/suseconnect-ng-1.9.0-150400.3.31.2.s390x.rpm">
          <filename>suseconnect-ng-1.9.0-150400.3.31.2.s390x.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.9.0" release="150400.3.31.2" arch="aarch64" src="aarch64/suseconnect-ng-1.9.0-150400.3.31.2.aarch64.rpm">
          <filename>suseconnect-ng-1.9.0-150400.3.31.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1771</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716491198"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224277" id="1224277" title="VUL-0: ucode-intel: 20240514 release" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733" id="CVE-2023-45733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745" id="CVE-2023-45745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855" id="CVE-2023-47855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103" id="CVE-2023-46103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)

- CVE-2023-45733: Fixed a potential security vulnerability in some
  Intel® Processors that may have allowed information disclosure.
- CVE-2023-46103: Fixed a potential security vulnerability in Intel®
  Core™ Ultra Processors that may have allowed denial of service.
- CVE-2023-45745,CVE-2023-47855: Fixed a potential security
  vulnerabilities in some Intel® Trust Domain Extensions (TDX) module
  software that may have allowed escalation of privilege.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240514" release="150200.41.1" arch="src" src="src/ucode-intel-20240514-150200.41.1.src.rpm">
          <filename>ucode-intel-20240514-150200.41.1.src.rpm</filename>
        </package>
        <package name="ucode-intel" epoch="0" version="20240514" release="150200.41.1" arch="x86_64" src="x86_64/ucode-intel-20240514-150200.41.1.x86_64.rpm">
          <filename>ucode-intel-20240514-150200.41.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1863</id>
    <title>Security update for python-Jinja2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717071530"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064" id="CVE-2024-34064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195" id="CVE-2024-22195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218722" id="1218722" title="VUL-0: CVE-2024-22195: python-Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223980" id="1223980" title="VUL-0: CVE-2024-34064: python-Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" type="bugzilla"/>
    </references>
    <description>This update for python-Jinja2 fixes the following issues:

- Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722)
</description>
    <pkglist>
      <collection>
        <package name="python-Jinja2" epoch="0" version="2.10.1" release="150000.3.13.1" arch="src" src="src/python-Jinja2-2.10.1-150000.3.13.1.src.rpm">
          <filename>python-Jinja2-2.10.1-150000.3.13.1.src.rpm</filename>
        </package>
        <package name="python3-Jinja2" epoch="0" version="2.10.1" release="150000.3.13.1" arch="noarch" src="noarch/python3-Jinja2-2.10.1-150000.3.13.1.noarch.rpm">
          <filename>python3-Jinja2-2.10.1-150000.3.13.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1880</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717137936"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" id="CVE-2024-35195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224788" id="1224788" title="VUL-0: CVE-2024-35195: python-requests: session object does not verify requests after making first request with verify=False" type="bugzilla"/>
    </references>
    <description>This update for python-requests fixes the following issues:

- CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.25.1" release="150300.3.9.1" arch="src" src="src/python-requests-2.25.1-150300.3.9.1.src.rpm">
          <filename>python-requests-2.25.1-150300.3.9.1.src.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.25.1" release="150300.3.9.1" arch="noarch" src="noarch/python3-requests-2.25.1-150300.3.9.1.noarch.rpm">
          <filename>python3-requests-2.25.1-150300.3.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2108</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718904972"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" id="CVE-2023-45288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221400" id="1221400" title="VUL-0: CVE-2023-45288: go1.21,go1.22: net/http, x/net/http2: close connections when receiving too many headers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224323" id="1224323" title="VUL-0: containerd: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.7.17.

- CVE-2023-45288: Fixed the limit of CONTINUATION frames read for an HTTP/2 request (bsc#1221400).
- Fixed /sys/devices/virtual/powercap accessibility by default containers to mitigate power-based side channel attacks (bsc#1224323).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="src" src="src/containerd-1.7.17-150000.111.3.src.rpm">
          <filename>containerd-1.7.17-150000.111.3.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="x86_64" src="x86_64/containerd-1.7.17-150000.111.3.x86_64.rpm">
          <filename>containerd-1.7.17-150000.111.3.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="s390x" src="s390x/containerd-1.7.17-150000.111.3.s390x.rpm">
          <filename>containerd-1.7.17-150000.111.3.s390x.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.17" release="150000.111.3" arch="aarch64" src="aarch64/containerd-1.7.17-150000.111.3.aarch64.rpm">
          <filename>containerd-1.7.17-150000.111.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1830</id>
    <title>Security update for glib2</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716984545"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" id="CVE-2024-34397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224044" id="1224044" title="VUL-0: CVE-2024-34397: glib2: signal subscriptions are vulnerable to unicast spoofing" type="bugzilla"/>
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.11.1" arch="src" src="src/glib2-2.70.5-150400.3.11.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/glib2-tools-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>glib2-tools-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libgio-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libglib-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libgmodule-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="s390x" src="s390x/libgobject-2_0-0-2.70.5-150400.3.11.1.s390x.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.11.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1898</id>
    <title>Recommended update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1717411264"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224877" id="1224877" title="L3: Unsolicited arping takes ~100 times longer on SLES 15 SP5 than on 12 SP5" type="bugzilla"/>
    </references>
    <description>This update for iputils fixes the following issues:

- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
- &quot;arping: Fix 1s delay on exit for unsolicited arpings&quot;,
  Backport upstream fix (bsc#1224877)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.8.2" arch="src" src="src/iputils-20211215-150400.3.8.2.src.rpm">
          <filename>iputils-20211215-150400.3.8.2.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.8.2" arch="x86_64" src="x86_64/iputils-20211215-150400.3.8.2.x86_64.rpm">
          <filename>iputils-20211215-150400.3.8.2.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.8.2" arch="s390x" src="s390x/iputils-20211215-150400.3.8.2.s390x.rpm">
          <filename>iputils-20211215-150400.3.8.2.s390x.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.8.2" arch="aarch64" src="aarch64/iputils-20211215-150400.3.8.2.aarch64.rpm">
          <filename>iputils-20211215-150400.3.8.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-1802</id>
    <title>Recommended update for e2fsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1716906041"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223596" id="1223596" title="L3: Unable to read/write to ext4 file. Error: &quot;unexpected EA_INODE flag&quot;" type="bugzilla"/>
    </references>
    <description>This update for e2fsprogs fixes the following issues:

EA Inode handling fixes:
- ext2fs: avoid re-reading inode multiple times (bsc#1223596)
- e2fsck: fix potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck: add more checks for ea inode consistency (bsc#1223596)
- e2fsck: fix golden output of several tests (bsc#1223596)
</description>
    <pkglist>
      <collection>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="src" src="src/e2fsprogs-1.46.4-150400.3.6.2.src.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.src.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="x86_64" src="x86_64/e2fsprogs-1.46.4-150400.3.6.2.x86_64.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="x86_64" src="x86_64/libcom_err2-1.46.4-150400.3.6.2.x86_64.rpm">
          <filename>libcom_err2-1.46.4-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="x86_64" src="x86_64/libext2fs2-1.46.4-150400.3.6.2.x86_64.rpm">
          <filename>libext2fs2-1.46.4-150400.3.6.2.x86_64.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="s390x" src="s390x/e2fsprogs-1.46.4-150400.3.6.2.s390x.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="s390x" src="s390x/libcom_err2-1.46.4-150400.3.6.2.s390x.rpm">
          <filename>libcom_err2-1.46.4-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="s390x" src="s390x/libext2fs2-1.46.4-150400.3.6.2.s390x.rpm">
          <filename>libext2fs2-1.46.4-150400.3.6.2.s390x.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.46.4" release="150400.3.6.2" arch="aarch64" src="aarch64/e2fsprogs-1.46.4-150400.3.6.2.aarch64.rpm">
          <filename>e2fsprogs-1.46.4-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="aarch64" src="aarch64/libcom_err2-1.46.4-150400.3.6.2.aarch64.rpm">
          <filename>libcom_err2-1.46.4-150400.3.6.2.aarch64.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.46.4" release="150400.3.6.2" arch="aarch64" src="aarch64/libext2fs2-1.46.4-150400.3.6.2.aarch64.rpm">
          <filename>libext2fs2-1.46.4-150400.3.6.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2003</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718170255"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35235" id="CVE-2024-35235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35235" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225365" id="1225365" title="VUL-0: EMBARGOED: CVE-2024-35235: cups: Listen port arbitrary chmod 0140777" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223179" id="1223179" title="CUPS: as non-root user &quot;cancel -a ...&quot; fails &quot;Unauthorized&quot; with &quot;DefaultAuthType Negotiate&quot;" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365)
- Handle local 'Negotiate' authentication response for cli clients (bsc#1223179)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.59.1" arch="src" src="src/cups-2.2.7-150000.3.59.1.src.rpm">
          <filename>cups-2.2.7-150000.3.59.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.59.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.59.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.59.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.59.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.59.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.59.1" arch="s390x" src="s390x/cups-config-2.2.7-150000.3.59.1.s390x.rpm">
          <filename>cups-config-2.2.7-150000.3.59.1.s390x.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.59.1" arch="s390x" src="s390x/libcups2-2.2.7-150000.3.59.1.s390x.rpm">
          <filename>libcups2-2.2.7-150000.3.59.1.s390x.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.59.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.59.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.59.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.59.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.59.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.59.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2028</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718291569"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3164" id="CVE-2023-3164" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3164" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212233" id="1212233" title="VUL-0: CVE-2023-3164: tiff: heap-buffer-overflow in extractImageSection()" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233)
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.44.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.44.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.44.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.44.1" arch="src" src="src/tiff-4.0.9-150000.45.44.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.44.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.44.1" arch="s390x" src="s390x/libtiff5-4.0.9-150000.45.44.1.s390x.rpm">
          <filename>libtiff5-4.0.9-150000.45.44.1.s390x.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.44.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.44.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.44.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2024</id>
    <title>Recommended update for jitterentropy</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718288130"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209627" id="1209627" title="jitterentropy: Stack corruption on s390x architecture" type="bugzilla"/>
    </references>
    <description>This update for jitterentropy fixes the following issues:

- Fixed a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.

Updated to 3.4.1

* add FIPS 140 hints to man page
* simplify the test tool to search for optimal configurations
* fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
* enhancement: add ARM64 assembler code to read high-res timer</description>
    <pkglist>
      <collection>
        <package name="jitterentropy" epoch="0" version="3.4.1" release="150000.1.12.1" arch="src" src="src/jitterentropy-3.4.1-150000.1.12.1.src.rpm">
          <filename>jitterentropy-3.4.1-150000.1.12.1.src.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="150000.1.12.1" arch="x86_64" src="x86_64/jitterentropy-devel-3.4.1-150000.1.12.1.x86_64.rpm">
          <filename>jitterentropy-devel-3.4.1-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="150000.1.12.1" arch="x86_64" src="x86_64/libjitterentropy3-3.4.1-150000.1.12.1.x86_64.rpm">
          <filename>libjitterentropy3-3.4.1-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="150000.1.12.1" arch="s390x" src="s390x/jitterentropy-devel-3.4.1-150000.1.12.1.s390x.rpm">
          <filename>jitterentropy-devel-3.4.1-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="150000.1.12.1" arch="s390x" src="s390x/libjitterentropy3-3.4.1-150000.1.12.1.s390x.rpm">
          <filename>libjitterentropy3-3.4.1-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="150000.1.12.1" arch="aarch64" src="aarch64/jitterentropy-devel-3.4.1-150000.1.12.1.aarch64.rpm">
          <filename>jitterentropy-devel-3.4.1-150000.1.12.1.aarch64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="150000.1.12.1" arch="aarch64" src="aarch64/libjitterentropy3-3.4.1-150000.1.12.1.aarch64.rpm">
          <filename>libjitterentropy3-3.4.1-150000.1.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2021</id>
    <title>Recommended update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718287825"/>
    <references/>
    <description>This update for iputils fixes the following issue:

- After upstream merged the fix, update git commit hashes
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.11.1" arch="src" src="src/iputils-20211215-150400.3.11.1.src.rpm">
          <filename>iputils-20211215-150400.3.11.1.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.11.1" arch="x86_64" src="x86_64/iputils-20211215-150400.3.11.1.x86_64.rpm">
          <filename>iputils-20211215-150400.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.11.1" arch="s390x" src="s390x/iputils-20211215-150400.3.11.1.s390x.rpm">
          <filename>iputils-20211215-150400.3.11.1.s390x.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.11.1" arch="aarch64" src="aarch64/iputils-20211215-150400.3.11.1.aarch64.rpm">
          <filename>iputils-20211215-150400.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2085</id>
    <title>recommended update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718789786"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225912" id="1225912" title="python-requests: Setting requests.Session.verify to a directory results in an exception with Python3" type="bugzilla"/>
    </references>
    <description>This update for python-requests fixes the following issue:

- Allow the usage of &quot;verify&quot; parameter as a directory. (bsc#1225912)
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.25.1" release="150300.3.12.2" arch="src" src="src/python-requests-2.25.1-150300.3.12.2.src.rpm">
          <filename>python-requests-2.25.1-150300.3.12.2.src.rpm</filename>
        </package>
        <package name="python3-requests" epoch="0" version="2.25.1" release="150300.3.12.2" arch="noarch" src="noarch/python3-requests-2.25.1-150300.3.12.2.noarch.rpm">
          <filename>python3-requests-2.25.1-150300.3.12.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2023</id>
    <title>Recommended update for socat</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718288078"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1160293" id="1160293" title="socat fails with -fno-common" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8413" id="PED-8413" title="socat 1.7.3.2 doesn't support TLS 1.3" type="jira"/>
    </references>
    <description>This update for socat fixes the following issues:

socat is updated to 1.8.0.0:

Primary feature is enabling TLS 1.3 support. (jsc#PED-8413)

    * Support for network namespaces (option netns)
    * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success
    * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following)
    * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL
    * New script socat-mux.sh allows n-to-1 / 1-to-n communications
    * New script socat-broker.sh allows group communications
    * Experimental socks5 client feature
    * Address ACCEPT-FD for systemd &quot;inetd&quot; mode
    * UDP-Lite and DCCP address types
    * Addresses SOCKETPAIR and SHELL
    * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes
    * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets
    * Simple statistics output with Socat option --statistics and with SIGUSR1
    * A couple of new options, many fixes and corrections, see file CHANGES

Update to 1.7.4.4:

  * FIX: In error.c msg2() there was a stack overflow on long messages: The
    terminating \0 Byte was written behind the last position.
  * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets
    arrived.
  * FIX: a couple of weaknesses and errors when accessing invalid or
    incompatible file system entries with UNIX domain, file, and generic
    addresses.
  * FIX: bad parser error message on &quot;socat /tmp/x\&quot;x/x -&quot;

Update to 1.7.4.3:

  * fixes the TCP_INFO issue that broke building on non-Linux platforms. 
  * building on AIX works again. 
  * A few more corrections and improvements have been added 

Update to version 1.7.4.2:

  * Fixes a lot of bugs, e.g., for options -r and -R.
  * Further bugfixes, see the CHANGES file

Update to 1.7.4.1:

  Security:

  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter. 
  * Many further bugfixes and new features, see the CHANGES file

</description>
    <pkglist>
      <collection>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="src" src="src/socat-1.8.0.0-150400.14.3.1.src.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.src.rpm</filename>
        </package>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="x86_64" src="x86_64/socat-1.8.0.0-150400.14.3.1.x86_64.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.x86_64.rpm</filename>
        </package>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="s390x" src="s390x/socat-1.8.0.0-150400.14.3.1.s390x.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.s390x.rpm</filename>
        </package>
        <package name="socat" epoch="0" version="1.8.0.0" release="150400.14.3.1" arch="aarch64" src="aarch64/socat-1.8.0.0-150400.14.3.1.aarch64.rpm">
          <filename>socat-1.8.0.0-150400.14.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2077</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718767991"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48622" id="CVE-2022-48622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48622" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223903" id="1223903" title="gdk-pixbuf-2.42.11 causes gkrellm to fail to load" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195391" id="1195391" title="identify and declare bash dependencies explicitly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219276" id="1219276" title="VUL-0: CVE-2022-48622: gdk-pixbuf,gtk2: heap memory corruption on gdk-pixbuf" type="bugzilla"/>
    </references>
    <description>This update for gdk-pixbuf fixes the following issues:

gdk-pixbuf was updated to version 2.42.12:

- Security issues fixed:

  * CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276)

- Changes in version 2.42.12:

  + ani: Reject files with multiple INA or IART chunks,
  + ani: validate chunk size,
  + Updated translations.

