<updates>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1913</id>
    <title>Recommended update for libslirp, slirp4netns</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1681907035"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201551" id="1201551" title="libslirp header file version macro is broken" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2771" id="PED-2771" title="https://jira.suse.com/browse/PED-2771" type="jira"/>
    </references>
    <description>This update for libslirp and slirp4netns fixes the following issues:

libslirp was updated to version 4.7.0+44 (current git master):

* Fix vmstate regression
* Align outgoing packets
* Bump incoming packet alignment to 8 bytes
* vmstate: only enable when building under GNU C
* ncsitest: Fix build with msvc
* Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
* ncsi: Add Mellanox Get Mac Address handler
* slirp: Add out-of-band ethernet address
* ncsi: Add OEM command handler
* ncsi: Add basic test for Get Version ID response
* ncsi: Use response header for payload length
* ncsi: Pass command header to response handlers
* ncsi: Add Get Version ID command
* ncsi: Pass Slirp structure to response handlers
* slirp: Add manufacturer's ID

Release v4.7.0

* slirp: invoke client callback before creating timers
* pingtest: port to timer_new_opaque
* introduce timer_new_opaque callback
* introduce slirp_timer_new wrapper
* icmp6: make ndp_send_ra static
* socket: Handle ECONNABORTED from recv
* bootp: fix g_str_has_prefix warning/critical
* slirp: Don't duplicate packet in tcp_reass
* Rename insque/remque -&gt; slirp_[ins|rem]que
* mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
* Replace inet_ntoa() with safer inet_ntop()
* Add VMS_END marker
* bootp: add support for UEFI HTTP boot
* IPv6 DNS proxying support
* Add missing scope_id in caching
* socket: Move closesocket(so-&gt;s_aux) to sofree
* socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
* socket: Add s_aux field to struct socket for storing auxilliary socket
* socket: Initialize so_type in socreate
* socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
* Allow to disable internal DHCP server
* slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
* CI: run integration tests with slirp4netns
* socket: Check address family for Unix-to-inet accept translation
* socket: Add debug args for tcpx_listen (inet and Unix sockets)
* socket: Restore original definition of fhost
* socket: Move &lt;sys/un.h&gt; include to socket.h
* Support Unix sockets in hostfwd
* resolv: fix IPv6 resolution on Darwin
* Use the exact sockaddr size in getnameinfo call
* Initialize sin6_scope_id to zero
* slirp_socketpair_with_oob: Connect pair through 127.0.0.1
* resolv: fix memory leak when using libresolv
* pingtest: Add a trivial ping test
* icmp: Support falling back on trying a SOCK_RAW socket

Update to version 4.6.1+7:

* Haiku: proper path to resolv.conf for DNS server
* Fix for Haiku
* dhcp: Always send DHCP_OPT_LEN bytes in options

Update to version 4.6.1:

* Fix &quot;DHCP broken in libslirp v4.6.0&quot;

Update to version 4.6.0:

* udp: check upd_input buffer size
* tftp: introduce a header structure
* tftp: check tftp_input buffer size
* upd6: check udp6_input buffer size
* bootp: check bootp_input buffer size
* bootp: limit vendor-specific area to input packet memory buffer

Update to version 4.4.0:

* socket: consume empty packets
* slirp: check pkt_len before reading protocol header
* Add DNS resolving for iOS
* sosendoob: better document what urgc is used for
* TCPIPHDR_DELTA: Fix potential negative value
* udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
* icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
* udp, udp6, icmp: handle TTL value
* ip_stripoptions use memmove

slirp4netns was updated to 1.2.0:


* Add slirp4netns --target-type=bess /path/to/bess.sock for supporting UML (#281)
* Explicitly support DHCP (#270)
* Update parson to v1.1.3 (#273) kgabis/parson@70dc239...2d7b3dd

Update to version 1.1.11:

* Add --macaddress option to specify the MAC address of the tap interface.
* Updated the man page.

Update to version 1.1.8:

Update to 1.0.0:

* --enable-sandbox is now out of experimental
</description>
    <pkglist>
      <collection>
        <package name="libslirp" epoch="0" version="4.7.0+44" release="150300.15.2" arch="src" src="src/libslirp-4.7.0+44-150300.15.2.src.rpm">
          <filename>libslirp-4.7.0+44-150300.15.2.src.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="x86_64" src="x86_64/libslirp0-4.7.0+44-150300.15.2.x86_64.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.x86_64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="src" src="src/slirp4netns-1.2.0-150300.8.5.2.src.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.src.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="x86_64" src="x86_64/slirp4netns-1.2.0-150300.8.5.2.x86_64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.x86_64.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="s390x" src="s390x/libslirp0-4.7.0+44-150300.15.2.s390x.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.s390x.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="s390x" src="s390x/slirp4netns-1.2.0-150300.8.5.2.s390x.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.s390x.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.7.0+44" release="150300.15.2" arch="aarch64" src="aarch64/libslirp0-4.7.0+44-150300.15.2.aarch64.rpm">
          <filename>libslirp0-4.7.0+44-150300.15.2.aarch64.rpm</filename>
        </package>
        <package name="slirp4netns" epoch="0" version="1.2.0" release="150300.8.5.2" arch="aarch64" src="aarch64/slirp4netns-1.2.0-150300.8.5.2.aarch64.rpm">
          <filename>slirp4netns-1.2.0-150300.8.5.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-716</id>
    <title>Recommended update for rt-tests</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667458"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-23995" id="SLE-23995" title="https://jira.suse.com/browse/SLE-23995" type="jira"/>
    </references>
    <description>This update for rt-tests fixes the following issues:

Version update from 2.2 to 2.4 (jsc#SLE-23995):

- Add aarch64 support for oslat
- Add the `--default-system` option in cyclictest
  This runs cyclictest without attempting any tuning. Power management is not suppressed so cyclictest measures the
  system as it is configured. This may result in worse realtime behaviour, but is sometimes what you are trying to
  measure.
- Fix parsing of affinity when there is a space
- Fixes in cyclicdeadline and deadline_test to prevent double mounting of cgroups
- Fixes in cyclictest to address memory access violation issues for verbose with no affinity mask
- hwlatdetect: Add option to specify cpumask
- Increase the buf size to 2048 when parse cpuinfo
- oslat: Print offending cpu number when above threshold
- rt-numa: ignore runtime cpumask if '-a CPULIST' is specified
- Significant clean-ups and fixes to hwlatdetect
- For the complete list of changes you can consult:
  * 2.4: https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
  * 2.3: https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Backport runtime fixes from upcomming release:
  * Fix threads being affined even when '-a' isn't set when using cyclictest
  * Remove arbitrary num of threads limits
  * Add error checking to connect and getsockname
  * Update hwlatdetect to integer division to prevent an error when calculating width, which assumes an integer
</description>
    <pkglist>
      <collection>
        <package name="rt-tests" epoch="0" version="2.4" release="150400.3.3.1" arch="src" src="src/rt-tests-2.4-150400.3.3.1.src.rpm">
          <filename>rt-tests-2.4-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="rt-tests" epoch="0" version="2.4" release="150400.3.3.1" arch="x86_64" src="x86_64/rt-tests-2.4-150400.3.3.1.x86_64.rpm">
          <filename>rt-tests-2.4-150400.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-658</id>
    <title>Recommended update for cloud-netconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603553"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199853" id="1199853" title="Accelerated Networking fails when static ifcfg-eth1 file present" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204549" id="1204549" title="cloud-netconfig does not support NetworkManager" type="bugzilla"/>
    </references>
    <description>This update for cloud-netconfig fixes the following issues:

- Update to version 1.7:
  + Overhaul policy routing setup
  + Support alias IPv4 ranges 
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update

- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path 
</description>
    <pkglist>
      <collection>
        <package name="cloud-netconfig-azure" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-azure-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-azure-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-azure" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-azure-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-azure-1.7-150000.25.8.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-ec2-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-ec2-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-ec2" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-ec2-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-ec2-1.7-150000.25.8.1.src.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.7" release="150000.25.8.1" arch="noarch" src="noarch/cloud-netconfig-gce-1.7-150000.25.8.1.noarch.rpm">
          <filename>cloud-netconfig-gce-1.7-150000.25.8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-netconfig-gce" epoch="0" version="1.7" release="150000.25.8.1" arch="src" src="src/cloud-netconfig-gce-1.7-150000.25.8.1.src.rpm">
          <filename>cloud-netconfig-gce-1.7-150000.25.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-713</id>
    <title>Recommended update for suse-build-key</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603565"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2777" id="PED-2777" title="https://jira.suse.com/browse/PED-2777" type="jira"/>
    </references>
    <description>This update for suse-build-key fixes the following issues:

This update provides multiple new 4096 RSA keys for SUSE Linux Enterprise
15, SUSE Manager 4.2/4.3, Storage 7.1, SUSE Registry) that we will switch
to mid of 2023. (jsc#PED-2777)

- gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SUSE Linux Enterprise (RPM and repositories).
- gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserve key for SUSE Linux Enterprise (RPM and repositories).
- suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF packages.
- build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
  New RSA 4096 key for the SUSE registry registry.suse.com, installed as
  suse-container-key-2023.pem and suse-container-key-2023.asc
- suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
  New PTF container signing key for registry.suse.com/ptf/ space.
</description>
    <pkglist>
      <collection>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.31.1" arch="noarch" src="noarch/suse-build-key-12.0-150000.8.31.1.noarch.rpm">
          <filename>suse-build-key-12.0-150000.8.31.1.noarch.rpm</filename>
        </package>
        <package name="suse-build-key" epoch="0" version="12.0" release="150000.8.31.1" arch="src" src="src/suse-build-key-12.0-150000.8.31.1.src.rpm">
          <filename>suse-build-key-12.0-150000.8.31.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-622</id>
    <title>Recommended update for tcl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603574"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206623" id="1206623" title="Tcl/Tk test string-2.20.1 fails on big endian architectures" type="bugzilla"/>
    </references>
    <description>This update for tcl fixes the following issues:

- Fix string compare -length on big endian and improve string equal on little endian. (bsc#1206623)
</description>
    <pkglist>
      <collection>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="src" src="src/tcl-8.6.12-150300.14.9.1.src.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.src.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="x86_64" src="x86_64/tcl-8.6.12-150300.14.9.1.x86_64.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.x86_64.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="s390x" src="s390x/tcl-8.6.12-150300.14.9.1.s390x.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.s390x.rpm</filename>
        </package>
        <package name="tcl" epoch="0" version="8.6.12" release="150300.14.9.1" arch="aarch64" src="aarch64/tcl-8.6.12-150300.14.9.1.aarch64.rpm">
          <filename>tcl-8.6.12-150300.14.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-756</id>
    <title>Recommended update for libappindicator</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603585"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207112" id="1207112" title="Make libappindicator3 provides compatible gtk3 symbol." type="bugzilla"/>
    </references>
    <description>This update for libappindicator fixes the following issues:

- Provide compatibility symbol required by Slack RPM  package (bsc#1207112)
</description>
    <pkglist>
      <collection>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="x86_64" src="x86_64/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libappindicator3" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="src" src="src/libappindicator3-12.10.1+bzr20170215-150200.3.3.1.src.rpm">
          <filename>libappindicator3-12.10.1+bzr20170215-150200.3.3.1.src.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="x86_64" src="x86_64/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="s390x" src="s390x/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="s390x" src="s390x/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libappindicator3-1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="aarch64" src="aarch64/libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm">
          <filename>libappindicator3-1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-AppIndicator3-0_1" epoch="0" version="12.10.1+bzr20170215" release="150200.3.3.1" arch="aarch64" src="aarch64/typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm">
          <filename>typelib-1_0-AppIndicator3-0_1-12.10.1+bzr20170215-150200.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1586</id>
    <title>Recommended update for nfs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603591"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200710" id="1200710" title="dracut-initqueue[581]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207022" id="1207022" title="kdump and fadump over nfs is failing with dracut error (CedarLake/mlx5_core/MOFED5.8)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203746" id="1203746" title="60s NFS timeout during cluster failover | __nfs4_reclaim_open_state: Lock reclaim failed!" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206781" id="1206781" title="dracut-initqueue[744]: mount.nfs: No such device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207843" id="1207843" title="nfs-utils.spec: systemd drop-in file conflicts with HA Resource Agent nfsserver" type="bugzilla"/>
    </references>
    <description>This update for nfs-utils fixes the following issues:

- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride with a drop-in with a later sequence number (bsc#1207843)
- Avoid modprobe errors when sysctl is not installed (bsc#1200710 bsc#1207022 bsc#1206781)
- Add &quot;-S scope&quot; option to rpc.nfsd to simplify fail-over cluster configuration (bsc#1203746)
</description>
    <pkglist>
      <collection>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="x86_64" src="x86_64/nfs-client-2.1.1-150100.10.32.1.x86_64.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="x86_64" src="x86_64/nfs-kernel-server-2.1.1-150100.10.32.1.x86_64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.x86_64.rpm</filename>
        </package>
        <package name="nfs-utils" epoch="0" version="2.1.1" release="150100.10.32.1" arch="src" src="src/nfs-utils-2.1.1-150100.10.32.1.src.rpm">
          <filename>nfs-utils-2.1.1-150100.10.32.1.src.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="s390x" src="s390x/nfs-client-2.1.1-150100.10.32.1.s390x.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.s390x.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="s390x" src="s390x/nfs-kernel-server-2.1.1-150100.10.32.1.s390x.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.s390x.rpm</filename>
        </package>
        <package name="nfs-client" epoch="0" version="2.1.1" release="150100.10.32.1" arch="aarch64" src="aarch64/nfs-client-2.1.1-150100.10.32.1.aarch64.rpm">
          <filename>nfs-client-2.1.1-150100.10.32.1.aarch64.rpm</filename>
        </package>
        <package name="nfs-kernel-server" epoch="0" version="2.1.1" release="150100.10.32.1" arch="aarch64" src="aarch64/nfs-kernel-server-2.1.1-150100.10.32.1.aarch64.rpm">
          <filename>nfs-kernel-server-2.1.1-150100.10.32.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1670</id>
    <title>Recommended update for cpupower</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603605"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202890" id="1202890" title="Attempting to run turbostat on SLES15 SP4 gives &quot;no such file or directory&quot; error" type="bugzilla"/>
    </references>
    <description>This update for cpupower fixes the following issues:

- Replace error with a warning if perf is unavailable (bsc#1202890)
</description>
    <pkglist>
      <collection>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="src" src="src/cpupower-5.14-150400.3.3.1.src.rpm">
          <filename>cpupower-5.14-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="x86_64" src="x86_64/cpupower-5.14-150400.3.3.1.x86_64.rpm">
          <filename>cpupower-5.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="x86_64" src="x86_64/libcpupower0-5.14-150400.3.3.1.x86_64.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="s390x" src="s390x/cpupower-5.14-150400.3.3.1.s390x.rpm">
          <filename>cpupower-5.14-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="s390x" src="s390x/libcpupower0-5.14-150400.3.3.1.s390x.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.s390x.rpm</filename>
        </package>
        <package name="cpupower" epoch="0" version="5.14" release="150400.3.3.1" arch="aarch64" src="aarch64/cpupower-5.14-150400.3.3.1.aarch64.rpm">
          <filename>cpupower-5.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="libcpupower0" epoch="0" version="5.14" release="150400.3.3.1" arch="aarch64" src="aarch64/libcpupower0-5.14-150400.3.3.1.aarch64.rpm">
          <filename>libcpupower0-5.14-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-714</id>
    <title>Recommended update for rpm</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667528"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207294" id="1207294" title="rpm is not able to generate python(abi) dependencies/provides for python 3.10" type="bugzilla"/>
    </references>
    <description>This update for rpm fixes the following issues:

- Fix missing python(abi) for 3.XX versions (bsc#1207294)
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/python-rpm-4.14.3-150300.55.1.src.rpm">
          <filename>python-rpm-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150300.55.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/rpm-4.14.3-150300.55.1.src.rpm">
          <filename>rpm-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/rpm-4.14.3-150300.55.1.x86_64.rpm">
          <filename>rpm-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="src" src="src/rpm-ndb-4.14.3-150300.55.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150300.55.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="s390x" src="s390x/python3-rpm-4.14.3-150300.55.1.s390x.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.s390x.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="s390x" src="s390x/rpm-4.14.3-150300.55.1.s390x.rpm">
          <filename>rpm-4.14.3-150300.55.1.s390x.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="s390x" src="s390x/rpm-ndb-4.14.3-150300.55.1.s390x.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.s390x.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150300.55.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/rpm-4.14.3-150300.55.1.aarch64.rpm">
          <filename>rpm-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.55.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150300.55.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150300.55.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1668</id>
    <title>Recommended update for firewalld</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667561"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206928" id="1206928" title="firewall-offline-cmd fails with ERROR: Calling pre func" type="bugzilla"/>
    </references>
    <description>This update for firewalld fixes the following issues:

- Fix `firewall-offline-cmd` command failing with error (bsc#1206928)
</description>
    <pkglist>
      <collection>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.9.1" arch="noarch" src="noarch/firewalld-0.9.3-150400.8.9.1.noarch.rpm">
          <filename>firewalld-0.9.3-150400.8.9.1.noarch.rpm</filename>
        </package>
        <package name="firewalld" epoch="0" version="0.9.3" release="150400.8.9.1" arch="src" src="src/firewalld-0.9.3-150400.8.9.1.src.rpm">
          <filename>firewalld-0.9.3-150400.8.9.1.src.rpm</filename>
        </package>
        <package name="python3-firewall" epoch="0" version="0.9.3" release="150400.8.9.1" arch="noarch" src="noarch/python3-firewall-0.9.3-150400.8.9.1.noarch.rpm">
          <filename>python3-firewall-0.9.3-150400.8.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-795</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604399"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36109" id="CVE-2022-36109" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36109" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206065" id="1206065" title="[trackerbug] Docker 20.10.21-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205375" id="1205375" title="VUL-0: CVE-2022-36109: docker: supplementary group permissions bypass" type="bugzilla"/>
    </references>
    <description>
This update for docker fixes the following issues:

Docker was updated to 20.10.23-ce.