- Enable other image loaders such as xpm and xbm (bsc#1223903)

- Changes in version 2.42.11:

  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.

- Changes in version 2.42.10:

  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.

- Fixed loading of larger images
- Avoid Bash specific syntax in baselibs postscript (bsc#1195391) 
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.42.12" release="150400.5.9.1" arch="src" src="src/gdk-pixbuf-2.42.12-150400.5.9.1.src.rpm">
          <filename>gdk-pixbuf-2.42.12-150400.5.9.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="150400.5.9.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="150400.5.9.1" arch="s390x" src="s390x/gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.s390x.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="s390x" src="s390x/libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.s390x.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="s390x" src="s390x/typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.s390x.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.s390x.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="150400.5.9.1" arch="aarch64" src="aarch64/gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.aarch64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-150400.5.9.1.aarch64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="aarch64" src="aarch64/libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.aarch64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-150400.5.9.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="150400.5.9.1" arch="aarch64" src="aarch64/typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.aarch64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-150400.5.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2189</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1719297296"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174585" id="1174585" title="kernel lock up on IBS worker with 15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190569" id="1190569" title="[trackerbug] 15 SP4 nvme subsystem update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191949" id="1191949" title="VUL-1: CVE-2021-42327: kernel-source: dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192107" id="1192107" title="VUL-0: CVE-2021-43056: kernel-source: powerpc: KVM guest can trigger host crash on Power8" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193983" id="1193983" title="VUL-0: CVE-2021-4148: kernel-source-rt, kernel-source, kernel-source-azure: Improper implementation of block_invalidatepage() allows users to crash the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194288" id="1194288" title="[EAR - NOT FOR USA Citizens] PTF request for libfreebl3 to fix CVE-2021-43527 on sles12-sp2-ltss on x86_64 flavor ref:_00D1igLOd._5001io9v9G:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196869" id="1196869" title="cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196956" id="1196956" title="VUL-0: CVE-2021-39698:  kernel-source-rt,kernel-source-azure,kernel-source: use-after-free due to missing POLLFREE handling in aio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197915" id="1197915" title="btrfs: backport, from upstream, several fsync related performance patches and bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200313" id="1200313" title="[NetApp SLES15 SP4 Bug]: Host crash at nvme_tcp_init_iter() with header digest enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201308" id="1201308" title="HP Z2 G8 Workstation:  supportconfig reboots on systool command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201489" id="1201489" title="[NetApp SLES15 SP4 Bug]: Host crash at crypto_ahash_digest() during NVMe re-auth" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="Partner-L3: An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210335" id="1210335" title="VUL-0: CVE-2023-1829: kernel: Linux kernel: Vulnerabilities in the tcindex classifier" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213863" id="1213863" title="s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217169" id="1217169" title="VUL-0: CVE-2023-52655: kernel: malicious USB device impersonating an aqc111 device can make the kernel overstep a buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218917" id="1218917" title="VUL-0: CVE-2024-0639: kernel: potential deadlock on &amp;net-&gt;sctp.addr_wq_lock leading to DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220492" id="1220492" title="SLES15SP6 - kdump is failing over NFS configured over HNV device with IOMMU call traces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220783" id="1220783" title="synth uevent: /devices/vio: failed to send uevent - ref:_00D1igLOd._500Tr56lz5:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221958" id="1221958" title="L3: Checksum errors on SCTP traffic through IPVS  [ref:_00D1igLOd._500Tr7dsRC:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: CVE-2023-52880: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222976" id="1222976" title="VUL-0: CVE-2024-26840: kernel: cachefiles: memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223057" id="1223057" title="VUL-0: CVE-2024-26852: kernel: net/ipv6: UAF in ip6_route_mpath_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223084" id="1223084" title="VUL-0: CVE-2024-26828: kernel: cifs: underflow in parse_server_interfaces()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223111" id="1223111" title="VUL-0: CVE-2024-26862: kernel: packet: data-races in ignore_outgoing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223138" id="1223138" title="VUL-0: CVE-2024-26921: kernel: inet: inet_defrag: prevent sk release while still in use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223390" id="1223390" title="VUL-0: CVE-2024-26925: kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223481" id="1223481" title="VUL-0: CVE-2022-48632: kernel: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223501" id="1223501" title="VUL-0: CVE-2022-48634: kernel: drm/gma500: Fix BUG: sleeping function called from invalid context errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223505" id="1223505" title="VUL-0: CVE-2022-48662: kernel: drm/i915/gem: GPF in i915_perf_open_ioctl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223512" id="1223512" title="VUL-0: CVE-2022-48636: kernel: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223520" id="1223520" title="VUL-0: CVE-2022-48652: kernel: ice: Fix crash by keep old cfg when update TCs more than queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223532" id="1223532" title="VUL-0: CVE-2024-26928: kernel: smb: client: fix potential UAF in cifs_debug_files_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223626" id="1223626" title="VUL-0: CVE-2024-26930: kernel: scsi: qla2xxx: double free of the ha-&gt;vp_map pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223715" id="1223715" title="VUL-0: CVE-2024-26929: kernel: scsi: qla2xxx: double free of fcport" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223894" id="1223894" title="VUL-0: CVE-2022-48675: kernel: IB/core: fix a nested dead lock as part of ODP flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223921" id="1223921" title="VUL-0: CVE-2022-48701: kernel: ALSA: usb-audio: out-of-bounds bug in __snd_usb_parse_audio_interface()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223922" id="1223922" title="VUL-0: CVE-2022-48697: kernel: nvmet: fix a use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223923" id="1223923" title="VUL-0: CVE-2022-48702: kernel: ALSA: emu10k1: out of bounds access in snd_emu10k1_pcm_channel_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223924" id="1223924" title="VUL-0: CVE-2022-48703: kernel: thermal/int340x_thermal: NULL point dereference in  data_vault_read() when accessing the 0x10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223929" id="1223929" title="VUL-0: CVE-2022-48671: kernel: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223931" id="1223931" title="VUL-0: CVE-2022-48672: kernel: of: fdt: fix off-by-one error in unflatten_dt_nodes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223932" id="1223932" title="VUL-0: CVE-2022-48704: kernel: drm/radeon: panic on invalid kernel paging request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223934" id="1223934" title="VUL-0: CVE-2022-48673: kernel: net/smc: Fix possible access to freed memory in link clear" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223941" id="1223941" title="VUL-0: CVE-2022-48695: kernel: scsi: mpt3sas: Fix use-after-free warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223948" id="1223948" title="VUL-0: CVE-2022-48686: kernel: nvme-tcp: fix UAF when detecting digest errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223952" id="1223952" title="VUL-0: CVE-2022-48687: kernel: ipv6: sr: fix out-of-bounds read when setting HMAC data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223953" id="1223953" title="VUL-0: CVE-2022-48688: kernel: i40e: fix kernel crash during module removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223957" id="1223957" title="VUL-0: CVE-2022-48700: kernel: vfio/type1: unpin zero pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223962" id="1223962" title="VUL-0: CVE-2022-48692: kernel: RDMA/srp: Set scmnd-&gt;result only when scmnd is not NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223963" id="1223963" title="VUL-0: CVE-2022-48693: kernel: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223964" id="1223964" title="VUL-0: CVE-2022-48694: kernel: RDMA/irdma: Fix drain SQ hang with no completion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223996" id="1223996" title="VUL-0: CVE-2022-48699: kernel: sched/debug: fix dentry leak in update_sched_domain_debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224085" id="1224085" title="L3-Question: Request for addition of patch &quot;filemap: Remove use of wait bookmarks&quot; to 15 SP4 and 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224099" id="1224099" title="VUL-0: CVE-2023-52654: kernel: io_uring/af_unix: disable sending io_uring over sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224137" id="1224137" title="IDPF needs a longer watchdog timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224174" id="1224174" title="VUL-0: CVE-2024-27398: kernel: Bluetooth: fix use-after-free bugs caused by sco_sock_timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224438" id="1224438" title="VUL-0: CVE-2024-27413: kernel: efi/capsule-loader: fix incorrect allocation size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224482" id="1224482" title="VUL-0: CVE-2024-35914: kernel: nfsd: Fix error cleanup path in nfsd_rename()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224494" id="1224494" title="VUL-0: CVE-2024-35904: kernel: selinux: avoid dereference of garbage after mount failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224511" id="1224511" title="VUL-0: CVE-2024-35895: kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224592" id="1224592" title="VUL-0: CVE-2024-35811: kernel: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224611" id="1224611" title="VUL-0: CVE-2023-52690: kernel: powerpc/powernv: Add a null pointer check to scom_debug_init_one()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224664" id="1224664" title="VUL-0: CVE-2024-35867: kernel: smb: client: fix potential UAF in cifs_stats_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224678" id="1224678" title="VUL-0: CVE-2024-35868: kernel: smb: client: fix potential UAF in cifs_stats_proc_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224682" id="1224682" title="VUL-0: CVE-2023-52686: kernel: powerpc/powernv: Add a null pointer check in opal_event_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224685" id="1224685" title="VUL-0: CVE-2024-35815: kernel: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224730" id="1224730" title="VUL-0: CVE-2023-52676: kernel: bpf: Guard stack limits against 32bit overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224736" id="1224736" title="VUL-0: CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224763" id="1224763" title="VUL-0: CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224816" id="1224816" title="VUL-0: CVE-2020-36788: kernel: drm/nouveau: avoid a use-after-free when BO init fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224895" id="1224895" title="VUL-0: CVE-2021-47365: kernel: afs: Fix page leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224898" id="1224898" title="VUL-0: CVE-2021-47492: kernel: mm, thp: bail out early in collapse_file for writeback page" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224900" id="1224900" title="VUL-0: CVE-2021-47491: kernel: mm: khugepaged: skip huge page collapse for special files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224901" id="1224901" title="VUL-0: CVE-2021-47489: kernel: drm/amdgpu: Fix even more out of bound writes from debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224902" id="1224902" title="VUL-0: CVE-2021-47488: kernel: cgroup: Fix memory leak caused by missing cgroup_bpf_offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224903" id="1224903" title="VUL-0: CVE-2021-47486: kernel: riscv, bpf: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224904" id="1224904" title="VUL-0: CVE-2021-47485: kernel: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224905" id="1224905" title="VUL-0: CVE-2021-47484: kernel: octeontx2-af: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224907" id="1224907" title="VUL-0: CVE-2021-47483: kernel: regmap: Fix possible double-free in regcache_rbtree_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224909" id="1224909" title="VUL-0: CVE-2021-47482: kernel: net: batman-adv: fix error handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224910" id="1224910" title="VUL-0: CVE-2021-47481: kernel: RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224911" id="1224911" title="VUL-0: CVE-2021-47479: kernel: staging: rtl8712: fix use-after-free in rtl8712_dl_fw" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224912" id="1224912" title="VUL-0: CVE-2021-47477: kernel: comedi: dt9812: fix DMA buffers on stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224913" id="1224913" title="VUL-0: CVE-2021-47476: kernel: comedi: ni_usb6501: fix NULL-deref in command paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224914" id="1224914" title="VUL-0: CVE-2021-47475: kernel: comedi: vmk80xx: fix transfer-buffer overflows" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224915" id="1224915" title="VUL-0: CVE-2021-47474: kernel: comedi: vmk80xx: fix bulk-buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224920" id="1224920" title="VUL-0: CVE-2021-47358: kernel: staging: greybus: uart: fix tty use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224928" id="1224928" title="VUL-0: CVE-2023-52840: kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224931" id="1224931" title="VUL-0: CVE-2023-52747: kernel: IB/hfi1: Restore allocated resources on failed copyout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224932" id="1224932" title="VUL-0: CVE-2023-52856: kernel: drm/bridge: lt8912b: Fix crash on bridge detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224937" id="1224937" title="VUL-0: CVE-2023-52870: kernel: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224942" id="1224942" title="VUL-0: CVE-2022-48708: kernel: pinctrl: single: fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224944" id="1224944" title="VUL-0: CVE-2023-52877: kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224945" id="1224945" title="VUL-0: CVE-2023-52702: kernel: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224947" id="1224947" title="VUL-0: CVE-2023-52798: kernel: wifi: ath11k: fix dfs radar event locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224956" id="1224956" title="VUL-0: CVE-2023-52730: kernel: mmc: sdio: fix possible resource leaks in some error paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224988" id="1224988" title="VUL-0: CVE-2023-52853: kernel: hid: cp2112: Fix duplicate workqueue initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225000" id="1225000" title="VUL-0: CVE-2023-52878: kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv:echo_skb is accessed out of bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225003" id="1225003" title="VUL-0: CVE-2023-52743: kernel: ice: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225005" id="1225005" title="VUL-0: CVE-2023-52738: kernel: drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225009" id="1225009" title="VUL-0: CVE-2023-52867: kernel: drm/radeon: possible buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225022" id="1225022" title="VUL-0: CVE-2023-52821: kernel: drm/panel: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225031" id="1225031" title="VUL-0: CVE-2023-52838: kernel: fbdev: imsttfb: fix a resource leak in probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225032" id="1225032" title="VUL-0: CVE-2023-52745: kernel: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225036" id="1225036" title="VUL-0: CVE-2023-52876: kernel: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225044" id="1225044" title="VUL-0: CVE-2023-52868: kernel: thermal: core: prevent potential string overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225076" id="1225076" title="VUL-0: CVE-2023-52825: kernel: drm/amdkfd: Fix a race condition of vram buffer unref in svm code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225077" id="1225077" title="VUL-0: CVE-2023-52826: kernel: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225082" id="1225082" title="VUL-0: CVE-2021-47397: kernel: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225086" id="1225086" title="VUL-0: CVE-2023-52865: kernel: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225092" id="1225092" title="VUL-0: CVE-2023-52781: kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225095" id="1225095" title="VUL-0: CVE-2022-48709: kernel: ice: switch: fix potential memleak in ice_add_adv_recipe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225096" id="1225096" title="VUL-0: CVE-2023-52875: kernel: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225106" id="1225106" title="VUL-0: CVE-2023-52788: kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225108" id="1225108" title="VUL-0: CVE-2023-52791: kernel: i2c: core: Run atomic i2c xfer when !preemptible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225109" id="1225109" title="VUL-0: CVE-2023-52707: kernel: sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225118" id="1225118" title="VUL-0: CVE-2023-52739: kernel: Fix page corruption caused by racy check in __free_pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225121" id="1225121" title="VUL-0: CVE-2023-52744: kernel: RDMA/irdma: Fix potential NULL-ptr-dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225122" id="1225122" title="VUL-0: CVE-2021-47360: kernel: binder: make sure fd closes complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225123" id="1225123" title="VUL-0: CVE-2021-47367: kernel: virtio-net: fix pages leaking when building skb in big mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225125" id="1225125" title="VUL-0: CVE-2021-47390: kernel: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225126" id="1225126" title="VUL-0: CVE-2021-47389: kernel: KVM: SVM: fix missing sev_decommission in sev_receive_start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225127" id="1225127" title="VUL-0: CVE-2021-47463: kernel: mm/secretmem: fix NULL page-&gt;mapping dereference in page_is_secretmem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225129" id="1225129" title="VUL-0: CVE-2021-47448: kernel: mptcp: fix possible stall on recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225131" id="1225131" title="VUL-0: CVE-2021-47398: kernel: RDMA/hfi1: Fix kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225132" id="1225132" title="VUL-0: CVE-2023-52864: kernel: platform/x86: wmi: Fix opening of char device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225145" id="1225145" title="VUL-0: CVE-2021-47359: kernel: cifs: fix soft lockup during fsstress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225151" id="1225151" title="VUL-0: CVE-2021-47361: kernel: mcb: fix error handling in mcb_alloc_bus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225153" id="1225153" title="VUL-0: CVE-2021-47362: kernel: drm/amd/pm: update intermediate power state for SI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225156" id="1225156" title="VUL-0: CVE-2021-47363: kernel: nexthop: fix division by zero while replacing a resilient group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225158" id="1225158" title="VUL-0: CVE-2021-47364: kernel: comedi: fix memory leak in compat_insnlist()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225160" id="1225160" title="VUL-0: CVE-2021-47366: kernel: afs: fix corruption in reads at fpos 2G-4G from an OpenAFS server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225161" id="1225161" title="VUL-0: CVE-2021-47368: kernel: enetc: fix illegal access when reading affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225164" id="1225164" title="VUL-0: CVE-2021-47369: kernel: s390/qeth: fix NULL deref in qeth_clear_working_pool_list()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225167" id="1225167" title="VUL-0: CVE-2021-47371: kernel: nexthop: fix memory leaks in nexthop notification chain listeners" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225180" id="1225180" title="VUL-0: CVE-2023-52789: kernel: tty: vcc: Add check for kstrdup() in vcc_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225183" id="1225183" title="VUL-0: CVE-2021-47370: kernel: mptcp: ensure tx skbs always have the MPTCP ext" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225184" id="1225184" title="VUL-0: CVE-2021-47372: kernel: net: macb: fix use after free on rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225186" id="1225186" title="VUL-0: CVE-2021-47470: kernel: mm, slub: fix potential use-after-free in slab_debugfs_fops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225187" id="1225187" title="VUL-0: CVE-2021-47471: kernel: drm: mxsfb: Fix NULL pointer dereference crash on unload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225189" id="1225189" title="VUL-0: CVE-2021-47472: kernel: net: mdiobus: Fix memory leak in __mdiobus_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225190" id="1225190" title="VUL-0: CVE-2021-47373: kernel: irqchip/gic-v3-its: Fix potential VPE leak on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225191" id="1225191" title="VUL-0: CVE-2021-47374: kernel: dma-debug: prevent an error message from causing runtime problems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225192" id="1225192" title="VUL-0: CVE-2021-47473: kernel: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225193" id="1225193" title="VUL-0: CVE-2021-47375: kernel: blktrace: Fix uaf in blk_trace access after removing by sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225195" id="1225195" title="VUL-0: CVE-2021-47376: kernel: bpf: Add oversize check before call kvcalloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225198" id="1225198" title="VUL-0: CVE-2021-47478: kernel: isofs: Fix out of bound access for corrupted isofs image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225201" id="1225201" title="VUL-0: CVE-2021-47378: kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225203" id="1225203" title="VUL-0: CVE-2021-47379: kernel: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225205" id="1225205" title="VUL-0: CVE-2021-47380: kernel: HID: amd_sfh: Fix potential NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225206" id="1225206" title="VUL-0: CVE-2021-47381: kernel: ASoC: SOF: Fix DSP oops stack dump output contents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225207" id="1225207" title="VUL-0: CVE-2021-47382: kernel: s390/qeth: fix deadlock during failing recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225208" id="1225208" title="VUL-0: CVE-2021-47383: kernel: tty: Fix out-of-bound vmalloc access in imageblit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225209" id="1225209" title="VUL-0: CVE-2021-47384: kernel: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225210" id="1225210" title="VUL-0: CVE-2021-47385: kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225214" id="1225214" title="VUL-0: CVE-2021-47388: kernel: mac80211: fix use-after-free in CCMP/GCMP RX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225223" id="1225223" title="VUL-0: CVE-2021-47425: kernel: i2c: acpi: fix resource leak in reconfiguration device addition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225224" id="1225224" title="VUL-0: CVE-2021-47441: kernel: mlxsw: thermal: Fix out-of-bounds memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225225" id="1225225" title="VUL-0: CVE-2021-47427: kernel: scsi: iscsi: Fix iscsi_task use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225227" id="1225227" title="VUL-0: CVE-2021-47417: kernel: libbpf: Fix memory leak in strset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225228" id="1225228" title="VUL-0: CVE-2021-47430: kernel: x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225229" id="1225229" title="VUL-0: CVE-2021-47438: kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225230" id="1225230" title="VUL-0: CVE-2022-48710: kernel: drm/radeon: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225232" id="1225232" title="VUL-0: CVE-2021-47434: kernel: xhci: Fix command ring pointer corruption while aborting a command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225233" id="1225233" title="VUL-0: CVE-2021-47422: kernel: drm/nouveau/kms/nv50-: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225235" id="1225235" title="VUL-0: CVE-2021-47457: kernel: can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225236" id="1225236" title="VUL-0: CVE-2021-47408: kernel: netfilter: conntrack: serialize hash resizes and cleanups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225237" id="1225237" title="VUL-0: CVE-2021-47451: kernel: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225238" id="1225238" title="VUL-0: CVE-2021-47405: kernel: HID: usbhid: free raw_report buffers in usbhid_stop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225239" id="1225239" title="VUL-0: CVE-2021-47453: kernel: ice: Avoid crash from unnecessary IDA free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225240" id="1225240" title="VUL-0: CVE-2021-47446: kernel: drm/msm/a4xx: fix error handling in a4xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225241" id="1225241" title="VUL-0: CVE-2021-47403: kernel: ipack: ipoctal: fix module reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225242" id="1225242" title="VUL-0: CVE-2021-47401: kernel: ipack: ipoctal: fix stack information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225243" id="1225243" title="VUL-0: CVE-2021-47444: kernel: drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225244" id="1225244" title="VUL-0: CVE-2021-47436: kernel: usb: musb: dsps: Fix the probe error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225245" id="1225245" title="VUL-0: CVE-2021-47437: kernel: iio: adis16475: fix deadlock on frequency set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225246" id="1225246" title="VUL-0: CVE-2021-47439: kernel: net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225247" id="1225247" title="VUL-0: CVE-2021-47435: kernel: dm: fix mempool NULL pointer race when completing IO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225248" id="1225248" title="VUL-0: CVE-2021-47440: kernel: net: encx24j600: check error in devm_regmap_init_encx24j600" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225249" id="1225249" title="VUL-0: CVE-2021-47461: kernel: userfaultfd: fix a race between writeprotect and exit_mmap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225250" id="1225250" title="VUL-0: CVE-2021-47462: kernel: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225251" id="1225251" title="VUL-0: CVE-2021-47460: kernel: ocfs2: fix data corruption after conversion from inline format" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225252" id="1225252" title="VUL-0: CVE-2021-47458: kernel: ocfs2: mount fails with buffer overflow in strlen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225253" id="1225253" title="VUL-0: CVE-2021-47459: kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225254" id="1225254" title="VUL-0: CVE-2021-47455: kernel: ptp: Fix possible memory leak in ptp_clock_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225255" id="1225255" title="VUL-0: CVE-2021-47454: kernel: powerpc/smp: do not decrement idle task preempt count in CPU offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225256" id="1225256" title="VUL-0: CVE-2021-47456: kernel: can: peak_pci: peak_pci_remove(): fix UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225257" id="1225257" title="VUL-0: CVE-2021-47452: kernel: netfilter: nf_tables: skip netdev events generated on netns removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225258" id="1225258" title="VUL-0: CVE-2021-47450: kernel: KVM: arm64: Fix host stage-2 PGD refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225259" id="1225259" title="VUL-0: CVE-2021-47449: kernel: ice: fix locking for Tx timestamp tracking flush" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225260" id="1225260" title="VUL-0: CVE-2021-47447: kernel: drm/msm/a3xx: fix error handling in a3xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225261" id="1225261" title="VUL-0: CVE-2021-47445: kernel: drm/msm: Fix null pointer dereference on pointer edp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225262" id="1225262" title="VUL-0: CVE-2021-47443: kernel: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225263" id="1225263" title="VUL-0: CVE-2021-47442: kernel: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225268" id="1225268" title="VUL-0: CVE-2021-47386: kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225301" id="1225301" title="VUL-0: CVE-2021-47402: kernel: net: sched: flower: protect fl_walk() with rcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225303" id="1225303" title="VUL-0: CVE-2021-47404: kernel: HID: betop: fix slab-out-of-bounds Write in betop_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225304" id="1225304" title="VUL-0: CVE-2021-47406: kernel: ext4: add error checking to ext4_ext_replay_set_iblocks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225306" id="1225306" title="VUL-0: CVE-2021-47407: kernel: KVM: x86: Handle SRCU initialization failure during page track init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225316" id="1225316" title="VUL-0: CVE-2021-47387: kernel: cpufreq: schedutil: Use kobject release() method to free sugov_tunables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225318" id="1225318" title="VUL-0: CVE-2021-47391: kernel: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225320" id="1225320" title="VUL-0: CVE-2021-47392: kernel: RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225321" id="1225321" title="VUL-0: CVE-2021-47393: kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225322" id="1225322" title="VUL-0: CVE-2021-47480: kernel: scsi: core: Put LLD module refcnt after SCSI device is released" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225323" id="1225323" title="VUL-0: CVE-2021-47394: kernel: netfilter: nf_tables: unlink table before deleting it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225326" id="1225326" title="VUL-0: CVE-2021-47395: kernel: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225327" id="1225327" title="VUL-0: CVE-2021-47396: kernel: mac80211-hwsim: fix late beacon hrtimer handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225328" id="1225328" title="VUL-0: CVE-2021-47399: kernel: ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225329" id="1225329" title="VUL-0: CVE-2021-47400: kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225330" id="1225330" title="VUL-0: CVE-2021-47409: kernel: usb: dwc2: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225331" id="1225331" title="VUL-0: CVE-2021-47410: kernel: drm/amdkfd: fix svm_migrate_fini warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225332" id="1225332" title="VUL-0: CVE-2021-47412: kernel: block: don't call rq_qos_ops-&gt;done_bio if the bio isn't tracked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225333" id="1225333" title="VUL-0: CVE-2021-47413: kernel: usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225334" id="1225334" title="VUL-0: CVE-2021-47414: kernel: riscv: Flush current cpu icache before other cpus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225335" id="1225335" title="VUL-0: CVE-2021-47415: kernel: iwlwifi: mvm: Fix possible NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225336" id="1225336" title="VUL-0: CVE-2021-47416: kernel: phy: mdio: fix memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225337" id="1225337" title="VUL-0: CVE-2021-47418: kernel: net_sched: fix NULL deref in fifo_set_limit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225338" id="1225338" title="VUL-0: CVE-2021-47419: kernel: net/sched: sch_taprio: properly cancel timer from taprio_destroy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225339" id="1225339" title="VUL-0: CVE-2021-47420: kernel: drm/amdkfd: fix a potential ttm-&gt;sg memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225341" id="1225341" title="VUL-0: CVE-2021-47465: kernel: KVM: PPC: Book3S HV: fix stack handling in idle_kvm_start_guest()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225342" id="1225342" title="VUL-0: CVE-2021-47466: kernel: mm, slub: fix potential memoryleak in kmem_cache_open()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225344" id="1225344" title="VUL-0: CVE-2021-47467: kernel: kunit: fix reference count leak in kfree_at_end" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225346" id="1225346" title="VUL-0: CVE-2021-47468: kernel: isdn: mISDN: fix sleeping function called from invalid context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225347" id="1225347" title="VUL-0: CVE-2021-47469: kernel: spi: fix deadlock when adding SPI controllers on SPI buses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225351" id="1225351" title="VUL-0: CVE-2021-47495: kernel: usbnet: sanity check for maxpacket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225353" id="1225353" title="VUL-0: CVE-2021-47421: kernel: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225354" id="1225354" title="VUL-0: CVE-2021-47496: kernel: net/tls: fix flipped sign in tls_err_abort() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225355" id="1225355" title="VUL-0: CVE-2021-47497: kernel: nvmem: fix shift-out-of-bound (UBSAN) with byte size cells" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225357" id="1225357" title="VUL-0: CVE-2021-47498: kernel: dm rq: don't queue request to blk-mq during DM suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225358" id="1225358" title="VUL-0: CVE-2021-47499: kernel: iio: accel: kxcjk-1013: fix possible memory leak in probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225360" id="1225360" title="VUL-0: CVE-2021-47500: kernel: iio: mma8452: fix trigger reference couting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225361" id="1225361" title="VUL-0: CVE-2021-47501: kernel: i40e: fix NULL pointer dereference in i40e_dbg_dump_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225366" id="1225366" title="VUL-0: CVE-2021-47423: kernel: drm/nouveau/debugfs: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225367" id="1225367" title="VUL-0: CVE-2021-47424: kernel: i40e: Fix freeing of uninitialized misc IRQ vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225368" id="1225368" title="VUL-0: CVE-2021-47528: kernel: usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225369" id="1225369" title="VUL-0: CVE-2021-47502: kernel: ASoC: codecs: wcd934x: handle channel mappping list correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225370" id="1225370" title="VUL-0: CVE-2021-47426: kernel: bpf, s390: Fix potential memory leak about jit_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225372" id="1225372" title="VUL-0: CVE-2021-47518: kernel: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225373" id="1225373" title="VUL-0: CVE-2021-47529: kernel: iwlwifi: Fix memory leaks in error handling path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225374" id="1225374" title="VUL-0: CVE-2021-47503: kernel: scsi: pm80xx: do not call scsi_remove_host() in pm8001_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225375" id="1225375" title="VUL-0: CVE-2021-47537: kernel: octeontx2-af: Fix a memleak bug in rvu_mbox_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225376" id="1225376" title="VUL-0: CVE-2021-47526: kernel: serial: liteuart: Fix NULL pointer dereference in -&gt;remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225377" id="1225377" title="VUL-0: CVE-2021-47524: kernel: serial: liteuart: fix minor-number leak on probe errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225379" id="1225379" title="VUL-0: CVE-2021-47550: kernel: drm/amd/amdgpu: fix potential memleak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225380" id="1225380" title="VUL-0: CVE-2021-47513: kernel: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225383" id="1225383" title="VUL-0: CVE-2021-47556: kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225384" id="1225384" title="VUL-0: CVE-2021-47565: kernel: scsi: mpt3sas: Fix kernel panic during drive powercycle test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225386" id="1225386" title="VUL-0: CVE-2021-47540: kernel: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225387" id="1225387" title="VUL-0: CVE-2021-47428: kernel: powerpc/64s: fix program check interrupt emergency stack path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225388" id="1225388" title="VUL-0: CVE-2021-47429: kernel: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225390" id="1225390" title="VUL-0: CVE-2021-47431: kernel: drm/amdgpu: fix gart.bo pin_count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225392" id="1225392" title="VUL-0: CVE-2021-47433: kernel: btrfs: fix abort logic in btrfs_replace_file_extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225393" id="1225393" title="VUL-0: CVE-2021-47464: kernel: audit: fix possible null-pointer dereference in audit_filter_rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225396" id="1225396" title="VUL-0: CVE-2021-47559: kernel: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225400" id="1225400" title="VUL-0: CVE-2021-47505: kernel: aio: fix use-after-free due to missing POLLFREE handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225404" id="1225404" title="VUL-0: CVE-2021-47506: kernel: nfsd: fix use-after-free due to delegation race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225405" id="1225405" title="VUL-0: CVE-2021-47507: kernel: nfsd: fix nsfd startup race (again)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225409" id="1225409" title="VUL-0: CVE-2021-47509: kernel: ALSA: pcm: oss: limit the period size to 16MB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225410" id="1225410" title="VUL-0: CVE-2021-47510: kernel: btrfs: fix re-dirty process of tree-log nodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225411" id="1225411" title="VUL-0: CVE-2021-47511: kernel: ALSA: pcm: oss: fix negative period/buffer sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225425" id="1225425" title="VUL-0: CVE-2021-47514: kernel: devlink: fix netns refcount leak in devlink_nl_cmd_reload()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225427" id="1225427" title="VUL-0: CVE-2021-47516: kernel: nfp: Fix memory leak in nfp_cpp_area_cache_add()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225431" id="1225431" title="VUL-0: CVE-2021-47520: kernel: can: pch_can: pch_can_rx_normal: fix use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225435" id="1225435" title="VUL-0: CVE-2021-47521: kernel: can: sja1000: fix use after free in ems_pcmcia_add_card()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225436" id="1225436" title="VUL-0: CVE-2021-47490: kernel: drm/ttm: fix memleak in ttm_transfered_destroy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225437" id="1225437" title="VUL-0: CVE-2021-47522: kernel: HID: bigbenff: prevent null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225438" id="1225438" title="VUL-0: CVE-2021-47523: kernel: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225439" id="1225439" title="VUL-0: CVE-2021-47493: kernel: ocfs2: fix race between searching chunks and release journal_head from buffer_head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225441" id="1225441" title="VUL-0: CVE-2021-47525: kernel: serial: liteuart: fix use-after-free and memleak on unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225445" id="1225445" title="VUL-0: CVE-2021-47533: kernel: drm/vc4: kms: Clear the HVS FIFO commit pointer once done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225446" id="1225446" title="VUL-0: CVE-2021-47535: kernel: drm/msm/a6xx: Allocate enough space for GMU registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225447" id="1225447" title="VUL-0: CVE-2021-47536: kernel: net/smc: fix wrong list_del in smc_lgr_cleanup_early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225450" id="1225450" title="VUL-0: CVE-2021-47494: kernel: cfg80211: fix management registrations locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225453" id="1225453" title="VUL-0: CVE-2021-47541: kernel: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225455" id="1225455" title="VUL-0: CVE-2021-47542: kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225461" id="1225461" title="VUL-0: CVE-2023-52756: kernel: pwm: Fix double shift bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225463" id="1225463" title="VUL-0: CVE-2021-47544: kernel: tcp: fix page frag corruption on page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225464" id="1225464" title="VUL-0: CVE-2021-47553: kernel: sched/scs: reset task stack state in bringup_cpu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225466" id="1225466" title="VUL-0: CVE-2021-47554: kernel: vdpa_sim: avoid putting an uninitialized iova_domain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225471" id="1225471" title="VUL-0: CVE-2023-52740: kernel: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225472" id="1225472" title="VUL-0: CVE-2023-52799: kernel: jfs: fix array-index-out-of-bounds in dbFindLeaf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225478" id="1225478" title="VUL-0: CVE-2023-52753: kernel: drm/amd/display: Avoid NULL dereference of timing generator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225479" id="1225479" title="VUL-0: CVE-2023-52741: kernel: cifs: Fix use-after-free in rdata-&gt;read_into_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225482" id="1225482" title="VUL-0: CVE-2023-52742: kernel: net: USB: Fix wrong-direction WARNING in plusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225483" id="1225483" title="VUL-0: CVE-2023-52708: kernel: mmc: mmc_spi: fix error handling in mmc_spi_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225486" id="1225486" title="VUL-0: CVE-2023-52736: kernel: ALSA: hda: Do not unset preset when cleaning up codec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225488" id="1225488" title="VUL-0: CVE-2023-52733: kernel: s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225490" id="1225490" title="VUL-0: CVE-2023-52754: kernel: media: imon: fix access to invalid resource for the second interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225492" id="1225492" title="VUL-0: CVE-2021-47558: kernel: net: stmmac: Disable Tx queues when reconfiguring the interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225495" id="1225495" title="VUL-0: CVE-2021-47560: kernel: mlxsw: spectrum: protect driver from buggy firmware" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225499" id="1225499" title="VUL-0: CVE-2021-47562: kernel: ice: fix vsi-&gt;txq_map sizing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225500" id="1225500" title="VUL-0: CVE-2021-47563: kernel: ice: avoid bpf_prog refcount underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225501" id="1225501" title="VUL-0: CVE-2021-47564: kernel: net: marvell: prestera: fix double free issue on err path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225508" id="1225508" title="VUL-0: CVE-2021-47549: kernel: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225510" id="1225510" title="VUL-0: CVE-2021-47551: kernel: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225529" id="1225529" title="VUL-0: CVE-2023-52816: kernel: drm/amdkfd: fix shift out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225530" id="1225530" title="VUL-0: CVE-2023-52818: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for SMU7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225532" id="1225532" title="VUL-0: CVE-2023-52819: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for Polaris and Tonga" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225534" id="1225534" title="VUL-0: CVE-2023-52871: kernel: soc: qcom: llcc: handle a second device without data corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225549" id="1225549" title="VUL-0: CVE-2023-52703: kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225550" id="1225550" title="VUL-0: CVE-2023-52804: kernel: fs/jfs: Add validity check for db_maxag and db_agpref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225553" id="1225553" title="VUL-0: CVE-2023-52805: kernel: jfs: fix array-index-out-of-bounds in diAlloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225554" id="1225554" title="VUL-0: CVE-2023-52806: kernel: ALSA: hda: Fix possible null-ptr-deref when assigning a stream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225557" id="1225557" title="VUL-0: CVE-2023-52810: kernel: fs/jfs: Add check for negative db_l2nbperpage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225559" id="1225559" title="VUL-0: CVE-2023-52811: kernel: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225560" id="1225560" title="VUL-0: CVE-2023-52759: kernel: gfs2: ignore negated quota changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225565" id="1225565" title="VUL-0: CVE-2023-52814: kernel: drm/amdgpu: Fix potential null pointer derefernce" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225566" id="1225566" title="VUL-0: CVE-2023-52858: kernel: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225569" id="1225569" title="VUL-0: CVE-2023-52817: kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225570" id="1225570" title="VUL-0: CVE-2023-52763: kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225571" id="1225571" title="VUL-0: CVE-2023-52764: kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225572" id="1225572" title="VUL-0: CVE-2023-52774: kernel: s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225577" id="1225577" title="VUL-0: CVE-2023-52832: kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225583" id="1225583" title="VUL-0: CVE-2023-52855: kernel: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225584" id="1225584" title="VUL-0: CVE-2023-52854: kernel: padata: Fix refcnt handling in padata_free_shell()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225588" id="1225588" title="VUL-0: CVE-2023-52847: kernel: media: bttv: fix use after free error due to btv-&gt;timeout timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225589" id="1225589" title="VUL-0: CVE-2023-52873: kernel: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225590" id="1225590" title="VUL-0: CVE-2023-52844: kernel: media: vidtv: psi: Add check for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225591" id="1225591" title="VUL-0: CVE-2023-52872: kernel: tty: n_gsm: fix race condition in status line change on dead connections" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225592" id="1225592" title="VUL-0: CVE-2023-52841: kernel: media: vidtv: mux: Add check and kfree for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225595" id="1225595" title="VUL-0: CVE-2023-52833: kernel: Bluetooth: btusb: add date-&gt;evt_skb is NULL check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225599" id="1225599" title="VUL-0: CVE-2023-52834: kernel: atl1c: work around the DMA RX overflow issue" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" id="CVE-2023-52736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" id="CVE-2023-52806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" id="CVE-2023-52833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" id="CVE-2023-52739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" id="CVE-2023-52745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" id="CVE-2023-52747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" id="CVE-2023-52840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" id="CVE-2023-52744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" id="CVE-2023-52834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" id="CVE-2023-52878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" id="CVE-2023-52741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" id="CVE-2023-52875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" id="CVE-2023-52870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" id="CVE-2023-52873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" id="CVE-2023-52865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" id="CVE-2023-52858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" id="CVE-2023-52876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" id="CVE-2023-52819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" id="CVE-2023-52818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" id="CVE-2023-52753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" id="CVE-2023-52817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" id="CVE-2023-52814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" id="CVE-2023-52738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" id="CVE-2023-52825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" id="CVE-2023-52816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" id="CVE-2023-52856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" id="CVE-2023-52821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" id="CVE-2023-52826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" id="CVE-2023-52867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" id="CVE-2023-52838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" id="CVE-2023-52810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" id="CVE-2023-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" id="CVE-2023-52759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" id="CVE-2023-52853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" id="CVE-2023-52791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" id="CVE-2023-52763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" id="CVE-2023-52788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" id="CVE-2023-52743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" id="CVE-2023-52799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" id="CVE-2023-52805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" id="CVE-2023-52847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" id="CVE-2023-52764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" id="CVE-2023-52754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" id="CVE-2023-52841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" id="CVE-2023-52844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" id="CVE-2023-52708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" id="CVE-2023-52730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" id="CVE-2023-52742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" id="CVE-2023-52702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" id="CVE-2023-52703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" id="CVE-2023-52854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" id="CVE-2023-52740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" id="CVE-2023-52686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" id="CVE-2023-52690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" id="CVE-2023-52756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" id="CVE-2023-52774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" id="CVE-2023-52733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" id="CVE-2023-52707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" id="CVE-2023-52871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" id="CVE-2023-52868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" id="CVE-2023-52872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" id="CVE-2023-52880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" id="CVE-2023-52789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" id="CVE-2023-52781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" id="CVE-2023-52855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" id="CVE-2023-52877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" id="CVE-2023-52798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" id="CVE-2023-52832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" id="CVE-2022-48710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" id="CVE-2022-48709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" id="CVE-2022-48708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" id="CVE-2021-47511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" id="CVE-2021-47509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" id="CVE-2021-47381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" id="CVE-2021-47502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" id="CVE-2021-47380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" id="CVE-2021-47404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" id="CVE-2021-47522" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" id="CVE-2021-47405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" id="CVE-2021-47523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" id="CVE-2021-47485" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43056" id="CVE-2021-43056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43056" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" id="CVE-2021-47465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" id="CVE-2021-47389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" id="CVE-2021-47450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" id="CVE-2021-47390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" id="CVE-2021-47407" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" id="CVE-2021-47442" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" id="CVE-2021-47443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" id="CVE-2021-47391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" id="CVE-2021-47392" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" id="CVE-2021-47398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" id="CVE-2021-47481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" id="CVE-2021-47366" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39698" id="CVE-2021-39698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" id="CVE-2021-47505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" id="CVE-2021-47464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" id="CVE-2021-47360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" id="CVE-2021-47379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" id="CVE-2021-47375" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" id="CVE-2021-47412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" id="CVE-2021-47376" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" id="CVE-2021-47426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" id="CVE-2021-47433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" id="CVE-2021-47510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" id="CVE-2021-47457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" id="CVE-2021-47459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" id="CVE-2021-47520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" id="CVE-2021-47456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" id="CVE-2021-47521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" id="CVE-2021-47494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" id="CVE-2021-47488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" id="CVE-2021-47359" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" id="CVE-2021-47364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" id="CVE-2021-47477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" id="CVE-2021-47476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" id="CVE-2021-47474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" id="CVE-2021-47475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" id="CVE-2021-47387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" id="CVE-2021-47514" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" id="CVE-2021-47435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" id="CVE-2021-47498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" id="CVE-2021-47374" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" id="CVE-2021-47550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" id="CVE-2021-47551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" id="CVE-2021-47362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" id="CVE-2021-47431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" id="CVE-2021-47421" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" id="CVE-2021-47420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" id="CVE-2021-47410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" id="CVE-2021-47444" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" id="CVE-2021-47445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" id="CVE-2021-47447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" id="CVE-2021-47446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" id="CVE-2021-47535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" id="CVE-2021-47471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" id="CVE-2021-47423" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" id="CVE-2021-47422" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" id="CVE-2021-47490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" id="CVE-2021-47533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" id="CVE-2021-47368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" id="CVE-2021-47556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" id="CVE-2021-47406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" id="CVE-2021-47393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" id="CVE-2021-47386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" id="CVE-2021-47385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" id="CVE-2021-47384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" id="CVE-2021-47425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" id="CVE-2021-47501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" id="CVE-2021-47424" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" id="CVE-2021-47453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" id="CVE-2021-47563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" id="CVE-2021-47449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" id="CVE-2021-47562" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" id="CVE-2021-47499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" id="CVE-2021-47437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" id="CVE-2021-47500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" id="CVE-2021-47403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" id="CVE-2021-47401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" id="CVE-2021-47373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" id="CVE-2021-47468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" id="CVE-2021-47478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" id="CVE-2021-47529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" id="CVE-2021-47415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" id="CVE-2021-47399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" id="CVE-2021-47467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" id="CVE-2021-47417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" id="CVE-2021-47388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" id="CVE-2021-47396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" id="CVE-2021-47395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" id="CVE-2021-47361" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" id="CVE-2021-47560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" id="CVE-2021-47441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" id="CVE-2021-47462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" id="CVE-2021-47463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" id="CVE-2021-47466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" id="CVE-2021-47470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" id="CVE-2021-47370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" id="CVE-2021-47448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" id="CVE-2021-47540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" id="CVE-2021-47482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" id="CVE-2021-47513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" id="CVE-2021-47439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" id="CVE-2021-47440" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" id="CVE-2021-47400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" id="CVE-2021-47372" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" id="CVE-2021-47564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" id="CVE-2021-47472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" id="CVE-2021-47541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" id="CVE-2021-47438" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" id="CVE-2021-47542" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" id="CVE-2021-47402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" id="CVE-2021-47419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" id="CVE-2021-47559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" id="CVE-2021-47536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" id="CVE-2021-47558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" id="CVE-2021-47496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" id="CVE-2021-47418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" id="CVE-2021-47408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" id="CVE-2021-47452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" id="CVE-2021-47394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" id="CVE-2021-47451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" id="CVE-2021-47363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" id="CVE-2021-47371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" id="CVE-2021-47518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" id="CVE-2021-47516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" id="CVE-2021-47507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" id="CVE-2021-47506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" id="CVE-2021-47378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" id="CVE-2021-47497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" id="CVE-2021-47460" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" id="CVE-2021-47493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" id="CVE-2021-47458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" id="CVE-2021-47537" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" id="CVE-2021-47484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" id="CVE-2021-47416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" id="CVE-2021-47429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" id="CVE-2021-47428" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" id="CVE-2021-47454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" id="CVE-2021-47455" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" id="CVE-2021-47483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" id="CVE-2021-47414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" id="CVE-2021-47486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" id="CVE-2021-47369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" id="CVE-2021-47382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" id="CVE-2021-47549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" id="CVE-2021-47553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" id="CVE-2021-47480" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" id="CVE-2021-47427" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" id="CVE-2021-47565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" id="CVE-2021-47503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" id="CVE-2021-47473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" id="CVE-2021-47397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" id="CVE-2021-47527" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" id="CVE-2021-47526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" id="CVE-2021-47524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" id="CVE-2021-47525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" id="CVE-2021-47469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" id="CVE-2021-47358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" id="CVE-2021-47479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" id="CVE-2021-47544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" id="CVE-2021-47383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" id="CVE-2021-47528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" id="CVE-2021-47413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" id="CVE-2021-47409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" id="CVE-2021-47436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" id="CVE-2021-47495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" id="CVE-2021-47461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" id="CVE-2021-47554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" id="CVE-2021-47367" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" id="CVE-2021-47430" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" id="CVE-2021-47434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" id="CVE-2021-47534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" id="CVE-2023-52811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" id="CVE-2024-35895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" id="CVE-2024-35815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" id="CVE-2023-52591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52591" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" id="CVE-2024-35914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" id="CVE-2023-47233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47233" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" id="CVE-2024-35811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" id="CVE-2023-52676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" id="CVE-2021-47365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" id="CVE-2021-47489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4148" id="CVE-2021-4148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4148" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" id="CVE-2021-47491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" id="CVE-2021-47492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" id="CVE-2020-36788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" id="CVE-2023-6531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6531" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" id="CVE-2023-52654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" id="CVE-2023-52655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" id="CVE-2022-48699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" id="CVE-2022-48702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" id="CVE-2022-48701" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" id="CVE-2022-48694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" id="CVE-2022-48692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" id="CVE-2022-48671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" id="CVE-2022-48704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" id="CVE-2022-48688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" id="CVE-2023-2860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2860" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" id="CVE-2022-48687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" id="CVE-2022-48673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" id="CVE-2022-48686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" id="CVE-2022-48697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" id="CVE-2022-48672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" id="CVE-2022-48695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" id="CVE-2022-48693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" id="CVE-2022-48703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" id="CVE-2022-48700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" id="CVE-2022-48662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" id="CVE-2022-48675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" id="CVE-2022-48634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" id="CVE-2022-48632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" id="CVE-2022-48652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" id="CVE-2022-48636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" id="CVE-2024-26921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" id="CVE-2024-35863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" id="CVE-2024-35867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" id="CVE-2024-35868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" id="CVE-2024-26928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" id="CVE-2024-26925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" id="CVE-2024-27413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" id="CVE-2024-35817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" id="CVE-2024-35904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" id="CVE-2024-26929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" id="CVE-2024-27398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" id="CVE-2024-26930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" id="CVE-2024-26840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" id="CVE-2024-26862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" id="CVE-2024-0639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" id="CVE-2024-26852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" id="CVE-2023-1829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1829" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-8111" id="PED-8111" title="https://jira.suse.com/browse/PED-8111" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
- CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
- CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-26930: Fixed double free of the ha-&gt;vp_map pointer (bsc#1223626).
- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

- af_unix: Do not use atomic ops for unix_sk(sk)-&gt;inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- af_unix: annote lockless accesses to unix_tot_inflight &amp; gc_in_progress (bsc#1223384).
- filemap: remove use of wait bookmarks (bsc#1224085).
- idpf: extend tx watchdog timeout (bsc#1224137).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.122.2" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.122.2.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.122.2.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.122.2" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.122.2.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.122.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.122.2.150400.24.58.2" arch="src" src="src/kernel-default-base-5.14.21-150400.24.122.2.150400.24.58.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.122.2.150400.24.58.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.122.2.150400.24.58.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.122.2.150400.24.58.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.122.2.150400.24.58.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.122.2" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.122.2.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.122.2.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.122.2" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.122.2.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.122.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.122.2.150400.24.58.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.122.2.150400.24.58.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.122.2.150400.24.58.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2011</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718210391"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174585" id="1174585" title="kernel lock up on IBS worker with 15-SP2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190569" id="1190569" title="[trackerbug] 15 SP4 nvme subsystem update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191949" id="1191949" title="VUL-1: CVE-2021-42327: kernel-source: dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192107" id="1192107" title="VUL-0: CVE-2021-43056: kernel-source: powerpc: KVM guest can trigger host crash on Power8" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193983" id="1193983" title="VUL-0: CVE-2021-4148: kernel-source-rt, kernel-source, kernel-source-azure: Improper implementation of block_invalidatepage() allows users to crash the kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194288" id="1194288" title="[EAR - NOT FOR USA Citizens] PTF request for libfreebl3 to fix CVE-2021-43527 on sles12-sp2-ltss on x86_64 flavor ref:_00D1igLOd._5001io9v9G:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196869" id="1196869" title="cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196956" id="1196956" title="VUL-0: CVE-2021-39698:  kernel-source-rt,kernel-source-azure,kernel-source: use-after-free due to missing POLLFREE handling in aio" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197915" id="1197915" title="btrfs: backport, from upstream, several fsync related performance patches and bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200313" id="1200313" title="[NetApp SLES15 SP4 Bug]: Host crash at nvme_tcp_init_iter() with header digest enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201308" id="1201308" title="HP Z2 G8 Workstation:  supportconfig reboots on systool command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201489" id="1201489" title="[NetApp SLES15 SP4 Bug]: Host crash at crypto_ahash_digest() during NVMe re-auth" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208149" id="1208149" title="backport commit 462a8e08e0e6 (&quot;Fix page corruption caused by racy check in __free_pages&quot;)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211592" id="1211592" title="VUL-0: CVE-2023-2860: kernel-source-azure,kernel-source,kernel-source-rt: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213863" id="1213863" title="s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217169" id="1217169" title="VUL-0: CVE-2023-52655: kernel: malicious USB device impersonating an aqc111 device can make the kernel overstep a buffer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217515" id="1217515" title="s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218917" id="1218917" title="VUL-0: CVE-2024-0639: kernel: potential deadlock on &amp;net-&gt;sctp.addr_wq_lock leading to DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220492" id="1220492" title="SLES15SP6 - kdump is failing over NFS configured over HNV device with IOMMU call traces" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220783" id="1220783" title="synth uevent: /devices/vio: failed to send uevent - ref:_00D1igLOd._500Tr56lz5:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221958" id="1221958" title="L3: Checksum errors on SCTP traffic through IPVS  [ref:_00D1igLOd._500Tr7dsRC:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: CVE-2023-52880: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222976" id="1222976" title="VUL-0: CVE-2024-26840: kernel: cachefiles: memory leak in cachefiles_add_cache()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223057" id="1223057" title="VUL-0: CVE-2024-26852: kernel: net/ipv6: UAF in ip6_route_mpath_notify()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223084" id="1223084" title="VUL-0: CVE-2024-26828: kernel: cifs: underflow in parse_server_interfaces()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223111" id="1223111" title="VUL-0: CVE-2024-26862: kernel: packet: data-races in ignore_outgoing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223138" id="1223138" title="VUL-0: CVE-2024-26921: kernel: inet: inet_defrag: prevent sk release while still in use" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223390" id="1223390" title="VUL-0: CVE-2024-26925: kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223481" id="1223481" title="VUL-0: CVE-2022-48632: kernel: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223501" id="1223501" title="VUL-0: CVE-2022-48634: kernel: drm/gma500: Fix BUG: sleeping function called from invalid context errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223512" id="1223512" title="VUL-0: CVE-2022-48636: kernel: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223520" id="1223520" title="VUL-0: CVE-2022-48652: kernel: ice: Fix crash by keep old cfg when update TCs more than queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223532" id="1223532" title="VUL-0: CVE-2024-26928: kernel: smb: client: fix potential UAF in cifs_debug_files_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223626" id="1223626" title="VUL-0: CVE-2024-26930: kernel: scsi: qla2xxx: double free of the ha-&gt;vp_map pointer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223715" id="1223715" title="VUL-0: CVE-2024-26929: kernel: scsi: qla2xxx: double free of fcport" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223894" id="1223894" title="VUL-0: CVE-2022-48675: kernel: IB/core: fix a nested dead lock as part of ODP flow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223921" id="1223921" title="VUL-0: CVE-2022-48701: kernel: ALSA: usb-audio: out-of-bounds bug in __snd_usb_parse_audio_interface()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223922" id="1223922" title="VUL-0: CVE-2022-48697: kernel: nvmet: fix a use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223923" id="1223923" title="VUL-0: CVE-2022-48702: kernel: ALSA: emu10k1: out of bounds access in snd_emu10k1_pcm_channel_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223924" id="1223924" title="VUL-0: CVE-2022-48703: kernel: thermal/int340x_thermal: NULL point dereference in  data_vault_read() when accessing the 0x10" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223929" id="1223929" title="VUL-0: CVE-2022-48671: kernel: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223931" id="1223931" title="VUL-0: CVE-2022-48672: kernel: of: fdt: fix off-by-one error in unflatten_dt_nodes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223932" id="1223932" title="VUL-0: CVE-2022-48704: kernel: drm/radeon: panic on invalid kernel paging request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223934" id="1223934" title="VUL-0: CVE-2022-48673: kernel: net/smc: Fix possible access to freed memory in link clear" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223941" id="1223941" title="VUL-0: CVE-2022-48695: kernel: scsi: mpt3sas: Fix use-after-free warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223948" id="1223948" title="VUL-0: CVE-2022-48686: kernel: nvme-tcp: fix UAF when detecting digest errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223952" id="1223952" title="VUL-0: CVE-2022-48687: kernel: ipv6: sr: fix out-of-bounds read when setting HMAC data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223953" id="1223953" title="VUL-0: CVE-2022-48688: kernel: i40e: fix kernel crash during module removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223957" id="1223957" title="VUL-0: CVE-2022-48700: kernel: vfio/type1: unpin zero pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223962" id="1223962" title="VUL-0: CVE-2022-48692: kernel: RDMA/srp: Set scmnd-&gt;result only when scmnd is not NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223963" id="1223963" title="VUL-0: CVE-2022-48693: kernel: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223964" id="1223964" title="VUL-0: CVE-2022-48694: kernel: RDMA/irdma: Fix drain SQ hang with no completion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223996" id="1223996" title="VUL-0: CVE-2022-48699: kernel: sched/debug: fix dentry leak in update_sched_domain_debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224085" id="1224085" title="L3-Question: Request for addition of patch &quot;filemap: Remove use of wait bookmarks&quot; to 15 SP4 and 15 SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224099" id="1224099" title="VUL-0: CVE-2023-52654: kernel: io_uring/af_unix: disable sending io_uring over sockets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224137" id="1224137" title="IDPF needs a longer watchdog timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224174" id="1224174" title="VUL-0: CVE-2024-27398: kernel: Bluetooth: fix use-after-free bugs caused by sco_sock_timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224438" id="1224438" title="VUL-0: CVE-2024-27413: kernel: efi/capsule-loader: fix incorrect allocation size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224482" id="1224482" title="VUL-0: CVE-2024-35914: kernel: nfsd: Fix error cleanup path in nfsd_rename()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224494" id="1224494" title="VUL-0: CVE-2024-35904: kernel: selinux: avoid dereference of garbage after mount failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224511" id="1224511" title="VUL-0: CVE-2024-35895: kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224592" id="1224592" title="VUL-0: CVE-2024-35811: kernel: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224611" id="1224611" title="VUL-0: CVE-2023-52690: kernel: powerpc/powernv: Add a null pointer check to scom_debug_init_one()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224664" id="1224664" title="VUL-0: CVE-2024-35867: kernel: smb: client: fix potential UAF in cifs_stats_proc_show()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224678" id="1224678" title="VUL-0: CVE-2024-35868: kernel: smb: client: fix potential UAF in cifs_stats_proc_write()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224682" id="1224682" title="VUL-0: CVE-2023-52686: kernel: powerpc/powernv: Add a null pointer check in opal_event_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224685" id="1224685" title="VUL-0: CVE-2024-35815: kernel: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224730" id="1224730" title="VUL-0: CVE-2023-52676: kernel: bpf: Guard stack limits against 32bit overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224736" id="1224736" title="VUL-0: CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224763" id="1224763" title="VUL-0: CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224816" id="1224816" title="VUL-0: CVE-2020-36788: kernel: drm/nouveau: avoid a use-after-free when BO init fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224895" id="1224895" title="VUL-0: CVE-2021-47365: kernel: afs: Fix page leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224898" id="1224898" title="VUL-0: CVE-2021-47492: kernel: mm, thp: bail out early in collapse_file for writeback page" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224900" id="1224900" title="VUL-0: CVE-2021-47491: kernel: mm: khugepaged: skip huge page collapse for special files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224901" id="1224901" title="VUL-0: CVE-2021-47489: kernel: drm/amdgpu: Fix even more out of bound writes from debugfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224902" id="1224902" title="VUL-0: CVE-2021-47488: kernel: cgroup: Fix memory leak caused by missing cgroup_bpf_offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224903" id="1224903" title="VUL-0: CVE-2021-47486: kernel: riscv, bpf: Fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224904" id="1224904" title="VUL-0: CVE-2021-47485: kernel: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224905" id="1224905" title="VUL-0: CVE-2021-47484: kernel: octeontx2-af: Fix possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224907" id="1224907" title="VUL-0: CVE-2021-47483: kernel: regmap: Fix possible double-free in regcache_rbtree_exit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224910" id="1224910" title="VUL-0: CVE-2021-47481: kernel: RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224911" id="1224911" title="VUL-0: CVE-2021-47479: kernel: staging: rtl8712: fix use-after-free in rtl8712_dl_fw" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224912" id="1224912" title="VUL-0: CVE-2021-47477: kernel: comedi: dt9812: fix DMA buffers on stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224913" id="1224913" title="VUL-0: CVE-2021-47476: kernel: comedi: ni_usb6501: fix NULL-deref in command paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224914" id="1224914" title="VUL-0: CVE-2021-47475: kernel: comedi: vmk80xx: fix transfer-buffer overflows" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224915" id="1224915" title="VUL-0: CVE-2021-47474: kernel: comedi: vmk80xx: fix bulk-buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224920" id="1224920" title="VUL-0: CVE-2021-47358: kernel: staging: greybus: uart: fix tty use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224928" id="1224928" title="VUL-0: CVE-2023-52840: kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224931" id="1224931" title="VUL-0: CVE-2023-52747: kernel: IB/hfi1: Restore allocated resources on failed copyout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224932" id="1224932" title="VUL-0: CVE-2023-52856: kernel: drm/bridge: lt8912b: Fix crash on bridge detach" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224937" id="1224937" title="VUL-0: CVE-2023-52870: kernel: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224942" id="1224942" title="VUL-0: CVE-2022-48708: kernel: pinctrl: single: fix potential NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224944" id="1224944" title="VUL-0: CVE-2023-52877: kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224945" id="1224945" title="VUL-0: CVE-2023-52702: kernel: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224947" id="1224947" title="VUL-0: CVE-2023-52798: kernel: wifi: ath11k: fix dfs radar event locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224956" id="1224956" title="VUL-0: CVE-2023-52730: kernel: mmc: sdio: fix possible resource leaks in some error paths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224988" id="1224988" title="VUL-0: CVE-2023-52853: kernel: hid: cp2112: Fix duplicate workqueue initialization" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225000" id="1225000" title="VUL-0: CVE-2023-52878: kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv:echo_skb is accessed out of bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225003" id="1225003" title="VUL-0: CVE-2023-52743: kernel: ice: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225005" id="1225005" title="VUL-0: CVE-2023-52738: kernel: drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225009" id="1225009" title="VUL-0: CVE-2023-52867: kernel: drm/radeon: possible buffer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225022" id="1225022" title="VUL-0: CVE-2023-52821: kernel: drm/panel: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225031" id="1225031" title="VUL-0: CVE-2023-52838: kernel: fbdev: imsttfb: fix a resource leak in probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225032" id="1225032" title="VUL-0: CVE-2023-52745: kernel: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225036" id="1225036" title="VUL-0: CVE-2023-52876: kernel: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225044" id="1225044" title="VUL-0: CVE-2023-52868: kernel: thermal: core: prevent potential string overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225076" id="1225076" title="VUL-0: CVE-2023-52825: kernel: drm/amdkfd: Fix a race condition of vram buffer unref in svm code" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225077" id="1225077" title="VUL-0: CVE-2023-52826: kernel: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225082" id="1225082" title="VUL-0: CVE-2021-47397: kernel: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225086" id="1225086" title="VUL-0: CVE-2023-52865: kernel: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225092" id="1225092" title="VUL-0: CVE-2023-52781: kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225095" id="1225095" title="VUL-0: CVE-2022-48709: kernel: ice: switch: fix potential memleak in ice_add_adv_recipe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225096" id="1225096" title="VUL-0: CVE-2023-52875: kernel: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225106" id="1225106" title="VUL-0: CVE-2023-52788: kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225108" id="1225108" title="VUL-0: CVE-2023-52791: kernel: i2c: core: Run atomic i2c xfer when !preemptible" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225109" id="1225109" title="VUL-0: CVE-2023-52707: kernel: sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225118" id="1225118" title="VUL-0: CVE-2023-52739: kernel: Fix page corruption caused by racy check in __free_pages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225121" id="1225121" title="VUL-0: CVE-2023-52744: kernel: RDMA/irdma: Fix potential NULL-ptr-dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225122" id="1225122" title="VUL-0: CVE-2021-47360: kernel: binder: make sure fd closes complete" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225123" id="1225123" title="VUL-0: CVE-2021-47367: kernel: virtio-net: fix pages leaking when building skb in big mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225125" id="1225125" title="VUL-0: CVE-2021-47390: kernel: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225126" id="1225126" title="VUL-0: CVE-2021-47389: kernel: KVM: SVM: fix missing sev_decommission in sev_receive_start" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225127" id="1225127" title="VUL-0: CVE-2021-47463: kernel: mm/secretmem: fix NULL page-&gt;mapping dereference in page_is_secretmem()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225129" id="1225129" title="VUL-0: CVE-2021-47448: kernel: mptcp: fix possible stall on recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225131" id="1225131" title="VUL-0: CVE-2021-47398: kernel: RDMA/hfi1: Fix kernel pointer leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225132" id="1225132" title="VUL-0: CVE-2023-52864: kernel: platform/x86: wmi: Fix opening of char device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225145" id="1225145" title="VUL-0: CVE-2021-47359: kernel: cifs: fix soft lockup during fsstress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225151" id="1225151" title="VUL-0: CVE-2021-47361: kernel: mcb: fix error handling in mcb_alloc_bus()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225153" id="1225153" title="VUL-0: CVE-2021-47362: kernel: drm/amd/pm: update intermediate power state for SI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225156" id="1225156" title="VUL-0: CVE-2021-47363: kernel: nexthop: fix division by zero while replacing a resilient group" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225158" id="1225158" title="VUL-0: CVE-2021-47364: kernel: comedi: fix memory leak in compat_insnlist()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225160" id="1225160" title="VUL-0: CVE-2021-47366: kernel: afs: fix corruption in reads at fpos 2G-4G from an OpenAFS server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225161" id="1225161" title="VUL-0: CVE-2021-47368: kernel: enetc: fix illegal access when reading affinity_hint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225164" id="1225164" title="VUL-0: CVE-2021-47369: kernel: s390/qeth: fix NULL deref in qeth_clear_working_pool_list()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225167" id="1225167" title="VUL-0: CVE-2021-47371: kernel: nexthop: fix memory leaks in nexthop notification chain listeners" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225180" id="1225180" title="VUL-0: CVE-2023-52789: kernel: tty: vcc: Add check for kstrdup() in vcc_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225183" id="1225183" title="VUL-0: CVE-2021-47370: kernel: mptcp: ensure tx skbs always have the MPTCP ext" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225184" id="1225184" title="VUL-0: CVE-2021-47372: kernel: net: macb: fix use after free on rmmod" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225186" id="1225186" title="VUL-0: CVE-2021-47470: kernel: mm, slub: fix potential use-after-free in slab_debugfs_fops" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225187" id="1225187" title="VUL-0: CVE-2021-47471: kernel: drm: mxsfb: Fix NULL pointer dereference crash on unload" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225189" id="1225189" title="VUL-0: CVE-2021-47472: kernel: net: mdiobus: Fix memory leak in __mdiobus_register" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225190" id="1225190" title="VUL-0: CVE-2021-47373: kernel: irqchip/gic-v3-its: Fix potential VPE leak on error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225191" id="1225191" title="VUL-0: CVE-2021-47374: kernel: dma-debug: prevent an error message from causing runtime problems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225192" id="1225192" title="VUL-0: CVE-2021-47473: kernel: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225193" id="1225193" title="VUL-0: CVE-2021-47375: kernel: blktrace: Fix uaf in blk_trace access after removing by sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225195" id="1225195" title="VUL-0: CVE-2021-47376: kernel: bpf: Add oversize check before call kvcalloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225198" id="1225198" title="VUL-0: CVE-2021-47478: kernel: isofs: Fix out of bound access for corrupted isofs image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225201" id="1225201" title="VUL-0: CVE-2021-47378: kernel: nvme-rdma: destroy cm id before destroy qp to avoid use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225203" id="1225203" title="VUL-0: CVE-2021-47379: kernel: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225205" id="1225205" title="VUL-0: CVE-2021-47380: kernel: HID: amd_sfh: Fix potential NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225206" id="1225206" title="VUL-0: CVE-2021-47381: kernel: ASoC: SOF: Fix DSP oops stack dump output contents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225207" id="1225207" title="VUL-0: CVE-2021-47382: kernel: s390/qeth: fix deadlock during failing recovery" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225208" id="1225208" title="VUL-0: CVE-2021-47383: kernel: tty: Fix out-of-bound vmalloc access in imageblit" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225209" id="1225209" title="VUL-0: CVE-2021-47384: kernel: hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225210" id="1225210" title="VUL-0: CVE-2021-47385: kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225214" id="1225214" title="VUL-0: CVE-2021-47388: kernel: mac80211: fix use-after-free in CCMP/GCMP RX" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225223" id="1225223" title="VUL-0: CVE-2021-47425: kernel: i2c: acpi: fix resource leak in reconfiguration device addition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225224" id="1225224" title="VUL-0: CVE-2021-47441: kernel: mlxsw: thermal: Fix out-of-bounds memory accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225225" id="1225225" title="VUL-0: CVE-2021-47427: kernel: scsi: iscsi: Fix iscsi_task use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225227" id="1225227" title="VUL-0: CVE-2021-47417: kernel: libbpf: Fix memory leak in strset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225228" id="1225228" title="VUL-0: CVE-2021-47430: kernel: x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225229" id="1225229" title="VUL-0: CVE-2021-47438: kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225230" id="1225230" title="VUL-0: CVE-2022-48710: kernel: drm/radeon: fix a possible null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225232" id="1225232" title="VUL-0: CVE-2021-47434: kernel: xhci: Fix command ring pointer corruption while aborting a command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225233" id="1225233" title="VUL-0: CVE-2021-47422: kernel: drm/nouveau/kms/nv50-: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225235" id="1225235" title="VUL-0: CVE-2021-47457: kernel: can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225236" id="1225236" title="VUL-0: CVE-2021-47408: kernel: netfilter: conntrack: serialize hash resizes and cleanups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225237" id="1225237" title="VUL-0: CVE-2021-47451: kernel: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225238" id="1225238" title="VUL-0: CVE-2021-47405: kernel: HID: usbhid: free raw_report buffers in usbhid_stop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225239" id="1225239" title="VUL-0: CVE-2021-47453: kernel: ice: Avoid crash from unnecessary IDA free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225240" id="1225240" title="VUL-0: CVE-2021-47446: kernel: drm/msm/a4xx: fix error handling in a4xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225241" id="1225241" title="VUL-0: CVE-2021-47403: kernel: ipack: ipoctal: fix module reference leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225242" id="1225242" title="VUL-0: CVE-2021-47401: kernel: ipack: ipoctal: fix stack information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225243" id="1225243" title="VUL-0: CVE-2021-47444: kernel: drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225244" id="1225244" title="VUL-0: CVE-2021-47436: kernel: usb: musb: dsps: Fix the probe error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225245" id="1225245" title="VUL-0: CVE-2021-47437: kernel: iio: adis16475: fix deadlock on frequency set" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225246" id="1225246" title="VUL-0: CVE-2021-47439: kernel: net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225247" id="1225247" title="VUL-0: CVE-2021-47435: kernel: dm: fix mempool NULL pointer race when completing IO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225248" id="1225248" title="VUL-0: CVE-2021-47440: kernel: net: encx24j600: check error in devm_regmap_init_encx24j600" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225249" id="1225249" title="VUL-0: CVE-2021-47461: kernel: userfaultfd: fix a race between writeprotect and exit_mmap()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225250" id="1225250" title="VUL-0: CVE-2021-47462: kernel: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225251" id="1225251" title="VUL-0: CVE-2021-47460: kernel: ocfs2: fix data corruption after conversion from inline format" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225252" id="1225252" title="VUL-0: CVE-2021-47458: kernel: ocfs2: mount fails with buffer overflow in strlen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225253" id="1225253" title="VUL-0: CVE-2021-47459: kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225254" id="1225254" title="VUL-0: CVE-2021-47455: kernel: ptp: Fix possible memory leak in ptp_clock_register()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225255" id="1225255" title="VUL-0: CVE-2021-47454: kernel: powerpc/smp: do not decrement idle task preempt count in CPU offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225256" id="1225256" title="VUL-0: CVE-2021-47456: kernel: can: peak_pci: peak_pci_remove(): fix UAF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225257" id="1225257" title="VUL-0: CVE-2021-47452: kernel: netfilter: nf_tables: skip netdev events generated on netns removal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225258" id="1225258" title="VUL-0: CVE-2021-47450: kernel: KVM: arm64: Fix host stage-2 PGD refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225259" id="1225259" title="VUL-0: CVE-2021-47449: kernel: ice: fix locking for Tx timestamp tracking flush" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225260" id="1225260" title="VUL-0: CVE-2021-47447: kernel: drm/msm/a3xx: fix error handling in a3xx_gpu_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225261" id="1225261" title="VUL-0: CVE-2021-47445: kernel: drm/msm: Fix null pointer dereference on pointer edp" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225262" id="1225262" title="VUL-0: CVE-2021-47443: kernel: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225263" id="1225263" title="VUL-0: CVE-2021-47442: kernel: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225268" id="1225268" title="VUL-0: CVE-2021-47386: kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225301" id="1225301" title="VUL-0: CVE-2021-47402: kernel: net: sched: flower: protect fl_walk() with rcu" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225303" id="1225303" title="VUL-0: CVE-2021-47404: kernel: HID: betop: fix slab-out-of-bounds Write in betop_probe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225304" id="1225304" title="VUL-0: CVE-2021-47406: kernel: ext4: add error checking to ext4_ext_replay_set_iblocks()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225306" id="1225306" title="VUL-0: CVE-2021-47407: kernel: KVM: x86: Handle SRCU initialization failure during page track init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225316" id="1225316" title="VUL-0: CVE-2021-47387: kernel: cpufreq: schedutil: Use kobject release() method to free sugov_tunables" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225318" id="1225318" title="VUL-0: CVE-2021-47391: kernel: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225320" id="1225320" title="VUL-0: CVE-2021-47392: kernel: RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225321" id="1225321" title="VUL-0: CVE-2021-47393: kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225322" id="1225322" title="VUL-0: CVE-2021-47480: kernel: scsi: core: Put LLD module refcnt after SCSI device is released" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225323" id="1225323" title="VUL-0: CVE-2021-47394: kernel: netfilter: nf_tables: unlink table before deleting it" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225326" id="1225326" title="VUL-0: CVE-2021-47395: kernel: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225327" id="1225327" title="VUL-0: CVE-2021-47396: kernel: mac80211-hwsim: fix late beacon hrtimer handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225328" id="1225328" title="VUL-0: CVE-2021-47399: kernel: ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225329" id="1225329" title="VUL-0: CVE-2021-47400: kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225330" id="1225330" title="VUL-0: CVE-2021-47409: kernel: usb: dwc2: check return value after calling platform_get_resource()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225331" id="1225331" title="VUL-0: CVE-2021-47410: kernel: drm/amdkfd: fix svm_migrate_fini warning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225332" id="1225332" title="VUL-0: CVE-2021-47412: kernel: block: don't call rq_qos_ops-&gt;done_bio if the bio isn't tracked" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225333" id="1225333" title="VUL-0: CVE-2021-47413: kernel: usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225334" id="1225334" title="VUL-0: CVE-2021-47414: kernel: riscv: Flush current cpu icache before other cpus" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225335" id="1225335" title="VUL-0: CVE-2021-47415: kernel: iwlwifi: mvm: Fix possible NULL dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225336" id="1225336" title="VUL-0: CVE-2021-47416: kernel: phy: mdio: fix memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225337" id="1225337" title="VUL-0: CVE-2021-47418: kernel: net_sched: fix NULL deref in fifo_set_limit()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225338" id="1225338" title="VUL-0: CVE-2021-47419: kernel: net/sched: sch_taprio: properly cancel timer from taprio_destroy()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225339" id="1225339" title="VUL-0: CVE-2021-47420: kernel: drm/amdkfd: fix a potential ttm-&gt;sg memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225341" id="1225341" title="VUL-0: CVE-2021-47465: kernel: KVM: PPC: Book3S HV: fix stack handling in idle_kvm_start_guest()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225342" id="1225342" title="VUL-0: CVE-2021-47466: kernel: mm, slub: fix potential memoryleak in kmem_cache_open()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225344" id="1225344" title="VUL-0: CVE-2021-47467: kernel: kunit: fix reference count leak in kfree_at_end" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225346" id="1225346" title="VUL-0: CVE-2021-47468: kernel: isdn: mISDN: fix sleeping function called from invalid context" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225347" id="1225347" title="VUL-0: CVE-2021-47469: kernel: spi: fix deadlock when adding SPI controllers on SPI buses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225351" id="1225351" title="VUL-0: CVE-2021-47495: kernel: usbnet: sanity check for maxpacket" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225353" id="1225353" title="VUL-0: CVE-2021-47421: kernel: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225354" id="1225354" title="VUL-0: CVE-2021-47496: kernel: net/tls: fix flipped sign in tls_err_abort() calls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225355" id="1225355" title="VUL-0: CVE-2021-47497: kernel: nvmem: fix shift-out-of-bound (UBSAN) with byte size cells" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225357" id="1225357" title="VUL-0: CVE-2021-47498: kernel: dm rq: don't queue request to blk-mq during DM suspend" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225358" id="1225358" title="VUL-0: CVE-2021-47499: kernel: iio: accel: kxcjk-1013: fix possible memory leak in probe and remove" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225360" id="1225360" title="VUL-0: CVE-2021-47500: kernel: iio: mma8452: fix trigger reference couting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225361" id="1225361" title="VUL-0: CVE-2021-47501: kernel: i40e: fix NULL pointer dereference in i40e_dbg_dump_desc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225366" id="1225366" title="VUL-0: CVE-2021-47423: kernel: drm/nouveau/debugfs: fix file release memory leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225367" id="1225367" title="VUL-0: CVE-2021-47424: kernel: i40e: Fix freeing of uninitialized misc IRQ vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225368" id="1225368" title="VUL-0: CVE-2021-47528: kernel: usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225369" id="1225369" title="VUL-0: CVE-2021-47502: kernel: ASoC: codecs: wcd934x: handle channel mappping list correctly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225370" id="1225370" title="VUL-0: CVE-2021-47426: kernel: bpf, s390: Fix potential memory leak about jit_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225372" id="1225372" title="VUL-0: CVE-2021-47518: kernel: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225373" id="1225373" title="VUL-0: CVE-2021-47529: kernel: iwlwifi: Fix memory leaks in error handling path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225374" id="1225374" title="VUL-0: CVE-2021-47503: kernel: scsi: pm80xx: do not call scsi_remove_host() in pm8001_alloc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225375" id="1225375" title="VUL-0: CVE-2021-47537: kernel: octeontx2-af: Fix a memleak bug in rvu_mbox_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225376" id="1225376" title="VUL-0: CVE-2021-47526: kernel: serial: liteuart: Fix NULL pointer dereference in -&gt;remove()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225377" id="1225377" title="VUL-0: CVE-2021-47524: kernel: serial: liteuart: fix minor-number leak on probe errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225379" id="1225379" title="VUL-0: CVE-2021-47550: kernel: drm/amd/amdgpu: fix potential memleak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225383" id="1225383" title="VUL-0: CVE-2021-47556: kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225384" id="1225384" title="VUL-0: CVE-2021-47565: kernel: scsi: mpt3sas: Fix kernel panic during drive powercycle test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225386" id="1225386" title="VUL-0: CVE-2021-47540: kernel: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225387" id="1225387" title="VUL-0: CVE-2021-47428: kernel: powerpc/64s: fix program check interrupt emergency stack path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225388" id="1225388" title="VUL-0: CVE-2021-47429: kernel: powerpc/64s: Fix unrecoverable MCE calling async handler from NMI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225390" id="1225390" title="VUL-0: CVE-2021-47431: kernel: drm/amdgpu: fix gart.bo pin_count leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225392" id="1225392" title="VUL-0: CVE-2021-47433: kernel: btrfs: fix abort logic in btrfs_replace_file_extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225393" id="1225393" title="VUL-0: CVE-2021-47464: kernel: audit: fix possible null-pointer dereference in audit_filter_rules" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225396" id="1225396" title="VUL-0: CVE-2021-47559: kernel: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225400" id="1225400" title="VUL-0: CVE-2021-47505: kernel: aio: fix use-after-free due to missing POLLFREE handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225404" id="1225404" title="VUL-0: CVE-2021-47506: kernel: nfsd: fix use-after-free due to delegation race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225405" id="1225405" title="VUL-0: CVE-2021-47507: kernel: nfsd: fix nsfd startup race (again)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225409" id="1225409" title="VUL-0: CVE-2021-47509: kernel: ALSA: pcm: oss: limit the period size to 16MB" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225410" id="1225410" title="VUL-0: CVE-2021-47510: kernel: btrfs: fix re-dirty process of tree-log nodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225411" id="1225411" title="VUL-0: CVE-2021-47511: kernel: ALSA: pcm: oss: fix negative period/buffer sizes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225425" id="1225425" title="VUL-0: CVE-2021-47514: kernel: devlink: fix netns refcount leak in devlink_nl_cmd_reload()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225427" id="1225427" title="VUL-0: CVE-2021-47516: kernel: nfp: Fix memory leak in nfp_cpp_area_cache_add()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225431" id="1225431" title="VUL-0: CVE-2021-47520: kernel: can: pch_can: pch_can_rx_normal: fix use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225435" id="1225435" title="VUL-0: CVE-2021-47521: kernel: can: sja1000: fix use after free in ems_pcmcia_add_card()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225436" id="1225436" title="VUL-0: CVE-2021-47490: kernel: drm/ttm: fix memleak in ttm_transfered_destroy" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225437" id="1225437" title="VUL-0: CVE-2021-47522: kernel: HID: bigbenff: prevent null pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225438" id="1225438" title="VUL-0: CVE-2021-47523: kernel: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225439" id="1225439" title="VUL-0: CVE-2021-47493: kernel: ocfs2: fix race between searching chunks and release journal_head from buffer_head" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225441" id="1225441" title="VUL-0: CVE-2021-47525: kernel: serial: liteuart: fix use-after-free and memleak on unbind" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225445" id="1225445" title="VUL-0: CVE-2021-47533: kernel: drm/vc4: kms: Clear the HVS FIFO commit pointer once done" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225446" id="1225446" title="VUL-0: CVE-2021-47535: kernel: drm/msm/a6xx: Allocate enough space for GMU registers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225447" id="1225447" title="VUL-0: CVE-2021-47536: kernel: net/smc: fix wrong list_del in smc_lgr_cleanup_early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225450" id="1225450" title="VUL-0: CVE-2021-47494: kernel: cfg80211: fix management registrations locking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225453" id="1225453" title="VUL-0: CVE-2021-47541: kernel: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225455" id="1225455" title="VUL-0: CVE-2021-47542: kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225461" id="1225461" title="VUL-0: REJECTED: CVE-2023-52756: kernel: pwm: Fix double shift bug" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225463" id="1225463" title="VUL-0: CVE-2021-47544: kernel: tcp: fix page frag corruption on page fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225464" id="1225464" title="VUL-0: CVE-2021-47553: kernel: sched/scs: reset task stack state in bringup_cpu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225466" id="1225466" title="VUL-0: CVE-2021-47554: kernel: vdpa_sim: avoid putting an uninitialized iova_domain" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225471" id="1225471" title="VUL-0: CVE-2023-52740: kernel: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225472" id="1225472" title="VUL-0: CVE-2023-52799: kernel: jfs: fix array-index-out-of-bounds in dbFindLeaf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225478" id="1225478" title="VUL-0: CVE-2023-52753: kernel: drm/amd/display: Avoid NULL dereference of timing generator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225479" id="1225479" title="VUL-0: CVE-2023-52741: kernel: cifs: Fix use-after-free in rdata-&gt;read_into_pages()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225482" id="1225482" title="VUL-0: CVE-2023-52742: kernel: net: USB: Fix wrong-direction WARNING in plusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225483" id="1225483" title="VUL-0: CVE-2023-52708: kernel: mmc: mmc_spi: fix error handling in mmc_spi_probe()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225488" id="1225488" title="VUL-0: CVE-2023-52733: kernel: s390/decompressor: specify __decompress() buf len to avoid overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225490" id="1225490" title="VUL-0: CVE-2023-52754: kernel: media: imon: fix access to invalid resource for the second interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225492" id="1225492" title="VUL-0: CVE-2021-47558: kernel: net: stmmac: Disable Tx queues when reconfiguring the interface" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225495" id="1225495" title="VUL-0: CVE-2021-47560: kernel: mlxsw: spectrum: protect driver from buggy firmware" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225499" id="1225499" title="VUL-0: CVE-2021-47562: kernel: ice: fix vsi-&gt;txq_map sizing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225500" id="1225500" title="VUL-0: CVE-2021-47563: kernel: ice: avoid bpf_prog refcount underflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225501" id="1225501" title="VUL-0: CVE-2021-47564: kernel: net: marvell: prestera: fix double free issue on err path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225508" id="1225508" title="VUL-0: CVE-2021-47549: kernel: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225510" id="1225510" title="VUL-0: CVE-2021-47551: kernel: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225529" id="1225529" title="VUL-0: CVE-2023-52816: kernel: drm/amdkfd: fix shift out-of-bounds issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225530" id="1225530" title="VUL-0: CVE-2023-52818: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for SMU7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225532" id="1225532" title="VUL-0: CVE-2023-52819: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for Polaris and Tonga" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225534" id="1225534" title="VUL-0: CVE-2023-52871: kernel: soc: qcom: llcc: handle a second device without data corruption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225549" id="1225549" title="VUL-0: CVE-2023-52703: kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225550" id="1225550" title="VUL-0: CVE-2023-52804: kernel: fs/jfs: Add validity check for db_maxag and db_agpref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225553" id="1225553" title="VUL-0: CVE-2023-52805: kernel: jfs: fix array-index-out-of-bounds in diAlloc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225554" id="1225554" title="VUL-0: CVE-2023-52806: kernel: ALSA: hda: Fix possible null-ptr-deref when assigning a stream" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225557" id="1225557" title="VUL-0: CVE-2023-52810: kernel: fs/jfs: Add check for negative db_l2nbperpage" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225559" id="1225559" title="VUL-0: CVE-2023-52811: kernel: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225560" id="1225560" title="VUL-0: CVE-2023-52759: kernel: gfs2: ignore negated quota changes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225565" id="1225565" title="VUL-0: CVE-2023-52814: kernel: drm/amdgpu: Fix potential null pointer derefernce" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225566" id="1225566" title="VUL-0: CVE-2023-52858: kernel: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225569" id="1225569" title="VUL-0: CVE-2023-52817: kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225570" id="1225570" title="VUL-0: CVE-2023-52763: kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225571" id="1225571" title="VUL-0: CVE-2023-52764: kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225572" id="1225572" title="VUL-0: CVE-2023-52774: kernel: s390/dasd: protect device queue against concurrent access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225577" id="1225577" title="VUL-0: CVE-2023-52832: kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225583" id="1225583" title="VUL-0: CVE-2023-52855: kernel: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225584" id="1225584" title="VUL-0: CVE-2023-52854: kernel: padata: Fix refcnt handling in padata_free_shell()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225588" id="1225588" title="VUL-0: CVE-2023-52847: kernel: media: bttv: fix use after free error due to btv-&gt;timeout timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225589" id="1225589" title="VUL-0: CVE-2023-52873: kernel: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225590" id="1225590" title="VUL-0: CVE-2023-52844: kernel: media: vidtv: psi: Add check for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225591" id="1225591" title="VUL-0: CVE-2023-52872: kernel: tty: n_gsm: fix race condition in status line change on dead connections" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225592" id="1225592" title="VUL-0: CVE-2023-52841: kernel: media: vidtv: mux: Add check and kfree for kstrdup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225595" id="1225595" title="VUL-0: CVE-2023-52833: kernel: Bluetooth: btusb: add date-&gt;evt_skb is NULL check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225599" id="1225599" title="VUL-0: CVE-2023-52834: kernel: atl1c: work around the DMA RX overflow issue" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" id="CVE-2023-52806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" id="CVE-2023-52833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" id="CVE-2023-52739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52739" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" id="CVE-2023-52745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" id="CVE-2023-52747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52747" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" id="CVE-2023-52840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" id="CVE-2023-52744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" id="CVE-2023-52834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" id="CVE-2023-52878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" id="CVE-2023-52741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" id="CVE-2023-52875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" id="CVE-2023-52870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" id="CVE-2023-52873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" id="CVE-2023-52865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" id="CVE-2023-52858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" id="CVE-2023-52876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" id="CVE-2023-52819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" id="CVE-2023-52818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" id="CVE-2023-52753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" id="CVE-2023-52817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" id="CVE-2023-52814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" id="CVE-2023-52738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52738" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" id="CVE-2023-52825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" id="CVE-2023-52816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" id="CVE-2023-52856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" id="CVE-2023-52821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" id="CVE-2023-52826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" id="CVE-2023-52867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" id="CVE-2023-52838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" id="CVE-2023-52810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" id="CVE-2023-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" id="CVE-2023-52759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" id="CVE-2023-52853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" id="CVE-2023-52791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" id="CVE-2023-52763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" id="CVE-2023-52788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" id="CVE-2023-52743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52743" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" id="CVE-2023-52799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" id="CVE-2023-52805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" id="CVE-2023-52847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" id="CVE-2023-52764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" id="CVE-2023-52754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" id="CVE-2023-52841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" id="CVE-2023-52844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" id="CVE-2023-52708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" id="CVE-2023-52730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52730" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" id="CVE-2023-52742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" id="CVE-2023-52702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" id="CVE-2023-52703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" id="CVE-2023-52854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" id="CVE-2023-52740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" id="CVE-2023-52686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" id="CVE-2023-52690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" id="CVE-2023-52756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52756" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" id="CVE-2023-52774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" id="CVE-2023-52733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" id="CVE-2023-52707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52707" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" id="CVE-2023-52871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" id="CVE-2023-52868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" id="CVE-2023-52872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" id="CVE-2023-52880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" id="CVE-2023-52789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" id="CVE-2023-52781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" id="CVE-2023-52855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" id="CVE-2023-52877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" id="CVE-2023-52798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" id="CVE-2023-52832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" id="CVE-2022-48710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48710" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" id="CVE-2022-48709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48709" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" id="CVE-2022-48708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48708" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" id="CVE-2021-47511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47511" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" id="CVE-2021-47509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47509" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" id="CVE-2021-47381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47381" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" id="CVE-2021-47502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47502" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" id="CVE-2021-47380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47380" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" id="CVE-2021-47404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47404" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" id="CVE-2021-47522" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47522" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" id="CVE-2021-47405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" id="CVE-2021-47523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47523" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" id="CVE-2021-47485" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47485" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" id="CVE-2021-47465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47465" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" id="CVE-2021-47389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47389" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" id="CVE-2021-47450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47450" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" id="CVE-2021-47390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47390" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" id="CVE-2021-47407" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47407" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" id="CVE-2021-47442" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47442" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" id="CVE-2021-47443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47443" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" id="CVE-2021-47391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47391" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" id="CVE-2021-47392" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47392" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" id="CVE-2021-47398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" id="CVE-2021-47481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47481" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" id="CVE-2021-47366" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47366" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" id="CVE-2021-47505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" id="CVE-2021-47464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" id="CVE-2021-47360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47360" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" id="CVE-2021-47379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47379" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" id="CVE-2021-47375" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47375" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" id="CVE-2021-47412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47412" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" id="CVE-2021-47376" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47376" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" id="CVE-2021-47426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47426" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" id="CVE-2021-47433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47433" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" id="CVE-2021-47510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47510" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" id="CVE-2021-47457" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47457" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" id="CVE-2021-47459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47459" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" id="CVE-2021-47520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" id="CVE-2021-47456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47456" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" id="CVE-2021-47521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" id="CVE-2021-47494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47494" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" id="CVE-2021-47488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47488" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" id="CVE-2021-47359" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47359" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" id="CVE-2021-47364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47364" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" id="CVE-2021-47477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47477" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" id="CVE-2021-47476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47476" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" id="CVE-2021-47474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47474" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" id="CVE-2021-47475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47475" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" id="CVE-2021-47387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47387" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" id="CVE-2021-47514" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47514" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" id="CVE-2021-47435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47435" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" id="CVE-2021-47498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47498" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" id="CVE-2021-47374" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47374" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" id="CVE-2021-47550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47550" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" id="CVE-2021-47551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47551" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" id="CVE-2021-47362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47362" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" id="CVE-2021-47431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47431" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" id="CVE-2021-47421" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47421" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" id="CVE-2021-47420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47420" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" id="CVE-2021-47410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47410" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" id="CVE-2021-47444" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47444" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" id="CVE-2021-47445" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47445" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" id="CVE-2021-47447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47447" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" id="CVE-2021-47446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47446" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" id="CVE-2021-47535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47535" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" id="CVE-2021-47471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47471" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" id="CVE-2021-47423" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47423" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" id="CVE-2021-47422" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47422" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" id="CVE-2021-47490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47490" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" id="CVE-2021-47533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47533" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" id="CVE-2021-47368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47368" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" id="CVE-2021-47556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47556" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" id="CVE-2021-47406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47406" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" id="CVE-2021-47393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47393" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" id="CVE-2021-47386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47386" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" id="CVE-2021-47385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47385" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" id="CVE-2021-47384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47384" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" id="CVE-2021-47425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47425" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" id="CVE-2021-47501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47501" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" id="CVE-2021-47424" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47424" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" id="CVE-2021-47453" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47453" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" id="CVE-2021-47563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47563" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" id="CVE-2021-47449" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47449" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" id="CVE-2021-47562" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47562" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" id="CVE-2021-47499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" id="CVE-2021-47437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47437" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" id="CVE-2021-47500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47500" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" id="CVE-2021-47403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47403" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" id="CVE-2021-47401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47401" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" id="CVE-2021-47373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47373" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" id="CVE-2021-47468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47468" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" id="CVE-2021-47478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47478" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" id="CVE-2021-47529" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47529" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" id="CVE-2021-47415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47415" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" id="CVE-2021-47399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47399" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" id="CVE-2021-47467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47467" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" id="CVE-2021-47417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47417" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" id="CVE-2021-47388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47388" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" id="CVE-2021-47396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47396" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" id="CVE-2021-47395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47395" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" id="CVE-2021-47361" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47361" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" id="CVE-2021-47560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47560" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" id="CVE-2021-47441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" id="CVE-2021-47462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" id="CVE-2021-47463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47463" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" id="CVE-2021-47466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" id="CVE-2021-47470" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47470" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" id="CVE-2021-47370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47370" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" id="CVE-2021-47448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47448" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" id="CVE-2021-47439" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47439" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" id="CVE-2021-47440" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47440" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" id="CVE-2021-47400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47400" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" id="CVE-2021-47372" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47372" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" id="CVE-2021-47564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47564" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" id="CVE-2021-47472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47472" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" id="CVE-2021-47541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" id="CVE-2021-47438" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47438" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" id="CVE-2021-47542" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47542" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" id="CVE-2021-47402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" id="CVE-2021-47419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47419" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" id="CVE-2021-47559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47559" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" id="CVE-2021-47536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47536" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" id="CVE-2021-47558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" id="CVE-2021-47496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47496" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" id="CVE-2021-47418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47418" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" id="CVE-2021-47408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47408" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" id="CVE-2021-47452" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47452" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" id="CVE-2021-47394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" id="CVE-2021-47451" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47451" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" id="CVE-2021-47363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47363" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" id="CVE-2021-47371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47371" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" id="CVE-2021-47518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47518" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" id="CVE-2021-47516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" id="CVE-2021-47507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" id="CVE-2021-47506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47506" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" id="CVE-2021-47378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" id="CVE-2021-47497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47497" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" id="CVE-2021-47460" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47460" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" id="CVE-2021-47493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47493" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" id="CVE-2021-47458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47458" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" id="CVE-2021-47537" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47537" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" id="CVE-2021-47484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47484" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" id="CVE-2021-47416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" id="CVE-2021-47429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47429" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" id="CVE-2021-47428" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47428" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" id="CVE-2021-47454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" id="CVE-2021-47455" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47455" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" id="CVE-2021-47483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47483" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" id="CVE-2021-47414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47414" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" id="CVE-2021-47486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47486" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" id="CVE-2021-47369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47369" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" id="CVE-2021-47382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47382" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" id="CVE-2021-47549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47549" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" id="CVE-2021-47553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" id="CVE-2021-47480" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47480" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" id="CVE-2021-47427" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47427" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" id="CVE-2021-47565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47565" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" id="CVE-2021-47503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47503" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" id="CVE-2021-47473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47473" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" id="CVE-2021-47397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47397" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" id="CVE-2021-47527" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47527" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" id="CVE-2021-47526" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47526" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" id="CVE-2021-47524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47524" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" id="CVE-2021-47525" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47525" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" id="CVE-2021-47469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" id="CVE-2021-47358" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47358" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" id="CVE-2021-47479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" id="CVE-2021-47544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47544" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" id="CVE-2021-47383" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47383" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" id="CVE-2021-47528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47528" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" id="CVE-2021-47413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" id="CVE-2021-47409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47409" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" id="CVE-2021-47436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47436" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" id="CVE-2021-47495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47495" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" id="CVE-2021-47461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47461" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" id="CVE-2021-47554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47554" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" id="CVE-2021-47367" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47367" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" id="CVE-2021-47430" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47430" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" id="CVE-2021-47434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47434" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" id="CVE-2023-52811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" id="CVE-2024-35895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" id="CVE-2024-35815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" id="CVE-2024-35914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" id="CVE-2024-35811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" id="CVE-2023-52676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" id="CVE-2021-47365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47365" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" id="CVE-2021-47489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47489" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" id="CVE-2021-47491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47491" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" id="CVE-2021-47492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" id="CVE-2020-36788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36788" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" id="CVE-2023-52654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" id="CVE-2023-52655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" id="CVE-2022-48699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48699" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" id="CVE-2022-48702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48702" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" id="CVE-2022-48701" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48701" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" id="CVE-2022-48694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48694" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" id="CVE-2022-48692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48692" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" id="CVE-2022-48671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48671" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" id="CVE-2022-48704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48704" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" id="CVE-2022-48688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48688" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" id="CVE-2022-48687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48687" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" id="CVE-2022-48673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48673" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" id="CVE-2022-48686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48686" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" id="CVE-2022-48697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48697" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" id="CVE-2022-48672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48672" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" id="CVE-2022-48695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48695" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" id="CVE-2022-48693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48693" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" id="CVE-2022-48703" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48703" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" id="CVE-2022-48700" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48700" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" id="CVE-2022-48675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48675" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" id="CVE-2022-48634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48634" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" id="CVE-2022-48632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48632" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" id="CVE-2022-48652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" id="CVE-2022-48636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48636" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" id="CVE-2024-26921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" id="CVE-2024-35863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" id="CVE-2024-35867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" id="CVE-2024-35868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" id="CVE-2024-26928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" id="CVE-2021-47540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47540" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" id="CVE-2024-26925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" id="CVE-2024-27413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" id="CVE-2024-35817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" id="CVE-2024-35904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" id="CVE-2024-26929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" id="CVE-2024-27398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" id="CVE-2024-26930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" id="CVE-2024-26840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26840" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" id="CVE-2024-26862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" id="CVE-2023-52736" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52736" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" id="CVE-2021-47482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47482" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" id="CVE-2021-47513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" id="CVE-2021-47534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47534" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" id="CVE-2024-0639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" id="CVE-2024-26852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-8111" id="PED-8111" title="https://jira.suse.com/browse/PED-8111" type="jira"/>
    </references>
    <description>