See upstream changelog at https://docs.docker.com/engine/release-notes/#201023

Docker was updated to 20.10.21-ce (bsc#1206065)

See upstream changelog at https://docs.docker.com/engine/release-notes/#201021 

Security issues fixed:

- CVE-2022-36109: Fixed supplementary group permissions bypass (bsc#1205375)

- Fix wrong After: in docker.service, fixes bsc#1188447
- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.
- Allow to install container-selinux instead of apparmor-parser.
- Change to using systemd-sysusers
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="src" src="src/docker-20.10.23_ce-150000.175.1.src.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="x86_64" src="x86_64/docker-20.10.23_ce-150000.175.1.x86_64.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.x86_64.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="s390x" src="s390x/docker-20.10.23_ce-150000.175.1.s390x.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.s390x.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="20.10.23_ce" release="150000.175.1" arch="aarch64" src="aarch64/docker-20.10.23_ce-150000.175.1.aarch64.rpm">
          <filename>docker-20.10.23_ce-150000.175.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-875</id>
    <title>Recommended update for sg3_utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603659"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207706" id="1207706" title="sg3_utils: Upstream fixes and enhancements for rescan-scsi-bus.sh" type="bugzilla"/>
    </references>
    <description>This update for sg3_utils fixes the following issues:

- Speed large multipath scans (bsc#1207706)
</description>
    <pkglist>
      <collection>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="x86_64" src="x86_64/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="src" src="src/sg3_utils-1.47+13.75d23ac-150400.3.6.1.src.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="x86_64" src="x86_64/sg3_utils-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="s390x" src="s390x/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.s390x.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="s390x" src="s390x/sg3_utils-1.47+13.75d23ac-150400.3.6.1.s390x.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="libsgutils2-1_47-2" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="aarch64" src="aarch64/libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm">
          <filename>libsgutils2-1_47-2-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.47+13.75d23ac" release="150400.3.6.1" arch="aarch64" src="aarch64/sg3_utils-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm">
          <filename>sg3_utils-1.47+13.75d23ac-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1686</id>
    <title>Security update for libmicrohttpd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604724"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208745" id="1208745" title="VUL-0: CVE-2023-27371: libmicrohttpd: parser bug that could be used to crash servers using the MHD_PostProcessor" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371" id="CVE-2023-27371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371" type="cve"/>
    </references>
    <description>This update for libmicrohttpd fixes the following issues:

- CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745).
</description>
    <pkglist>
      <collection>
        <package name="libmicrohttpd" epoch="0" version="0.9.57" release="150000.3.3.1" arch="src" src="src/libmicrohttpd-0.9.57-150000.3.3.1.src.rpm">
          <filename>libmicrohttpd-0.9.57-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="x86_64" src="x86_64/libmicrohttpd12-0.9.57-150000.3.3.1.x86_64.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="s390x" src="s390x/libmicrohttpd12-0.9.57-150000.3.3.1.s390x.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.s390x.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.57" release="150000.3.3.1" arch="aarch64" src="aarch64/libmicrohttpd12-0.9.57-150000.3.3.1.aarch64.rpm">
          <filename>libmicrohttpd12-0.9.57-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1718</id>
    <title>Security update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604785"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0687" id="CVE-2023-0687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0687" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207571" id="1207571" title="possible regression to bcs#1166106 on SLES15SP4 - ref:_00D1igLOd._5005qK8Bxu:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207975" id="1207975" title="VUL-1: CVE-2023-0687: glibc: gmon memory corruption due wrong calculation of required buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208358" id="1208358" title="L3: glibc-2.31-150300.*: possible bug in __strncmp_avx2_rtm+0x1b3 when strncmp length parameter is over 128" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207957" id="1207957" title="AMD Cache Computation" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975)

Other issues fixed:

- Fix avx2 strncmp offset compare condition check (bsc#1208358)
- elf: Allow dlopen of filter object to work (bsc#1207571)
- powerpc: Fix unrecognized instruction errors with recent GCC
- x86: Cache computation for AMD architecture (bsc#1207957)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="src" src="src/glibc-2.31-150300.46.1.src.rpm">
          <filename>glibc-2.31-150300.46.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-devel-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-devel-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.46.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-devel-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-devel-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-locale-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-locale-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="s390x" src="s390x/glibc-locale-base-2.31-150300.46.1.s390x.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.s390x.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-devel-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-devel-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.46.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.46.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.46.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-668</id>
    <title>Security update for libX11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603697"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555" id="CVE-2022-3555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208881" id="1208881" title="L3: Matlab segfaults since libX11-6 updated to 1.6.2-12.24.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204425" id="1204425" title="VUL-0: CVE-2022-3555: libX11,xorg-x11-libX11: memory leak in _XFreeX11XCBStructure()" type="bugzilla"/>
    </references>
    <description>This update for libX11 fixes the following issues:

- Fixed a regression introduced with security update for CVE-2022-3555 (bsc#1204425, bsc#1208881)
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.6.5" release="150000.3.27.1" arch="src" src="src/libX11-1.6.5-150000.3.27.1.src.rpm">
          <filename>libX11-1.6.5-150000.3.27.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="x86_64" src="x86_64/libX11-6-1.6.5-150000.3.27.1.x86_64.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.6.5" release="150000.3.27.1" arch="noarch" src="noarch/libX11-data-1.6.5-150000.3.27.1.noarch.rpm">
          <filename>libX11-data-1.6.5-150000.3.27.1.noarch.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="x86_64" src="x86_64/libX11-xcb1-1.6.5-150000.3.27.1.x86_64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="s390x" src="s390x/libX11-6-1.6.5-150000.3.27.1.s390x.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.s390x.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="s390x" src="s390x/libX11-xcb1-1.6.5-150000.3.27.1.s390x.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.s390x.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.6.5" release="150000.3.27.1" arch="aarch64" src="aarch64/libX11-6-1.6.5-150000.3.27.1.aarch64.rpm">
          <filename>libX11-6-1.6.5-150000.3.27.1.aarch64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.6.5" release="150000.3.27.1" arch="aarch64" src="aarch64/libX11-xcb1-1.6.5-150000.3.27.1.aarch64.rpm">
          <filename>libX11-xcb1-1.6.5-150000.3.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-868</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604452"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203355" id="1203355" title="Partner-L3: [HPS Bug] Python3 crashes with message of &quot;libgcc_s.so.1 must be installed for pthread_cancel to work&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208471" id="1208471" title="VUL-0: CVE-2023-24329: python,python3,python27,python36,python39,python310: blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" id="CVE-2023-24329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329" type="cve"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="src" src="src/python3-3.6.15-150300.10.45.1.src.rpm">
          <filename>python3-3.6.15-150300.10.45.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.45.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.45.1" arch="src" src="src/python3-core-3.6.15-150300.10.45.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.45.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="s390x" src="s390x/libpython3_6m1_0-3.6.15-150300.10.45.1.s390x.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.s390x.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="s390x" src="s390x/python3-3.6.15-150300.10.45.1.s390x.rpm">
          <filename>python3-3.6.15-150300.10.45.1.s390x.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="s390x" src="s390x/python3-base-3.6.15-150300.10.45.1.s390x.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.s390x.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.45.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.45.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.45.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1298</id>
    <title>Recommended update for ndctl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682667591"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208548" id="1208548" title="ndctl command stuck in sles lpar with vpmem setup" type="bugzilla"/>
    </references>
    <description>This update for ndctl fixes the following issues:

- Fix parsing of environment variable NDCTL_TIMEOUT (bsc#1208548)
</description>
    <pkglist>
      <collection>
        <package name="libndctl6" epoch="0" version="71.1" release="150400.10.3.1" arch="x86_64" src="x86_64/libndctl6-71.1-150400.10.3.1.x86_64.rpm">
          <filename>libndctl6-71.1-150400.10.3.1.x86_64.rpm</filename>
        </package>
        <package name="ndctl" epoch="0" version="71.1" release="150400.10.3.1" arch="src" src="src/ndctl-71.1-150400.10.3.1.src.rpm">
          <filename>ndctl-71.1-150400.10.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-781</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604645"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207780" id="1207780" title="VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208959" id="1208959" title="VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208828" id="1208828" title="VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208957" id="1208957" title="VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0512" id="CVE-2023-0512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0512" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" id="CVE-2023-1127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1170" id="CVE-2023-1170" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1170" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1175" id="CVE-2023-1175" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1175" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).
- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).
- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).
- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

Updated to version 9.0 with patch level 1386.

- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="src" src="src/vim-9.0.1386-150000.5.37.1.src.rpm">
          <filename>vim-9.0.1386-150000.5.37.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="noarch" src="noarch/vim-data-common-9.0.1386-150000.5.37.1.noarch.rpm">
          <filename>vim-data-common-9.0.1386-150000.5.37.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="x86_64" src="x86_64/vim-small-9.0.1386-150000.5.37.1.x86_64.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="s390x" src="s390x/vim-small-9.0.1386-150000.5.37.1.s390x.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.s390x.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.1386" release="150000.5.37.1" arch="aarch64" src="aarch64/vim-small-9.0.1386-150000.5.37.1.aarch64.rpm">
          <filename>vim-small-9.0.1386-150000.5.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-743</id>
    <title>Recommended update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603712"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209001" id="1209001" title="FIPS 140-3: PBKDF2 requirements for gnutls" type="bugzilla"/>
    </references>
    <description>This update for gnutls fixes the following issues:

FIPS: Establish PBKDF2 additional requirements [bsc#1209001]

* Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
* Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
* Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
* Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
* Add regression tests for the new PBKDF2 requirements.
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="src" src="src/gnutls-3.7.3-150400.4.35.1.src.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="x86_64" src="x86_64/gnutls-3.7.3-150400.4.35.1.x86_64.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.35.1" arch="x86_64" src="x86_64/libgnutls30-3.7.3-150400.4.35.1.x86_64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.35.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.35.1" arch="x86_64" src="x86_64/libgnutls30-hmac-3.7.3-150400.4.35.1.x86_64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.35.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="s390x" src="s390x/gnutls-3.7.3-150400.4.35.1.s390x.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.35.1" arch="s390x" src="s390x/libgnutls30-3.7.3-150400.4.35.1.s390x.rpm">
          <filename>libgnutls30-3.7.3-150400.4.35.1.s390x.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.35.1" arch="s390x" src="s390x/libgnutls30-hmac-3.7.3-150400.4.35.1.s390x.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.35.1.s390x.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.7.3" release="150400.4.35.1" arch="aarch64" src="aarch64/gnutls-3.7.3-150400.4.35.1.aarch64.rpm">
          <filename>gnutls-3.7.3-150400.4.35.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.7.3" release="150400.4.35.1" arch="aarch64" src="aarch64/libgnutls30-3.7.3-150400.4.35.1.aarch64.rpm">
          <filename>libgnutls30-3.7.3-150400.4.35.1.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.7.3" release="150400.4.35.1" arch="aarch64" src="aarch64/libgnutls30-hmac-3.7.3-150400.4.35.1.aarch64.rpm">
          <filename>libgnutls30-hmac-3.7.3-150400.4.35.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-782</id>
    <title>Recommended update for libgcrypt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682604815"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208926" id="1208926" title="FIPS: Libgcrypt: PBKDF2 minimal iteration count and salt length" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208925" id="1208925" title="FIPS: Libgcrypt: Transition to error-state if PCT fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208924" id="1208924" title="FIPS: Libgcrypt: Avoid no-keytest in ECDSA keygen" type="bugzilla"/>
    </references>
    <description>This update for libgcrypt fixes the following issues:

- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
- FIPS: PBKDF2: Added additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  FIPS indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
</description>
    <pkglist>
      <collection>
        <package name="libgcrypt" epoch="0" version="1.9.4" release="150400.6.8.1" arch="src" src="src/libgcrypt-1.9.4-150400.6.8.1.src.rpm">
          <filename>libgcrypt-1.9.4-150400.6.8.1.src.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="x86_64" src="x86_64/libgcrypt20-1.9.4-150400.6.8.1.x86_64.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="x86_64" src="x86_64/libgcrypt20-hmac-1.9.4-150400.6.8.1.x86_64.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="s390x" src="s390x/libgcrypt20-1.9.4-150400.6.8.1.s390x.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.s390x.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="s390x" src="s390x/libgcrypt20-hmac-1.9.4-150400.6.8.1.s390x.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.s390x.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.9.4" release="150400.6.8.1" arch="aarch64" src="aarch64/libgcrypt20-1.9.4-150400.6.8.1.aarch64.rpm">
          <filename>libgcrypt20-1.9.4-150400.6.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgcrypt20-hmac" epoch="0" version="1.9.4" release="150400.6.8.1" arch="aarch64" src="aarch64/libgcrypt20-hmac-1.9.4-150400.6.8.1.aarch64.rpm">
          <filename>libgcrypt20-hmac-1.9.4-150400.6.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-879</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603725"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180207" id="1180207" title="VUL-1: CVE-2020-14394: qemu, kvm:  infinite loop in xhci_ring_chain_length()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185000" id="1185000" title="VUL-0: CVE-2021-3507: qemu,kvm: fdc: heap buffer overflow in DMA read data transfers" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3507" id="CVE-2021-3507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3507" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14394" id="CVE-2020-14394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14394" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000).
- CVE-2020-14394: Fixed infinite loop in xhci_ring_chain_length() (bsc#1180207).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="src" src="src/qemu-6.2.0-150400.37.14.2.src.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-audio-spice-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-chardev-spice-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-guest-agent-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-qxl-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="1.0.0+" release="150400.37.14.2" arch="noarch" src="noarch/qemu-ipxe-1.0.0+-150400.37.14.2.noarch.rpm">
          <filename>qemu-ipxe-1.0.0+-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.14.2" arch="noarch" src="noarch/qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm">
          <filename>qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150400.37.14.2" arch="noarch" src="noarch/qemu-sgabios-8-150400.37.14.2.noarch.rpm">
          <filename>qemu-sgabios-8-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-tools-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-ui-opengl-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-ui-spice-core-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="1.15.0_0_g2dd4b9b" release="150400.37.14.2" arch="noarch" src="noarch/qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm">
          <filename>qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.14.2.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="6.2.0" release="150400.37.14.2" arch="x86_64" src="x86_64/qemu-x86-6.2.0-150400.37.14.2.x86_64.rpm">
          <filename>qemu-x86-6.2.0-150400.37.14.2.x86_64.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-audio-spice-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-chardev-spice-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-guest-agent-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-display-qxl-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-s390x" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-s390x-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-s390x-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-tools-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-ui-opengl-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="s390x" src="s390x/qemu-ui-spice-core-6.2.0-150400.37.14.2.s390x.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.s390x.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-arm" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-arm-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-arm-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-audio-spice-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-audio-spice-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-chardev-spice-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-chardev-spice-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-guest-agent-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-guest-agent-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-qxl-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-qxl-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-gpu-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-display-virtio-vga-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-hw-usb-redirect-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-hw-usb-redirect-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-tools-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-tools-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-ui-opengl-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-ui-opengl-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="6.2.0" release="150400.37.14.2" arch="aarch64" src="aarch64/qemu-ui-spice-core-6.2.0-150400.37.14.2.aarch64.rpm">
          <filename>qemu-ui-spice-core-6.2.0-150400.37.14.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-848</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603735"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209188" id="1209188" title="VUL-0: secure boot key rotation for 202211 boothole4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209019" id="1209019" title="VUL-0: EMBARGOED: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209017" id="1209017" title="VUL-0: EMBARGOED: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209018" id="1209018" title="VUL-0: EMBARGOED: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42333" id="CVE-2022-42333" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42333" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42332" id="CVE-2022-42332" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42332" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42331" id="CVE-2022-42331" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42331" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42334" id="CVE-2022-42334" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42334" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode (bsc#1209017).
- CVE-2022-42333,CVE-2022-42334: Fixed x86/HVM pinned cache attributes mis-handling (bsc#1209018).
- CVE-2022-42331: Fixed speculative vulnerability in 32bit SYSCALL path on x86 (bsc#1209019).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.16.3_06" release="150400.4.25.1" arch="src" src="src/xen-4.16.3_06-150400.4.25.1.src.rpm">
          <filename>xen-4.16.3_06-150400.4.25.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.16.3_06" release="150400.4.25.1" arch="x86_64" src="x86_64/xen-libs-4.16.3_06-150400.4.25.1.x86_64.rpm">
          <filename>xen-libs-4.16.3_06-150400.4.25.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1796</id>
    <title>Security update for conmon</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682603743"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209307" id="1209307" title="VUL-0: conmon: build against EOL go1.18" type="bugzilla"/>
    </references>
    <description>This update for conmon fixes the following issues:

- rebuild against supported go 1.19 (bsc#1209307)
- no functional changes.
</description>
    <pkglist>
      <collection>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="src" src="src/conmon-2.1.5-150400.3.6.1.src.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.src.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="x86_64" src="x86_64/conmon-2.1.5-150400.3.6.1.x86_64.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="s390x" src="s390x/conmon-2.1.5-150400.3.6.1.s390x.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.s390x.rpm</filename>
        </package>
        <package name="conmon" epoch="0" version="2.1.5" release="150400.3.6.1" arch="aarch64" src="aarch64/conmon-2.1.5-150400.3.6.1.aarch64.rpm">
          <filename>conmon-2.1.5-150400.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2039</id>
    <title>Recommended update for lshw</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682502214"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209531" id="1209531" title="SLES15SP5: lshw command doesn't lists the nvmf disk (lpfc/nvme_core/Redfish/SLES15SP5/ZZgen4)" type="bugzilla"/>
    </references>
    <description>This update for lshw fixes the following issues:

- Update to version B.02.19.2+git.20230320 (bsc#1209531)
</description>
    <pkglist>
      <collection>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="src" src="src/lshw-B.02.19.2+git.20230320-150200.3.15.4.src.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.src.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="x86_64" src="x86_64/lshw-B.02.19.2+git.20230320-150200.3.15.4.x86_64.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="s390x" src="s390x/lshw-B.02.19.2+git.20230320-150200.3.15.4.s390x.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.s390x.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20230320" release="150200.3.15.4" arch="aarch64" src="aarch64/lshw-B.02.19.2+git.20230320-150200.3.15.4.aarch64.rpm">
          <filename>lshw-B.02.19.2+git.20230320-150200.3.15.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2060</id>
    <title>Security update for glib2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682607884"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25180" id="CVE-2023-25180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24593" id="CVE-2023-24593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24593" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210135" id="1210135" title="glib2 update is breaking gnome-shell" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209713" id="1209713" title="VUL-0: CVE-2023-25180: glib2: DoS caused by malicious serialised variant" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209714" id="1209714" title="VUL-0: CVE-2023-24593: glib2: DoS caused by handling a malicious text-form variant" type="bugzilla"/>
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant (bsc#1209714).
- CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant (bsc#1209713).

The following non-security bug was fixed:

- Fixed regression on s390x (bsc#1210135, glgo#GNOME/glib!2978).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.70.5" release="150400.3.8.1" arch="src" src="src/glib2-2.70.5-150400.3.8.1.src.rpm">
          <filename>glib2-2.70.5-150400.3.8.1.src.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/glib2-tools-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/glib2-tools-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libgio-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libglib-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libgmodule-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="s390x" src="s390x/libgobject-2_0-0-2.70.5-150400.3.8.1.s390x.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.s390x.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/glib2-tools-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>glib2-tools-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgio-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgio-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libglib-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libglib-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgmodule-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgmodule-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.70.5" release="150400.3.8.1" arch="aarch64" src="aarch64/libgobject-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm">
          <filename>libgobject-2_0-0-2.70.5-150400.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1897</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1681812038"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1109158" id="1109158" title="SLES 15 - [POWER8 32TB/192c, max. config] Soft lockup observed while running forkoff stress testing, system is up while you keep seeing soft lockups on console and dmsg (mm-)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206552" id="1206552" title="SLERT-15SP4: Direct I/O write+truncate test times out" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207168" id="1207168" title="VUL-0: CVE-2023-0394: kernel: null pointer dereference in skb_transport_offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207185" id="1207185" title="L3: Azure - RCA - Kernel panic due to mlx5_core driver issue - SFSC 00504800 - ref:_00D1igLOd._5005qJPzAo:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207574" id="1207574" title="SLES 15 SP4 - dasd: fix no record found for raw_track_access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208602" id="1208602" title="kernel: type confusion in sctp_sock_filter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208815" id="1208815" title="0 byte size of /sys/devices/system/node/node0/cpulist breaks applications that check filesize &gt;0 before opening." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208829" id="1208829" title="VUL-0: CVE-2023-23001: kernel: drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209052" id="1209052" title="VUL-0: CVE-2023-28464: kernel-source: double free in hci_conn_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209118" id="1209118" title="kernel hangs on x86_64 with recent SP4/SP5 kernel-obs-build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209547" id="1209547" title="VUL-0: CVE-2017-5753: kernel-source,kernel-source-rt,kernel-source-azure: Upstream reports spectre V1 vulnerability on netlink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209290" id="1209290" title="VUL-0: CVE-2023-28327: kernel: denial of service problem in net/unix/diag.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209292" id="1209292" title="L3: Failing paths to FC connected storage after kernel upgrade to 4.12.14-122.150-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209366" id="1209366" title="VUL-0: CVE-2023-28466: kernel: do_tls_getsockopt lacks a lock_sock call, leading to a race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209532" id="1209532" title="VUL-0: CVE-2023-1513: kernel: kvm: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209556" id="1209556" title="L3: High kworker load on systems patched to 4.12.14-122.150.1.25822.1.PTF.1206805-default - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209572" id="1209572" title="ppc64le CONFIG_HWPOISON_INJECT=y should be CONFIG_HWPOISON_INJECT=m" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209600" id="1209600" title="SLES 15 SP4 - s390/boot: simplify and fix kernel memory layout setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209634" id="1209634" title="VUL-0: CVE-2023-1281: kernel: use-after-free vulnerability inside the traffic control index filter (tcindex) allows Privilege Escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209684" id="1209684" title="L3: kernel 4.12.14-122.150.1 qla2xxx with tape drive connected multipath path loss issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209687" id="1209687" title="VUL-0: CVE-2023-1611: kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209779" id="1209779" title="VUL-0: CVE-2023-1637: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209788" id="1209788" title="VUL-0: CVE-2023-1652: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209798" id="1209798" title="kernel-default build failed due to missing(?) build-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209804" id="1209804" title="mm: memcg: fix swapcached stat accounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209805" id="1209805" title="Kernel regression: Possible integer underflow in input pipeline of ThinkPad trackpoint." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210050" id="1210050" title="Missing fixes / quirks for Thinkkpad" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210203" id="1210203" title="VUL-0: CVE-2023-1838: kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" id="CVE-2023-1611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" id="CVE-2023-1838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" id="CVE-2023-0394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" id="CVE-2023-1513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" id="CVE-2017-5753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" id="CVE-2023-28464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" id="CVE-2023-28466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" id="CVE-2023-1637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" id="CVE-2023-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" id="CVE-2023-1281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" id="CVE-2023-28327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" id="CVE-2023-23001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
- CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
- CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).

The following non-security bugs were fixed:

- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
- ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
- arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
- arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
- arm64: dts: imx8mp: correct usb clocks (git-fixes)
- arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
- arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
- arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
- atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
- Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
- ca8210: fix mac_len negative array access (git-fixes).
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
- cifs: append path to open_enter trace event (bsc#1193629).
- cifs: avoid race conditions with parallel reconnects (bsc#1193629).
- cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
- cifs: check only tcon status on tcon related functions (bsc#1193629).
- cifs: do not poll server interfaces too regularly (bsc#1193629).
- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- cifs: dump pending mids for all channels in DebugData (bsc#1193629).
- cifs: empty interface list when server does not support query interfaces (bsc#1193629).
- cifs: fix dentry lookups in directory handle cache (bsc#1193629).
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
- cifs: Fix smb2_set_path_size() (git-fixes).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
- cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
- cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
- cifs: lock chan_lock outside match_session (bsc#1193629).
- cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
- cifs: print session id while listing open files (bsc#1193629).
- cifs: return DFS root session id in DebugData (bsc#1193629).
- cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
- cifs: use DFS root session instead of tcon ses (bsc#1193629).
- clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
- debugfs: add debugfs_lookup_and_remove() (git-fixes).
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
- drm/amdkfd: Fix an illegal memory access (git-fixes).
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
- drm/i915: Preserve crtc_state-&gt;inherited during state clearing (git-fixes).
- drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
- drm/i915/active: Fix missing debug object activation (git-fixes).
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
- drm/i915/display: clean up comments (git-fixes).
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
- drm/i915/gt: perform uc late init after probe error injection (git-fixes).
- drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
- fotg210-udc: Add missing completion handler (git-fixes).
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct() (git-fixes).
- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
- hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
- i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
- i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present (git-fixes).
- Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
- KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
- kABI workaround for xhci (git-fixes).
- kABI: x86/msr: Remove .fixup usage (kabi).
- kconfig: Update config changed flag before calling callback (git-fixes).
- keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
- KVM: x86: fix sending PV IPI (git-fixes).
- KVM: x86: fix sending PV IPI (git-fixes).
- lan78xx: Add missing return code checks (git-fixes).
- lan78xx: Fix exception on link speed change (git-fixes).
- lan78xx: Fix memory allocation bug (git-fixes).
- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
- lan78xx: Fix race condition in disconnect handling (git-fixes).
- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
- lan78xx: Fix white space and style issues (git-fixes).
- lan78xx: Remove unused pause frame queue (git-fixes).
- lan78xx: Remove unused timer (git-fixes).
- lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
- lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
- locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
- mm: memcg: fix swapcached stat accounting (bsc#1209804).
- mm: mmap: remove newline at the end of the trace (git-fixes).
- mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
- mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
- mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- net: asix: fix modprobe &quot;sysfs: cannot create duplicate filename&quot; (git-fixes).
- net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
- net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
- net: usb: asix: remove redundant assignment to variable reg (git-fixes).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
- net: usb: lan78xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- NFS: Fix an Oops in nfs_d_automount() (git-fixes).
- NFS: fix disabling of swap (git-fixes).
- NFS4trace: fix state manager flag printing (git-fixes).
- NFSD: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
- NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
- NFSD: fix race to check ls_layouts (git-fixes).
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
- NFSD: Protect against filesystem freezing (git-fixes).
- NFSD: shut down the NFSv4 state objects before the filecache (git-fixes).
- NFSD: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
- NFSD: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
- NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
- NFSv4: keep state manager thread active if swap is enabled (git-fixes).
- NFSv4: provide mount option to toggle trunking discovery (git-fixes).
- NFSv4: Fix initialisation of struct nfs4_label (git-fixes).
- NFSv4: Fail client initialisation if state manager thread can't run (git-fixes).
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- nvme-tcp: always fail a request when sending it failed (bsc#1208902).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
- PCI: hv: Use async probing to reduce boot time (bsc#1207185).
- PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
- pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
- pinctrl: at91-pio4: fix domain name assignment (git-fixes).
- pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
- platform/x86: think-lmi: add debug_cmd (bsc#1210050).
- platform/x86: think-lmi: add missing type attribute (git-fixes).
- platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
- platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
- platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
- platform/x86: think-lmi: only display possible_values if available (git-fixes).
- platform/x86: think-lmi: Opcode support (bsc#1210050).
- platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
- platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
- platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
- platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
- platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
- platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
- platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
- platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
- platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
- platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
- platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
- platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
- platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
- platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
- platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
- platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
- platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove &quot;goto err_exit&quot; from hotkey_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
- platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
- platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
- platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
- platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
- platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
- platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
- platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
- platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
- platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
- pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
- powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
- powerpc/btext: add missing of_node_put (bsc#1065729).
- powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
- powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
- powerpc/kexec_file: fix implicit decl error (bsc#1194869).
- powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
- powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
- pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- regulator: Handle deferred clk (git-fixes).
- ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
- ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
- ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
- rpm/constraints.in: increase the disk size for armv6/7 to 24GB It grows and the build fails recently on SLE15-SP4/5.
- s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
- s390/dasd: fix no record found for raw_track_access (bsc#1207574).
- s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
- sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
- scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
- serial: fsl_lpuart: Fix comment typo (git-fixes).
- smb3: fix unusable share after force unmount failure (bsc#1193629).
- smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
- struct dwc3: mask new member (git-fixes).
- SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
- SUNRPC: Fix a server shutdown leak (git-fixes).
- SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
- thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
- thunderbolt: Disable interrupt auto clear for rings (git-fixes).
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
- thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
- thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
- timers: Prevent union confusion from unexpected (git-fixes)
- trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
- trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes).
- tracing: Add trace_array_puts() to write into instance (git-fixes).
- tracing: Check field value in hist_field_name() (git-fixes).
- tracing: Do not let histogram values have some modifiers (git-fixes).
- tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
- tracing: Free error logs of tracing instances (git-fixes).
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
- tracing: Make splice_read available again (git-fixes).
- tracing: Make tracepoint lockdep check actually test something (git-fixes).
- tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
- USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
- USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
- USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
- USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
- USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
- USB: dwc3: Fix a typo in field name (git-fixes).
- USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
- USB: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
- USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
- USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
- USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
- USB: ucsi: Fix ucsi-&gt;connector race (git-fixes).
- USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: xhci: tegra: fix sleep in atomic call (git-fixes).
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
- wifi: mac80211: fix qos on mesh interfaces (git-fixes).
- wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
- x86: Annotate call_on_stack() (git-fixes).
- x86: Annotate call_on_stack() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/fpu: Cache xfeature flags from CPUID (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/msr: Remove .fixup usage (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- xfs: convert ptag flags to unsigned (git-fixes).
- xfs: do not assert fail on perag references on teardown (git-fixes).
- xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
- xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
- xfs: remove xfs_setattr_time() declaration (git-fixes).
- xfs: zero inode fork buffer at allocation (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
- xhci: Free the command allocated for setting LPM if we return early (git-fixes).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.60.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.60.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="src" src="src/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="s390x" src="s390x/kernel-default-5.14.21-150400.24.60.1.s390x.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="s390x" src="s390x/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.s390x.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.s390x.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.60.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.60.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.60.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.60.1.150400.24.24.3" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.60.1.150400.24.24.3.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1992</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682422689"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1109158" id="1109158" title="SLES 15 - [POWER8 32TB/192c, max. config] Soft lockup observed while running forkoff stress testing, system is up while you keep seeing soft lockups on console and dmsg (mm-)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189998" id="1189998" title="PREEMPT_RT prerequisite backports" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198400" id="1198400" title="VUL-0: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203200" id="1203200" title="ld: missing .note.GNU-stack section implies executable stack" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206552" id="1206552" title="SLERT-15SP4: Direct I/O write+truncate test times out" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207168" id="1207168" title="VUL-0: CVE-2023-0394: kernel: null pointer dereference in skb_transport_offset" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207185" id="1207185" title="L3: Azure - RCA - Kernel panic due to mlx5_core driver issue - SFSC 00504800 - ref:_00D1igLOd._5005qJPzAo:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207574" id="1207574" title="SLES 15 SP4 - dasd: fix no record found for raw_track_access" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208602" id="1208602" title="kernel: type confusion in sctp_sock_filter()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208815" id="1208815" title="0 byte size of /sys/devices/system/node/node0/cpulist breaks applications that check filesize &gt;0 before opening." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208829" id="1208829" title="VUL-0: CVE-2023-23001: kernel: drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208902" id="1208902" title="Partner-L3: [NVME TCP] [PPLI-3535] Application IO hang until PowerStore Node reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209052" id="1209052" title="VUL-0: CVE-2023-28464: kernel-source: double free in hci_conn_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209118" id="1209118" title="kernel hangs on x86_64 with recent SP4/SP5 kernel-obs-build" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209256" id="1209256" title="prlimit: do_prlimit needs to have a speculation check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209290" id="1209290" title="VUL-0: CVE-2023-28327: kernel: denial of service problem in net/unix/diag.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209292" id="1209292" title="L3: Failing paths to FC connected storage after kernel upgrade to 4.12.14-122.150-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209366" id="1209366" title="VUL-0: CVE-2023-28466: kernel: do_tls_getsockopt lacks a lock_sock call, leading to a race condition" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209532" id="1209532" title="VUL-0: CVE-2023-1513: kernel: kvm: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209547" id="1209547" title="VUL-0: CVE-2017-5753: kernel-source,kernel-source-rt,kernel-source-azure: Upstream reports spectre V1 vulnerability on netlink" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209556" id="1209556" title="L3: High kworker load on systems patched to 4.12.14-122.150.1.25822.1.PTF.1206805-default - Need core analyzed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209572" id="1209572" title="ppc64le CONFIG_HWPOISON_INJECT=y should be CONFIG_HWPOISON_INJECT=m" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209600" id="1209600" title="SLES 15 SP4 - s390/boot: simplify and fix kernel memory layout setup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209634" id="1209634" title="VUL-0: CVE-2023-1281: kernel: use-after-free vulnerability inside the traffic control index filter (tcindex) allows Privilege Escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209635" id="1209635" title="VUL-0: CVE-2022-4744: kernel: tun: avoid double free in tun_free_netdev" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209636" id="1209636" title="VUL-0: CVE-2023-1582: kernel: Soft lockup occurred during __page_mapcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209681" id="1209681" title="Intel wifi adapter fails to show-up in configuration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209684" id="1209684" title="L3: kernel 4.12.14-122.150.1 qla2xxx with tape drive connected multipath path loss issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209687" id="1209687" title="VUL-0: CVE-2023-1611: kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209779" id="1209779" title="VUL-0: CVE-2023-1637: kernel: save/restore speculative MSRs during S3 suspend/resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209788" id="1209788" title="VUL-0: CVE-2023-1652: kernel-source-azure,kernel-source,kernel-source-rt: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209798" id="1209798" title="kernel-default build failed due to missing(?) build-id" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209799" id="1209799" title="sched/psi: Fix use-after-free in ep_remove_wait_queue()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209804" id="1209804" title="mm: memcg: fix swapcached stat accounting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209805" id="1209805" title="Kernel regression: Possible integer underflow in input pipeline of ThinkPad trackpoint." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210050" id="1210050" title="Missing fixes / quirks for Thinkkpad" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210203" id="1210203" title="VUL-0: CVE-2023-1838: kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" id="CVE-2017-5753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" id="CVE-2022-4744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" id="CVE-2023-0394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0394" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" id="CVE-2023-1281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1281" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" id="CVE-2023-1513" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1513" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" id="CVE-2023-1582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1582" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" id="CVE-2023-1611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" id="CVE-2023-1637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1637" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" id="CVE-2023-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" id="CVE-2023-1838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1838" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" id="CVE-2023-23001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23001" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" id="CVE-2023-28327" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28327" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" id="CVE-2023-28464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" id="CVE-2023-28466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28466" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779, bsc#1198400).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
- CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).
- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).