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
- CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
- CVE-2024-26930: Fixed double free of the ha-&gt;vp_map pointer (bsc#1223626).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
- CVE-2024-35905: Fixed int overflow for stack access size  (bsc#1224488).
- CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

- af_unix: annote lockless accesses to unix_tot_inflight &amp; gc_in_progress (bsc#1223384).
- af_unix: Do not use atomic ops for unix_sk(sk)-&gt;inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- filemap: remove use of wait bookmarks (bsc#1224085).
- idpf: extend tx watchdog timeout (bsc#1224137).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
- supported.conf: support tcp_dctcp module (jsc#PED-8111)
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.82.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.82.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.82.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.82.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.82.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.82.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2025</id>
    <title>Recommended update for transactional-update</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718288440"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221346" id="1221346" title="transactional-update dup for migration: somebody calls rpm from inside chroot which fails" type="bugzilla"/>
      <reference href="https://github.com/openSUSE/transactional-update#116" id="openSUSE/transactional-update#116" title="Properly handle overlay syncing failures" type="github"/>
      <reference href="https://github.com/kube-hetzner/terraform-hcloud-kube-hetzner#1287" id="kube-hetzner/terraform-hcloud-kube-hetzner#1287" title="No internet connectivity after recent microos update" type="github"/>
    </references>
    <description>This update for transactional-update fixes the following issues:

- tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot
    &quot;required for /etc syncing&quot; was deleted already. In that case
    changes in /etc might have been reset
    (gh#openSUSE/transactional-update#116)
    (gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287)
- Always use zypper of installed system (bsc#1221346)
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.1.8" release="150400.3.6.4" arch="noarch" src="noarch/dracut-transactional-update-4.1.8-150400.3.6.4.noarch.rpm">
          <filename>dracut-transactional-update-4.1.8-150400.3.6.4.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.8" release="150400.3.6.4" arch="x86_64" src="x86_64/libtukit4-4.1.8-150400.3.6.4.x86_64.rpm">
          <filename>libtukit4-4.1.8-150400.3.6.4.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150400.3.6.4" arch="src" src="src/transactional-update-4.1.8-150400.3.6.4.src.rpm">
          <filename>transactional-update-4.1.8-150400.3.6.4.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150400.3.6.4" arch="x86_64" src="x86_64/transactional-update-4.1.8-150400.3.6.4.x86_64.rpm">
          <filename>transactional-update-4.1.8-150400.3.6.4.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.1.8" release="150400.3.6.4" arch="noarch" src="noarch/transactional-update-zypp-config-4.1.8-150400.3.6.4.noarch.rpm">
          <filename>transactional-update-zypp-config-4.1.8-150400.3.6.4.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.8" release="150400.3.6.4" arch="x86_64" src="x86_64/tukit-4.1.8-150400.3.6.4.x86_64.rpm">
          <filename>tukit-4.1.8-150400.3.6.4.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.8" release="150400.3.6.4" arch="x86_64" src="x86_64/tukitd-4.1.8-150400.3.6.4.x86_64.rpm">
          <filename>tukitd-4.1.8-150400.3.6.4.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.8" release="150400.3.6.4" arch="s390x" src="s390x/libtukit4-4.1.8-150400.3.6.4.s390x.rpm">
          <filename>libtukit4-4.1.8-150400.3.6.4.s390x.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150400.3.6.4" arch="s390x" src="s390x/transactional-update-4.1.8-150400.3.6.4.s390x.rpm">
          <filename>transactional-update-4.1.8-150400.3.6.4.s390x.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.8" release="150400.3.6.4" arch="s390x" src="s390x/tukit-4.1.8-150400.3.6.4.s390x.rpm">
          <filename>tukit-4.1.8-150400.3.6.4.s390x.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.8" release="150400.3.6.4" arch="s390x" src="s390x/tukitd-4.1.8-150400.3.6.4.s390x.rpm">
          <filename>tukitd-4.1.8-150400.3.6.4.s390x.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.1.8" release="150400.3.6.4" arch="aarch64" src="aarch64/libtukit4-4.1.8-150400.3.6.4.aarch64.rpm">
          <filename>libtukit4-4.1.8-150400.3.6.4.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.1.8" release="150400.3.6.4" arch="aarch64" src="aarch64/transactional-update-4.1.8-150400.3.6.4.aarch64.rpm">
          <filename>transactional-update-4.1.8-150400.3.6.4.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.1.8" release="150400.3.6.4" arch="aarch64" src="aarch64/tukit-4.1.8-150400.3.6.4.aarch64.rpm">
          <filename>tukit-4.1.8-150400.3.6.4.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.1.8" release="150400.3.6.4" arch="aarch64" src="aarch64/tukitd-4.1.8-150400.3.6.4.aarch64.rpm">
          <filename>tukitd-4.1.8-150400.3.6.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2090</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718793535"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" id="CVE-2024-24786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226136" id="1226136" title="VUL-0: CVE-2024-24786: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224122" id="1224122" title="VUL-0: CVE-2024-3727: podman: containers/image: digest type does not guarantee valid type" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

- Update to version 4.9.5
- CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122)
- CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="150400.4.27.1" arch="src" src="src/podman-4.9.5-150400.4.27.1.src.rpm">
          <filename>podman-4.9.5-150400.4.27.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150400.4.27.1" arch="x86_64" src="x86_64/podman-4.9.5-150400.4.27.1.x86_64.rpm">
          <filename>podman-4.9.5-150400.4.27.1.x86_64.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150400.4.27.1" arch="s390x" src="s390x/podman-4.9.5-150400.4.27.1.s390x.rpm">
          <filename>podman-4.9.5-150400.4.27.1.s390x.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="150400.4.27.1" arch="aarch64" src="aarch64/podman-4.9.5-150400.4.27.1.aarch64.rpm">
          <filename>podman-4.9.5-150400.4.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2086</id>
    <title>Recommended update for gcc13</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718790558"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188441" id="1188441" title="GCC requires 11GB of memory for building libecpint for s390x in comparison to 3.3GB on x86" type="bugzilla"/>
    </references>
    <description>This update for gcc13 fixes the following issues:

Update to GCC 13.3 release

- Removed Fiji support from the GCN offload compiler as that is requiring
  Code Object version 3 which is no longer supported by llvm18.
- Avoid combine spending too much compile-time and memory doing nothing
  on s390x.  [bsc#1188441]
- Make requirement to lld version specific to avoid requiring the
  meta-package.
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="src" src="src/gcc13-13.3.0+git8781-150000.1.12.1.src.rpm">
          <filename>gcc13-13.3.0+git8781-150000.1.12.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="x86_64" src="x86_64/libgcc_s1-13.3.0+git8781-150000.1.12.1.x86_64.rpm">
          <filename>libgcc_s1-13.3.0+git8781-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="x86_64" src="x86_64/libstdc++6-13.3.0+git8781-150000.1.12.1.x86_64.rpm">
          <filename>libstdc++6-13.3.0+git8781-150000.1.12.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="s390x" src="s390x/libgcc_s1-13.3.0+git8781-150000.1.12.1.s390x.rpm">
          <filename>libgcc_s1-13.3.0+git8781-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="s390x" src="s390x/libstdc++6-13.3.0+git8781-150000.1.12.1.s390x.rpm">
          <filename>libstdc++6-13.3.0+git8781-150000.1.12.1.s390x.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="aarch64" src="aarch64/libgcc_s1-13.3.0+git8781-150000.1.12.1.aarch64.rpm">
          <filename>libgcc_s1-13.3.0+git8781-150000.1.12.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="150000.1.12.1" arch="aarch64" src="aarch64/libstdc++6-13.3.0+git8781-150000.1.12.1.aarch64.rpm">
          <filename>libstdc++6-13.3.0+git8781-150000.1.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2088</id>
    <title>Security update for openssl-3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718793447"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" id="CVE-2024-4741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225551" id="1225551" title="VUL-0: CVE-2024-4741: openssl-1_1,openssl-3: Use After Free with SSL_free_buffers" type="bugzilla"/>
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.57.1" arch="x86_64" src="x86_64/libopenssl3-3.0.8-150400.4.57.1.x86_64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.57.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.0.8" release="150400.4.57.1" arch="src" src="src/openssl-3-3.0.8-150400.4.57.1.src.rpm">
          <filename>openssl-3-3.0.8-150400.4.57.1.src.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.57.1" arch="s390x" src="s390x/libopenssl3-3.0.8-150400.4.57.1.s390x.rpm">
          <filename>libopenssl3-3.0.8-150400.4.57.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.57.1" arch="ppc64le" src="ppc64le/libopenssl3-3.0.8-150400.4.57.1.ppc64le.rpm">
          <filename>libopenssl3-3.0.8-150400.4.57.1.ppc64le.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.0.8" release="150400.4.57.1" arch="aarch64" src="aarch64/libopenssl3-3.0.8-150400.4.57.1.aarch64.rpm">
          <filename>libopenssl3-3.0.8-150400.4.57.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2089</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1718793494"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" id="CVE-2024-4741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225551" id="1225551" title="VUL-0: CVE-2024-4741: openssl-1_1,openssl-3: Use After Free with SSL_free_buffers" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.69.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.69.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.69.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.69.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.69.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.69.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.69.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.69.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.69.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.69.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="s390x" src="s390x/libopenssl-1_1-devel-1.1.1l-150400.7.69.1.s390x.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.69.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="s390x" src="s390x/libopenssl1_1-1.1.1l-150400.7.69.1.s390x.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.69.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="s390x" src="s390x/libopenssl1_1-hmac-1.1.1l-150400.7.69.1.s390x.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.69.1.s390x.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="s390x" src="s390x/openssl-1_1-1.1.1l-150400.7.69.1.s390x.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.69.1.s390x.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.69.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.69.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.69.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.69.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.69.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.69.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.69.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.69.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.69.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2171</id>
    <title>Security update for libarchive</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1719092094"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696" id="CVE-2024-20696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225971" id="1225971" title="VUL-0: CVE-2024-20696: libarchive: heap based out-of-bounds write" type="bugzilla"/>
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971).
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.5.1" release="150400.3.15.1" arch="src" src="src/libarchive-3.5.1-150400.3.15.1.src.rpm">
          <filename>libarchive-3.5.1-150400.3.15.1.src.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.15.1" arch="x86_64" src="x86_64/libarchive13-3.5.1-150400.3.15.1.x86_64.rpm">
          <filename>libarchive13-3.5.1-150400.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.15.1" arch="s390x" src="s390x/libarchive13-3.5.1-150400.3.15.1.s390x.rpm">
          <filename>libarchive13-3.5.1-150400.3.15.1.s390x.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.15.1" arch="aarch64" src="aarch64/libarchive13-3.5.1-150400.3.15.1.aarch64.rpm">
          <filename>libarchive13-3.5.1-150400.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2237</id>
    <title>Recommended update for sysconfig</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1719399675"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199093" id="1199093" title="netconfig.d/dns-resolver (as of sysconfig) still limits to 6 search domains" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194557" id="1194557" title="/var/run leftovers in wicked and/or netconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185882" id="1185882" title="/etc/resolv.conf not restored after NetworkManager VPN connection terminates" type="bugzilla"/>
    </references>
    <description>This update for sysconfig fixes the following issues:

- Update to version 0.85.9
- Revert to recommend wicked-service on &lt;= 15.4
- netconfig: remove sed dependency
- netconfig/dns-resolver: remove search limit of 6 domains (bsc#1199093)
- netconfig: cleanup /var/run leftovers (bsc#1194557)
- netconfig: update ntp man page documentation, fix typos
- spec: drop legacy migration (from sle11) and rpm-utils
- netconfig: revert NM default policy change change (bsc#1185882)
  With the change to the default policy, netconfig with NetworkManager
  as network.service accepted settings from all services/programs
  directly instead only from NetworkManager, where plugins/services
  have to deliver their settings to apply them
</description>
    <pkglist>
      <collection>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="src" src="src/sysconfig-0.85.9-150400.3.4.1.src.rpm">
          <filename>sysconfig-0.85.9-150400.3.4.1.src.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="x86_64" src="x86_64/sysconfig-0.85.9-150400.3.4.1.x86_64.rpm">
          <filename>sysconfig-0.85.9-150400.3.4.1.x86_64.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="x86_64" src="x86_64/sysconfig-netconfig-0.85.9-150400.3.4.1.x86_64.rpm">
          <filename>sysconfig-netconfig-0.85.9-150400.3.4.1.x86_64.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="s390x" src="s390x/sysconfig-0.85.9-150400.3.4.1.s390x.rpm">
          <filename>sysconfig-0.85.9-150400.3.4.1.s390x.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="s390x" src="s390x/sysconfig-netconfig-0.85.9-150400.3.4.1.s390x.rpm">
          <filename>sysconfig-netconfig-0.85.9-150400.3.4.1.s390x.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="aarch64" src="aarch64/sysconfig-0.85.9-150400.3.4.1.aarch64.rpm">
          <filename>sysconfig-0.85.9-150400.3.4.1.aarch64.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150400.3.4.1" arch="aarch64" src="aarch64/sysconfig-netconfig-0.85.9-150400.3.4.1.aarch64.rpm">
          <filename>sysconfig-netconfig-0.85.9-150400.3.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2232</id>
    <title>Recommended update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1719382995"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225963" id="1225963" title="arping from iputils 20211215: -w is broken (non-zero exit code)" type="bugzilla"/>
    </references>
    <description>This update for iputils fixes the following issues:

- Fix exit code if receive more replies than sent (bsc#1225963)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.14.1" arch="src" src="src/iputils-20211215-150400.3.14.1.src.rpm">
          <filename>iputils-20211215-150400.3.14.1.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.14.1" arch="x86_64" src="x86_64/iputils-20211215-150400.3.14.1.x86_64.rpm">
          <filename>iputils-20211215-150400.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.14.1" arch="s390x" src="s390x/iputils-20211215-150400.3.14.1.s390x.rpm">
          <filename>iputils-20211215-150400.3.14.1.s390x.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.14.1" arch="aarch64" src="aarch64/iputils-20211215-150400.3.14.1.aarch64.rpm">
          <filename>iputils-20211215-150400.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2024-2196</id>
    <title>Recommended update for wicked</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1719311841"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218668" id="1218668" title="L3: Randomly VLANs/Bonds didn't come up after reboot or wicked restart" type="bugzilla"/>
    </references>
    <description>This update for wicked fixes the following issues:

- Fix VLANs/bonds randomly not coming up after reboot or wicked restart. [bsc#1218668]
</description>
    <pkglist>
      <collection>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.27.1" arch="src" src="src/wicked-0.6.75-150400.3.27.1.src.rpm">
          <filename>wicked-0.6.75-150400.3.27.1.src.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.27.1" arch="x86_64" src="x86_64/wicked-0.6.75-150400.3.27.1.x86_64.rpm">
          <filename>wicked-0.6.75-150400.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150400.3.27.1" arch="x86_64" src="x86_64/wicked-service-0.6.75-150400.3.27.1.x86_64.rpm">
          <filename>wicked-service-0.6.75-150400.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.27.1" arch="s390x" src="s390x/wicked-0.6.75-150400.3.27.1.s390x.rpm">
          <filename>wicked-0.6.75-150400.3.27.1.s390x.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150400.3.27.1" arch="s390x" src="s390x/wicked-service-0.6.75-150400.3.27.1.s390x.rpm">
          <filename>wicked-service-0.6.75-150400.3.27.1.s390x.rpm</filename>
        </package>
        <package name="wicked" epoch="0" version="0.6.75" release="150400.3.27.1" arch="aarch64" src="aarch64/wicked-0.6.75-150400.3.27.1.aarch64.rpm">
          <filename>wicked-0.6.75-150400.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="wicked-service" epoch="0" version="0.6.75" release="150400.3.27.1" arch="aarch64" src="aarch64/wicked-service-0.6.75-150400.3.27.1.aarch64.rpm">
          <filename>wicked-service-0.6.75-150400.3.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