The following non-security bugs were fixed:

- ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
- ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
- ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
- ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
- Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
- Fix error path in pci-hyperv to unlock the mutex state_lock
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
- Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
- KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
- KVM: x86: fix sending PV IPI (git-fixes).
- NFS: Fix an Oops in nfs_d_automount() (git-fixes).
- NFS: fix disabling of swap (git-fixes).
- NFSD: Protect against filesystem freezing (git-fixes).
- NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
- NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
- NFSd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
- NFSd: fix race to check ls_layouts (git-fixes).
- NFSd: shut down the NFSv4 state objects before the filecache (git-fixes).
- NFSd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
- NFSd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
- NFSv4.1 provide mount option to toggle trunking discovery (git-fixes).
- NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes).
- NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes).
- NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
- NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
- NFSv4: fix state manager flag printing (git-fixes).
- NFSv4: keep state manager thread active if swap is enabled (git-fixes).
- PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
- PCI: hv: Use async probing to reduce boot time (bsc#1207185).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
- SUNRPC: Fix a server shutdown leak (git-fixes).
- SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
- SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
- USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
- USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
- USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
- USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
- USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
- USB: dwc3: Fix a typo in field name (git-fixes).
- USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
- USB: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
- USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
- USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
- USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
- USB: ucsi: Fix ucsi-&gt;connector race (git-fixes).
- USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
- USB: xhci: tegra: fix sleep in atomic call (git-fixes).
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
- arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
- arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
- arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
- arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
- arm64: dts: imx8mp: correct usb clocks (git-fixes)
- arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
- arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
- atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
- ca8210: fix mac_len negative array access (git-fixes).
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
- cifs: Fix smb2_set_path_size() (git-fixes).
- cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
- cifs: append path to open_enter trace event (bsc#1193629).
- cifs: avoid race conditions with parallel reconnects (bsc#1193629).
- cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
- cifs: check only tcon status on tcon related functions (bsc#1193629).
- cifs: do not poll server interfaces too regularly (bsc#1193629).
- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- cifs: dump pending mids for all channels in DebugData (bsc#1193629).
- cifs: empty interface list when server does not support query interfaces (bsc#1193629).
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
- cifs: fix dentry lookups in directory handle cache (bsc#1193629).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
- cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
- cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
- cifs: lock chan_lock outside match_session (bsc#1193629).
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
- cifs: print session id while listing open files (bsc#1193629).
- cifs: return DFS root session id in DebugData (bsc#1193629).
- cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
- cifs: use DFS root session instead of tcon ses (bsc#1193629).
- clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
- debugfs: add debugfs_lookup_and_remove() (git-fixes).
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
- drm/amdkfd: Fix an illegal memory access (git-fixes).
- drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
- drm/i915/active: Fix missing debug object activation (git-fixes).
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
- drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
- drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
- drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
- drm/i915/display: clean up comments (git-fixes).
- drm/i915/gt: perform uc late init after probe error injection (git-fixes).
- drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
- drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
- drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
- drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
- drm/i915: Preserve crtc_state-&gt;inherited during state clearing (git-fixes).
- drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
- efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
- fotg210-udc: Add missing completion handler (git-fixes).
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct() (git-fixes).
- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
- i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
- i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present (git-fixes).
- kABI workaround for xhci (git-fixes).
- kABI: x86/msr: Remove .fixup usage (kabi).
- kconfig: Update config changed flag before calling callback (git-fixes).
- keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
- lan78xx: Add missing return code checks (git-fixes).
- lan78xx: Fix exception on link speed change (git-fixes).
- lan78xx: Fix memory allocation bug (git-fixes).
- lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
- lan78xx: Fix race condition in disconnect handling (git-fixes).
- lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
- lan78xx: Fix white space and style issues (git-fixes).
- lan78xx: Remove unused pause frame queue (git-fixes).
- lan78xx: Remove unused timer (git-fixes).
- lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
- lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
- locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
- mm: memcg: fix swapcached stat accounting (bsc#1209804).
- mm: mmap: remove newline at the end of the trace (git-fixes).
- mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
- mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
- mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- net: asix: fix modprobe &quot;sysfs: cannot create duplicate filename&quot; (git-fixes).
- net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
- net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
- net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
- net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
- net: usb: asix: remove redundant assignment to variable reg (git-fixes).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
- net: usb: lan78xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
- net: usb: smsc95xx: Limit packet length to skb-&gt;len (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- nvme-tcp: always fail a request when sending it failed (bsc#1208902).
- pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
- pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
- pinctrl: at91-pio4: fix domain name assignment (git-fixes).
- pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
- platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
- platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
- platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
- platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
- platform/x86: think-lmi: Opcode support (bsc#1210050).
- platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
- platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
- platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
- platform/x86: think-lmi: add debug_cmd (bsc#1210050).
- platform/x86: think-lmi: add missing type attribute (git-fixes).
- platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
- platform/x86: think-lmi: only display possible_values if available (git-fixes).
- platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
- platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
- platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
- platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
- platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
- platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
- platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
- platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
- platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
- platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
- platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
- platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
- platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
- platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
- platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
- platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
- platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
- platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
- platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove &quot;goto err_exit&quot; from hotkey_init() (bsc#1210050).
- platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
- platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
- platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
- platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
- platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
- platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
- platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
- platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
- platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
- platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
- powerpc/btext: add missing of_node_put (bsc#1065729).
- powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
- powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
- powerpc/kexec_file: fix implicit decl error (bsc#1194869).
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
- powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
- powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
- powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
- powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
- powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
- ppc64le: HWPOISON_INJECT=m (bsc#1209572).
- pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
- ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
- ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
- s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
- s390/dasd: fix no record found for raw_track_access (bsc#1207574).
- s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
- sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
- scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
- serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
- serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
- serial: fsl_lpuart: Fix comment typo (git-fixes).
- smb3: fix unusable share after force unmount failure (bsc#1193629).
- smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
- struct dwc3: mask new member (git-fixes).
- thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
- thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
- thunderbolt: Disable interrupt auto clear for rings (git-fixes).
- thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
- thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
- thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
- timers: Prevent union confusion from unexpected (git-fixes)
- trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
- trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
- trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
- tracing: Add trace_array_puts() to write into instance (git-fixes).
- tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
- tracing: Free error logs of tracing instances (git-fixes).
- tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
- wifi: mac80211: fix qos on mesh interfaces (git-fixes).
- wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
- x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
- x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
- x86/fpu: Cache xfeature flags from CPUID (git-fixes).
- x86/fpu: Remove unused supervisor only offsets (git-fixes).
- x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
- x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
- x86/mce: Allow instrumentation during task work queueing (git-fixes).
- x86/mce: Mark mce_end() noinstr (git-fixes).
- x86/mce: Mark mce_panic() noinstr (git-fixes).
- x86/mce: Mark mce_read_aux() noinstr (git-fixes).
- x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
- x86/msr: Remove .fixup usage (git-fixes).
- x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
- x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
- x86/uaccess: Move variable into switch case statement (git-fixes).
- x86: Annotate call_on_stack() (git-fixes).
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
- xfs: convert ptag flags to unsigned (git-fixes).
- xfs: do not assert fail on perag references on teardown (git-fixes).
- xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
- xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
- xfs: remove xfs_setattr_time() declaration (git-fixes).
- xfs: zero inode fork buffer at allocation (git-fixes).
- xhci: Free the command allocated for setting LPM if we return early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.23.1" arch="nosrc" src="nosrc/kernel-rt-5.14.21-150400.15.23.1.nosrc.rpm">
          <filename>kernel-rt-5.14.21-150400.15.23.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.14.21" release="150400.15.23.1" arch="x86_64" src="x86_64/kernel-rt-5.14.21-150400.15.23.1.x86_64.rpm">
          <filename>kernel-rt-5.14.21-150400.15.23.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1994</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682423645"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" id="CVE-2023-1981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210328" id="1210328" title="VUL-0: CVE-2023-1981: avahi: avahi: avahi-daemon can be crashed via DBus" type="bugzilla"/>
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="src" src="src/avahi-0.8-150400.7.3.1.src.rpm">
          <filename>avahi-0.8-150400.7.3.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/avahi-0.8-150400.7.3.1.x86_64.rpm">
          <filename>avahi-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-150400.7.3.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/avahi-0.8-150400.7.3.1.s390x.rpm">
          <filename>avahi-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/libavahi-client3-0.8-150400.7.3.1.s390x.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/libavahi-common3-0.8-150400.7.3.1.s390x.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="s390x" src="s390x/libavahi-core7-0.8-150400.7.3.1.s390x.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.s390x.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/avahi-0.8-150400.7.3.1.aarch64.rpm">
          <filename>avahi-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-client3-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-client3-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-common3-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-common3-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="150400.7.3.1" arch="aarch64" src="aarch64/libavahi-core7-0.8-150400.7.3.1.aarch64.rpm">
          <filename>libavahi-core7-0.8-150400.7.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2046</id>
    <title>Security update for openssl-ibmca</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682523089"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210359" id="1210359" title="FIPS 140-3: fips enabled openssl + openssl-ibmca engine + fips enable libica fails TLS connections" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210058" id="1210058" title="SLES 15 SP4 - A timing-based side channel exists in the IBMCA provider (openssl-ibmca)" type="bugzilla"/>
    </references>
    <description>This update for openssl-ibmca fixes the following issues:

Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058) 

- Provider: Adjustments for OpenSSL versions 3.1 and 3.2 
- Provider: Support RSA blinding
- Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
- Provider: Support &quot;implicit rejection&quot; option for RSA PKCS#1 v1.5 padding
- Provider: Adjustments in OpenSSL config generator and example configs
- Engine: EC: Cache ICA key in EC_KEY object (performance improvement)


- FIPS 140-3: Correct engine handling so only the ciphers selected in the config file are activated (bsc#1210359)

</description>
    <pkglist>
      <collection>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.8.1" arch="s390x" src="s390x/openssl-ibmca-2.4.0-150400.4.8.1.s390x.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.8.1.s390x.rpm</filename>
        </package>
        <package name="openssl-ibmca" epoch="0" version="2.4.0" release="150400.4.8.1" arch="src" src="src/openssl-ibmca-2.4.0-150400.4.8.1.src.rpm">
          <filename>openssl-ibmca-2.4.0-150400.4.8.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1947</id>
    <title>Security update for dmidecode</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682079291"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30630" id="CVE-2023-30630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30630" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210418" id="1210418" title="VUL-0: CVE-2023-30630: dmidecode: potential file overwrite (dmiwrite)" type="bugzilla"/>
    </references>
    <description>This update for dmidecode fixes the following issues:

- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
</description>
    <pkglist>
      <collection>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="src" src="src/dmidecode-3.4-150400.16.8.1.src.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.src.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="x86_64" src="x86_64/dmidecode-3.4-150400.16.8.1.x86_64.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.x86_64.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.4" release="150400.16.8.1" arch="aarch64" src="aarch64/dmidecode-3.4-150400.16.8.1.aarch64.rpm">
          <filename>dmidecode-3.4-150400.16.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1939</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682068485"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191546" id="1191546" title="FIPS: mozilla-nss: service level indicator" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207209" id="1207209" title="FIPS 140-3: NSS PCT tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208999" id="1208999" title="FIPS 140-3: PBKDF2 requirements for NSS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208242" id="1208242" title="mozilla-nss-tools do not contain manpages" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS 140-3: Adjust SLI reporting for PBKDF2 parameter validation (bsc#1208999)
- FIPS 140-3: Update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases. (bsc#1191546)
- FIPS 140-3: more changes for pairwise consistency checks. (bsc#1207209)
- Add manpages to mozilla-nss-tools (bsc#1208242)
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libfreebl3-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="src" src="src/mozilla-nss-3.79.4-150400.3.29.1.src.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.4-150400.3.29.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libfreebl3-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libfreebl3-hmac-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libsoftokn3-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/libsoftokn3-hmac-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/mozilla-nss-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/mozilla-nss-certs-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="s390x" src="s390x/mozilla-nss-tools-3.79.4-150400.3.29.1.s390x.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.s390x.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libfreebl3-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libfreebl3-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.4" release="150400.3.29.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.4-150400.3.29.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.4-150400.3.29.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1967</id>
    <title>Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682342354"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208916" id="1208916" title="VUL-0: containerized-data-importer,kubevirt: built against outdated go1.17" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209359" id="1209359" title="VUL-0: CVE-2023-26484: kubevirt: virt-handler cluster takeover" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26484" id="CVE-2023-26484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26484" type="cve"/>
    </references>
    <description>This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:

- CVE-2023-26484: Limit operator secrets permission. (bsc#1209359)

kubevirt is also rebuilt with a supported GO compiler (bsc#1208916)
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.13.1" arch="src" src="src/kubevirt-0.54.0-150400.3.13.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.13.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.13.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.13.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.13.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.13.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-1966</id>
    <title>Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682342327"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208916" id="1208916" title="VUL-0: containerized-data-importer,kubevirt: built against outdated go1.17" type="bugzilla"/>
    </references>
    <description>This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues:

- build the containerized-data-importer with a supported golang compiler (bsc#1208916)
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.13.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.13.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.13.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.13.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.13.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2053</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682587885"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469" id="CVE-2023-29469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484" id="CVE-2023-28484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209918" id="1209918" title="L3: Bootstrapping a traditional client fails with dependencies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210411" id="1210411" title="VUL-0: CVE-2023-28484: libxml2,python-libxml2: NULL dereference in xmlSchemaFixupComplexType" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210412" id="1210412" title="VUL-0: CVE-2023-29469: libxml2,python-libxml2: Hashing of empty dict strings isn't deterministic" type="bugzilla"/>
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

The following non-security bug was fixed:

- Remove unneeded dependency (bsc#1209918). 
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/libxml2-2-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="src" src="src/libxml2-2.9.14-150400.5.16.1.src.rpm">
          <filename>libxml2-2.9.14-150400.5.16.1.src.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.9.14" release="150400.5.16.1" arch="src" src="src/libxml2-python-2.9.14-150400.5.16.1.src.rpm">
          <filename>libxml2-python-2.9.14-150400.5.16.1.src.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/libxml2-tools-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="x86_64" src="x86_64/python3-libxml2-2.9.14-150400.5.16.1.x86_64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="s390x" src="s390x/libxml2-2-2.9.14-150400.5.16.1.s390x.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="s390x" src="s390x/libxml2-tools-2.9.14-150400.5.16.1.s390x.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.s390x.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="s390x" src="s390x/python3-libxml2-2.9.14-150400.5.16.1.s390x.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.s390x.rpm</filename>
        </package>
        <package name="libxml2-2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/libxml2-2-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>libxml2-2-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/libxml2-tools-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>libxml2-tools-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
        <package name="python3-libxml2" epoch="0" version="2.9.14" release="150400.5.16.1" arch="aarch64" src="aarch64/python3-libxml2-2.9.14-150400.5.16.1.aarch64.rpm">
          <filename>python3-libxml2-2.9.14-150400.5.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.4-2023-2051</id>
    <title>Security update for libtpms</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.4</release>
    <issued date="1682587824"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1017" id="CVE-2023-1017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1017" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1018" id="CVE-2023-1018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1018" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206022" id="1206022" title="VUL-0: CVE-2023-1017: libtpms: OOB write in CryptParameterDecryption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206023" id="1206023" title="VUL-0: CVE-2023-1018: libtpms: OOB read in CryptParameterDecryption" type="bugzilla"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2023-1017: Fixed out-of-bounds write in CryptParameterDecryption (bsc#1206022).
- CVE-2023-1018: Fixed out-of-bounds read in CryptParameterDecryption (bsc#1206023).
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.8.2" release="150300.3.9.1" arch="src" src="src/libtpms-0.8.2-150300.3.9.1.src.rpm">
          <filename>libtpms-0.8.2-150300.3.9.1.src.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="x86_64" src="x86_64/libtpms0-0.8.2-150300.3.9.1.x86_64.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="s390x" src="s390x/libtpms0-0.8.2-150300.3.9.1.s390x.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.s390x.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.9.1" arch="aarch64" src="aarch64/libtpms0-0.8.2-150300.3.9.1.aarch64.rpm">
          <filename>libtpms0-0.8.2-150300.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
